Privacy Policy

When you use our service, we collect information in the following ways:

• Account and authentication: When you register or sign in (including OAuth for ChatGPT and MCP), we process identifiers such as your email address, display name, profile image URL, and account id. We do not store your password in plain text; authentication may be handled by our identity provider.
• Billing and subscriptions: Payment details are processed by Stripe (our payment processor); we typically receive subscription status, plan identifiers, and usage or token balances needed to operate the service—not your full card number.
• Image generation (web, API, ChatGPT): Prompts, model or resolution preferences, and generated images. Generated assets may be stored and reachable via URLs you or the assistant share.
• Other Pyxl products you enable: Content and inputs you choose to save or process—for example marketing copy for audits, text for style rewriting, code or project data, fitness or session notes, stock symbols and related market summaries, or crypto-related queries—depending on which features you use.
• Usage and logs: Technical data such as request metadata, error logs, and security signals. We avoid logging full request bodies or secrets where feasible.
• Cookies and similar technologies: On the website we may use cookies or local storage for sessions and preferences. Where enabled, we use PostHog for product analytics and event measurement; PostHog may process limited technical and usage data as described in their documentation.

The information we collect is used for the following purposes:

• To provide, maintain, and improve Pyxl services you use (image generation, MCP-connected apps, widgets, and web experiences)
• To generate, store, and deliver outputs you request (including images and tool results in ChatGPT)
• To manage subscriptions, entitlements, and usage or token limits
• To communicate with you about our services and provide customer support
• To run automated and AI-assisted processing of the inputs you submit (for example generation, rewriting, or analysis), including through subprocessors we use for models and infrastructure

When you connect a Pyxl app inside ChatGPT or another MCP client, you authorize access through OAuth. We process each tool call to fulfill your request and return structured results to the host application.

• Host environment: The client that runs the conversation (for example OpenAI's ChatGPT) receives tool inputs and outputs as part of your session. Their privacy policy and terms also apply to how they handle that data.
• Typical tool response data: We aim to return only what is needed for the feature—for example a limited account summary (such as user id, email, display name, avatar URL), subscription or plan summary, usage or token balances where relevant, and the app-specific payload you asked for (image metadata and URLs, saved project or audit results, rewritten text, workout summaries, market or crypto-related summaries, etc.). We do not intentionally expose full payment card numbers, password secrets, or unrelated profile fields in MCP tool responses.
• Widgets: Some tools load UI from our domains inside the host environment to display richer results. Those views follow this Policy.
• What we do not do via MCP: Our tools do not post to social networks, send email or SMS, or publish to third-party websites on your behalf. Data flows to the host application (for example ChatGPT) and to our own storage and APIs to operate the feature you requested.

We do not sell your personal information. However, we may share information in the following scenarios:

• Generated assets and URLs: Images and other files you create may be stored on cloud object storage and reachable by anyone who has the link.
• Service providers: We use vendors such as Supabase (database and auth), Stripe (payments), PostHog (analytics, when enabled), cloud and CDN infrastructure, AI model providers, and market or financial data providers where a feature requires it. They process data only as needed to deliver the service.
• Legal Obligations: If required by law or in response to legal requests.

We employ measures to protect your information from unauthorized access, alteration, and misuse. However, no internet-based service can guarantee absolute security.

We retain your personal data for as long as necessary to provide you with our services and as required by applicable laws. Account information is kept for the duration of your active account, and for a period of up to 12 months following account deletion. Generated images are stored until you delete them or close your account.

Depending on your location, you may have the right to access, correct, delete, or export your personal data, and to restrict or object to certain processing. You may delete your account and images through your account settings. For assistance or portability requests, contact us at support@pyxl.pro. For data processed via ChatGPT, you may also use host controls and contact us for requests we can fulfill on our systems. If you are in the EEA, UK, or Switzerland, you may lodge a complaint with your local data protection authority. We comply with GDPR (EEA), UK GDPR where applicable, and CCPA (California) requirements. Nothing in this Policy limits rights that cannot be waived under applicable law.

Our services are operated and managed from the United States. If you access our services from outside the United States, your information may be transferred to, stored, and processed in the United States and in other countries where our subprocessors operate.

Where GDPR applies, we rely on appropriate safeguards for international transfers, such as the European Commission's Standard Contractual Clauses (SCCs) with subprocessors or other mechanisms permitted by law. For users in the EEA, UK, or Switzerland, we process personal data in line with applicable data protection laws. For California residents, we comply with the California Consumer Privacy Act (CCPA) as amended.

Our services are not directed at children under 13 (or the age required by your jurisdiction), and we do not knowingly collect personal information from children. If you believe we have collected such information, contact us at support@pyxl.pro and we will take appropriate steps.

We may update this Privacy Policy from time to time. When we do, we will post the revised version on this page and update the "Last Updated" date. If changes are material, we will provide additional notice where appropriate (for example by email or an in-product notice). Your continued use of the services after the effective date constitutes your acknowledgment of the updated Policy, except where prohibited by law.

For any questions or concerns regarding this policy or your privacy, contact us at: