← Back to Pixly

Privacy Policy

Last updated: May 11, 2026

1. Who We Are

Pixly (“we,” “our,” or “the Service”) is an AI-powered image optimization platform built for Shopify merchants. We help you analyze, rename, convert, and sync product images with automatically generated SEO metadata.

Contact: privacy@pixly.app

AI Transparency DisclosureRequired by EU AI Act 2026

  • AI System Used: Pixly uses Google Gemini Flash (Vision) to analyze your product images. This AI reads each image and generates a filename, alt text description, and quality flags (e.g. low-resolution alerts).
  • What the AI sees: Only the images you explicitly upload or connect via your Shopify store. No other data is passed to the AI model.
  • What the AI does NOT do: It does not identify people, make automated decisions that affect individuals, or process any personal customer data.
  • Human in the loop: All AI-generated suggestions (filenames, alt text) are shown to you before being applied. You review and approve every change. Nothing is pushed to Shopify without your explicit confirmation.
  • Third-party AI provider: Google DeepMind. Their privacy policy applies to data processed by Gemini: policies.google.com/privacy

2. Data We Collect

  • Account data: Your email address and hashed password (via Supabase Auth).
  • Product images: Images you upload or that are fetched from your Shopify store. Stored in Supabase Storage.
  • Shopify credentials: Your store domain and Admin API access token, stored encrypted. Used only to push optimized images back to your store.
  • Usage data: Token balance, job history, and image processing state stored in our database. No analytics or tracking cookies.

3. Data Minimisation

We follow a strict data minimisation policy. We collect only what is necessary to provide the service:

  • Raw uploaded images are retained for the duration of your active session (processing job).
  • Processed images are kept for up to 30 days after sync, then automatically purged.
  • Deleted images are retained in “Recently Deleted” for 14 days only, then permanently erased.
  • We do not sell, share, or “hoard” your image data. We are in the optimization business, not the data business.

4. How We Use Your Data

  • To process and optimize your product images using AI.
  • To sync optimized images and metadata back to your Shopify store.
  • To manage your account, token balance, and subscription.
  • To send transactional emails (e.g. password reset). No marketing without explicit consent.

5. Third-Party Services

ServicePurposePrivacy Policy
SupabaseDatabase, auth, file storagesupabase.com/privacy
Google Gemini (DeepMind)AI image analysispolicies.google.com/privacy
ShopifyE-commerce integrationshopify.com/legal/privacy
Lemon SqueezyPayment processinglemonsqueezy.com/privacy
VercelHosting & edge deliveryvercel.com/legal/privacy-policy

6. Your Rights (GDPR / CCPA)

Depending on your location, you have the right to:

  • Access the personal data we hold about you.
  • Delete your account and all associated data at any time from the Account page.
  • Portability: export your image metadata on request.
  • Opt out of AI processing. You can use Pixly in manual-only mode without triggering Gemini analysis.

To exercise any right, email us at privacy@pixly.app. We will respond within 30 days.

7. Security

All data is encrypted in transit (TLS) and at rest (AES-256 via Supabase). Shopify credentials are stored with row-level security. Only your account can access your data. We conduct regular security reviews.

8. Changes to this Policy

We may update this policy to reflect changes in our practices or applicable law. We will notify you by email at least 14 days before any material changes take effect.