Privacy Policy

1. Data Controller

The data controller responsible for the processing of your personal data is:

This Privacy Policy applies to the PIXL Studio application, the PIXL engine, our website, and all related services (collectively, the "Services"). It explains how we collect, use, store, and protect your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and the Austrian Data Protection Act (Datenschutzgesetz, "DSG").

2. What Personal Data We Collect

2.1 PIXL Software (Local Processing)

PIXL Studio and the PIXL engine run entirely on your local machine. We do not collect, transmit, or have access to:

• Your artwork, sprites, tilemaps, or any creative assets
• Your PAX project files or file structure
• AI generation prompts or results
• Style learning data or LoRA training outputs
• Any telemetry or usage data

All sprite generation, art direction, and style learning occurs locally on your device. PIXL is designed to be privacy-preserving by default.

2.2 Diffusion Bridge (Optional)

If you choose to use the Diffusion Bridge feature, image generation requests are sent to a third-party AI provider (e.g., a local Stable Diffusion instance or a configured API endpoint). PIXL does not proxy these requests through our servers. You are responsible for reviewing the privacy policy of any external AI provider you configure.

2.3 Website Visitors

When you visit our website, we may process the following data:

• Technical data: IP address, browser type and version, operating system, referral URL, pages visited, date and time of access
• Cookies: Essential cookies for website functionality only (see Section 8)

2.4 Customers (Commercial Licenses)

When you purchase a commercial license, we collect:

• Contact information: Name, email address
• Company information: Company name, business address (for studio/enterprise customers)
• Billing information: Billing address, VAT number (where applicable)
• Payment data: Processed exclusively by Stripe (we do not store credit card numbers)
• Transaction records: Purchase history, subscription status, invoices

2.5 Support Communications

When you contact us for support, we process:

• Name and email address
• Content of your inquiry
• Any attachments or additional information you provide

3. Legal Basis for Processing

We process your personal data on the following legal bases under Article 6(1) GDPR:

4. Purposes of Processing

We process your personal data to:

• Provide, operate, and maintain our Services
• Process payments and manage subscriptions
• Communicate with you about your account, purchases, or support requests
• Send service-related notifications (e.g., security alerts, product updates)
• Comply with legal obligations (e.g., tax documentation, invoicing)
• Ensure the security and proper functioning of our website
• Prevent fraud and abuse

5. Recipients and International Data Transfers

We share your personal data only with the following service providers, and only to the extent necessary:

All processors are bound by data processing agreements in accordance with Article 28 GDPR.

6. Data Retention

7. Your Rights Under GDPR

Under the GDPR and Austrian DSG, you have the following rights:

• Right of Access (Art. 15): Request confirmation of whether we process your data and obtain a copy.
• Right to Rectification (Art. 16): Request correction of inaccurate or incomplete data.
• Right to Erasure (Art. 17): Request deletion of your data where no legal basis for continued processing exists.
• Right to Restriction (Art. 18): Request that we restrict processing in certain circumstances.
• Right to Data Portability (Art. 20): Request your data in a structured, machine-readable format.
• Right to Object (Art. 21): Object to processing based on legitimate interests.
• Right to Withdraw Consent (Art. 7(3)): Withdraw consent at any time without affecting prior processing.

To exercise any of these rights, contact us at lisa@tastehub.io. We will respond within one month as required by GDPR.

7.1 Right to Lodge a Complaint

You have the right to lodge a complaint with the competent supervisory authority:

8. Cookies

Our website uses only essential cookies strictly necessary for functionality. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

9. Data Security

We implement appropriate technical and organisational measures to protect your data, including:

• Encryption of data in transit (TLS/HTTPS)
• Secure payment processing via PCI-DSS compliant providers (Stripe)
• Access controls and authentication requirements
• Regular security assessments

10. Children's Privacy

Our Services are not directed at children under 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or applicable law. Material changes will be notified via email to affected customers and posted on our website.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data protection rights: