Privacy Policy

Personal data we collect

• Account data: your email address and login credentials.
• Profile & content: business name, social handles, preferences, and any text, photos, or videos you upload to generate posts.
• Enquiries: the name, email, company, and message you send through our enquiry or contact forms.
• Payment data: handled by Stripe; we never see or store your full card details.
• Usage data: basic first-party information about how the site and app are used (pages viewed, time on a page, generations made), tied to a random visitor id kept in your browser, not to your name. We do not use third-party advertising trackers.
• Demo visitors: before you try a live demo for the first time we ask for your name and email, once. From then on the usage data from that browser (which pages and demos you opened, and for how long) is linked to the name and email you gave, so that we can follow up about the demo. We do not add you to a newsletter. Our legal basis is our legitimate interest in answering people who try our products. Write to us and we delete it.
• Pixie, the site guide: the questions typed to Pixie are stored anonymously (question, page and language only, no name or IP address) for 90 days so we can improve her answers, then deleted.

How we use it

To provide and improve the service, generate your content, answer your enquiries, process payments, and contact you about your account. We do not sell your personal data.

Sharing personal data

We use trusted providers to run the service, each acting as a data processor on our behalf:

• Supabase - authentication, database, and file storage.
• Stripe - payment processing.
• Anthropic (Claude) and Replicate - AI generation of text and images.
• Vercel - hosting.
• Resend - transactional email, including enquiry notifications.

Where your data is processed

We are based in Barcelona and our decisions about your data are made in the EU. Some of the providers above process data outside the EU (for example, AI generation and hosting). Where that happens, transfers rely on the EU Standard Contractual Clauses or an equivalent safeguard included in each provider's data processing agreement. Your content is not used by us or by our AI providers to train models.

Security

Data is encrypted in transit, access is restricted to what the service needs, and payment details never touch our servers. No system is perfectly secure, but we keep the surface small.

Data retention

We keep your data while your account is active and delete it on request or a reasonable period after account closure. Enquiries (including those sent through Pixie or the scoping wizard) are kept in our leads list for as long as the conversation stays relevant, and deleted on request.

Your choices and rights

You can access, correct, export, or delete your data at any time. To request deletion of your account and associated data, email us at the address below. You may also object to processing or lodge a complaint with your local data protection authority.

Other websites

Sites we link to, and client sites we build and showcase, have their own privacy policies. This policy covers inkandpixel.co only.

How to contact us

Questions about your privacy? Email mihir.inkandpixel@gmail.com.