Privacy Policy

StorePix ("we," "us," or "our") operates the website at storepix.app (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

1. Information We Collect

Information you provide directly

• Account information: Email address when you create an account via email magic link or OAuth (Google).
• Uploaded content: Screenshots and logos you upload to generate store assets. These are stored securely in private cloud storage.
• Extension metadata: Extension name, description, and styling preferences you provide during the generation wizard.

Information collected automatically

• Usage data: Generation counts, project counts, and subscription status to enforce plan limits.
• Technical data: Server logs may temporarily include IP addresses, browser type, and request timestamps for security and debugging purposes.

Information we do NOT collect

• We do not collect, store, or process payment card information. All payment processing is handled by our Merchant of Record, Paddle.com (see Section 5).
• We do not use analytics or advertising trackers.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Generate AI-powered promotional assets from your uploaded screenshots
• Manage your account and subscription
• Enforce usage limits based on your plan
• Communicate with you about your account (e.g., subscription changes)
• Detect, prevent, and address technical issues and abuse

3. Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA) or UK, we process your personal data under the following legal bases:

• Contract performance: To provide the Service you signed up for (account management, asset generation, downloads).
• Legitimate interest: Server logging for security, fraud prevention, and service improvement.
• Consent: For any optional cookies beyond essential ones (see Section 7).

4. Data Sharing & Third-Party Services

We share your data only with the following service providers, strictly for operating the Service:

We do not sell, rent, or trade your personal data to any third party.

5. Payments & Paddle (Merchant of Record)

All payment processing for StorePix is handled by Paddle.com Market Limited("Paddle"), which acts as our Merchant of Record. This means:

• Paddle is the entity that processes your payment and appears on your bank/card statement.
• Paddle handles all billing, invoicing, sales tax/VAT calculation, and refunds.
• Paddle collects and manages your payment details (card number, billing address) directly — StorePix never sees or stores your payment card information.
• Paddle's processing of your data is governed by Paddle's Privacy Policy and Paddle's Buyer Terms.

By purchasing a StorePix subscription, you agree to Paddle's Buyer Terms in addition to our Terms of Service.

6. Data Retention

• Account data: Retained for as long as your account is active. Upon account deletion, all data (profile, projects, screenshots, generated assets) is permanently deleted via cascading database deletion.
• Deactivated accounts: If you deactivate (rather than delete) your account, your data is retained but inaccessible until you reactivate.
• Server logs: Automatically purged by our hosting provider (Vercel) per their standard retention policy (typically 1–3 days for function logs).

7. Cookies

We use a minimal number of cookies:

• Essential cookies: Authentication session cookies set by Supabase to keep you logged in. These are strictly necessary for the Service to function and do not require consent.
• Payment cookies: Paddle may set cookies during the checkout process for fraud prevention and payment completion. See Paddle's Cookie Policy.

We do not use analytics cookies, advertising cookies, or third-party tracking pixels.

8. Your Rights

Depending on your location (especially if you are in the EEA, UK, or California), you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Delete your account and all associated data (available in Settings → Danger Zone)
• Export your data (contact us and we will provide it)
• Withdraw consent for optional data processing at any time
• Object to processing based on legitimate interest
• Lodge a complaint with your local data protection authority

To exercise any of these rights, contact us at support@storepix.app.

9. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

• Row-level security (RLS) ensuring users can only access their own data
• Private storage buckets with user-scoped access policies
• HTTPS enforcement with HSTS headers
• Content Security Policy (CSP) headers
• Webhook signature verification for payment events

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

10. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence, including the United States (where our hosting and service providers operate). We ensure appropriate safeguards are in place, including reliance on providers who comply with applicable data protection frameworks.

11. Children's Privacy

The Service is not intended for individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us to have it deleted.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

StorePix
Email: support@storepix.app