Privacy policy

JPE IT AB, trading as Pixonaut, organisation number 559240-5855, Kivra: 559240-5855, 106 31 Stockholm, Sweden (“Pixonaut”, “we”) provides Pixonaut, a service businesses use to let their customers personalise products and to turn those designs into print files and orders. This policy explains the personal data Pixonaut handles. The contact for anything in it is [email protected].

Our two roles

We are the controller of account data: the data about the people who use the Pixonaut studio and its API on behalf of a business (“members”). This policy describes how we handle it.

We are the processor of shoppers’ data: the data a business’s own customers (“shoppers”) give when they personalise or order a product on that business’s site. The business (“workspace”) decides why and how that data is used and is its controller; we process it only on its instructions, under the Data processing agreement. If you are a shopper, the privacy notice of the shop you ordered from applies, and the shop is the one to ask about your data. We help it answer you.

Account data we hold, and why

• Your account: your name, email address, a hash of your password (never the password itself), and a phone number if you add one for text message notifications. To provide the service you signed up for (the contract).
• Signing in with Google or Microsoft: when you sign in with, or connect, a Google or Microsoft account, that provider tells us the account’s identifier, its email address, whether the provider has confirmed that address, and your name. We keep the identifier, so we know the account the next time, and the tokens the provider issues for it. We never receive that account’s password. To provide the service you signed up for (the contract).
• Sessions: when you sign in, a session records the time, your browser’s user agent and your IP address. To keep your account secure and to show you where you are signed in (our legitimate interest in security).
• Memberships and preferences: which workspaces you belong to, your role in each, and your settings, such as your theme and your notification choices. To provide the service (the contract).
• Pixel: the conversations you have with Pixel, the AI assistant, and the pictures you give it. To answer you and to keep your conversations for you (the contract).
• Notifications: the notifications the studio sends you, in the studio, by email or by text message. To provide the service (the contract).
• The audit log: a record of what was changed in a workspace and by whom, which names members, the addresses invitations went to, and the labels of API keys. To let a workspace see who did what, and to investigate misuse (our legitimate interest, and the workspace’s).
• Uploaded fonts: the font files a workspace uploads, the licence file attached to them, which can name the person or business the font is licensed to, and which member confirmed the workspace holds the rights to the font, and when. To provide the service (the contract), and to keep a record of who confirmed the rights (our legitimate interest, and the workspace’s).
• Billing: the workspace’s billing contact and the details of its payments, held by our payment provider. To charge for the service (the contract) and to keep accounting records (a legal obligation).
• Where you signed up from: when you followed a link to the sign-up page, the part of our site it was in, the campaign it names (its utm_ parameters) and the address of the site you came from, without its path. To learn which of our pages and campaigns bring new accounts (our legitimate interest). Until you sign up, the studio keeps them in that browser tab alone, and closing the tab clears them. They are never shown in the studio or sent to anyone.

The waitlist

When you join the waitlist on pixonaut.app, we keep the email address you give, what you said you are (a shop, a printshop, a developer or other), the page of our site you joined from, and when. To write to you when there is a place for you on Pixonaut, which is what you asked for (your consent). Our staff are told of each new address by email. We use it for nothing else, and never share it.

Visit statistics

We count visits to the marketing site at pixonaut.app and to the studio’s sign-up, log-in and email confirmation pages with Umami, which we run on our own servers: no other company receives these statistics. They record the page, the site you came from, the campaign a link names, your browser, operating system, type of device and country, and the steps of signing up: following a link to the studio, seeing the sign-up form, creating an account and confirming its address. Umami sets no cookies and stores no IP address; nothing it records identifies you or is joined to your account. No other page of the studio is counted. To learn how visitors find and use our sites (our legitimate interest).

Cookies

The marketing site at pixonaut.app and the documentation site set no cookies. The studio sets only the cookies it needs to work, all of them its own: none is set by another company, and none is used for advertising or to follow you across sites. Because each is needed for the studio to work as you asked it to, none needs your consent.

Cookie	What it is for	How long it lasts
better-auth.session_token (__Secure-better-auth.session_token over https), and the other better-auth. cookies	Your signed-in session, and the step of signing in with a second factor	Until you sign out or the session expires
pixonaut-tenant	Which of your workspaces is open	One year
pixonaut-language	The language you chose for the studio	One year
pixonaut-theme	Your light or dark theme	One year
pixonaut-sidebar, pixonaut-pixel	Whether the sidebar and the Pixel panel are open, and how wide	One year
pixonaut-…-list-view, pixonaut-designs-view, pixonaut-…-panel	How you last arranged a list: its columns, sort and panels	One year
pixonaut-builder-auto-save, pixonaut-ink-notation	Whether the builder saves on its own, and how ink colours are written	One year

Shoppers’ data we process for a workspace

On a workspace’s instructions, Pixonaut processes:

• an order’s recipient: name, email address, phone number, the address the order ships to, and the final recipient where it is different;
• the text a shopper types and the pictures they upload into a design, in the design’s revisions, proofs and print files;
• an address given through an address capture link.

Who receives personal data, and where

We use other companies (“subprocessors”) for parts of the service, each only for its part. By category, and where they process it:

• Storage and hosting — the database, files and servers: in the European Union, in Finland. Encrypted backups of the database and the print files are kept in Germany, so the data is held in Finland and Germany.
• Email and text messages — the messages the platform sends, and the addresses they go to: in the European Union, in Ireland.
• AI inference — the requests Pixel sends, with the prompts, the conversation and the design’s text and pictures they need: in the United States.
• Picture generation, upscaling and segmentation — only when a picture is generated or upscaled, a photo’s background is removed, or a picture is segmented (its regions masked, or its depth read): the prompt and any reference pictures it needs, or the picture itself. A photo a shopper uploads may be sent to have its background removed. In the United States. The provider deletes what it receives, and the result, within one hour, except a picture uploaded to be upscaled, which is deleted when the upscale ends and within 24 hours at most.
• Print partners — only for an order a workspace sends to one: the order’s recipient and its print files, in the United States.
• Payments — a workspace’s billing details: our payment provider, in the European Union and the United States. Shoppers’ data never goes to it.
• Sign-in providers — Google and Microsoft, only when you choose to sign in with one of them: you sign in on their page, and they tell us who you are, as described above. They handle your sign-in under their own privacy policies, as controllers in their own right, not on our behalf.
• Network and delivery — the traffic to Pixonaut’s sites, the API and the SDK’s files passes through a content delivery network, worldwide.

The Subprocessors page names each company, what it receives and when. A custom printshop a workspace sets up receives order data as that workspace’s own recipient, not as ours.

When personal data leaves the European Economic Area, the transfer rests on the EU-US Data Privacy Framework or on the European Commission’s Standard Contractual Clauses; the subprocessor list names which, per company.

We never sell personal data, and no customer content is used to train AI models.

How long we keep it

• Account data is kept while your account exists. When you delete your account it is deleted, except the audit log’s entries, which a workspace keeps as its record, and what the law requires us to keep, such as accounting records.
• Sessions end when you sign out or when they expire.
• A waitlist address is kept until we have written to offer you a place, or until you ask us to remove it, whichever comes first; then it is deleted. To be removed, write to [email protected] from that address.
• An uploaded font’s licence file and the record of who confirmed the rights to it are kept until the workspace deletes the font, or until the workspace itself is deleted. The record of who confirmed stays when that member deletes their account.
• Shoppers’ data is kept as the workspace has chosen: uploads, a design’s content, its print files and an order’s recipient data are erased the number of days after an order is finished that the workspace has set, and a workspace can erase them sooner on request. A picture a shopper uploads and no design keeps, such as one left in a designer that was never submitted, is deleted when the workspace’s upload retention ends: seven days after the upload by default.
• A workspace whose paid plan ends, cancelled or unpaid, moves to the free plan and keeps its data until its admin deletes it.
• A workspace we terminate, with the notice the terms give, can export its data until the termination takes effect; then it is deleted.
• A workspace its admin deletes is deleted at once, with every member account that belongs to no other workspace. It cannot be undone.
• Backups of the database and the print files are kept for 30 days, encrypted, in Germany, and then deleted. Data deleted from the service is gone from the backups once the last backup that held it is deleted.

Your rights

You have the right to:

• access the personal data we hold about you, and get a copy of it;
• export your data in a portable format;
• have it corrected if it is wrong;
• have it erased (erasure), by deleting your account;
• withdraw your consent to being on the waitlist, at any time, by asking us to remove your address;
• object to processing based on our legitimate interest, and ask us to restrict it;
• complain to a supervisory authority: in Sweden, Integritetsskyddsmyndigheten (IMY), or the authority where you live or work.

To use them, export your data or delete your account from your account settings in the studio, or write to [email protected]. We answer within one month.

Changes to this policy

When we change this policy we publish the new version here, with the date it takes effect, and tell members of a material change by email before it takes effect.