Home

Privacy policy

PIXIO Privacy Policy

Last updated: 9 september 2026
This Privacy Policy explains how Trendformer Limited (“Trendformer”, “PIXIO”, “we”, “us” or “our”) collects, uses, discloses, stores and otherwise processes personal data in connection with the PIXIO mobile application, our website, online store, and the services, functionalities and features made available through or in connection with them (together, the “Services”).
This Privacy Policy is intended to apply to our Services generally, regardless of the particular features available at any given time and regardless of whether you use the Services as a registered user or without creating an account.
Certain features may involve additional or more specific processing. Where appropriate, we provide additional information in this Privacy Policy, in Appendix 1, or through a notice displayed at or before the point where the relevant personal data is collected.
SCOPE OF THIS PRIVACY POLICY
This Privacy Policy applies to personal data processed by us in connection with the Services, including personal data:
  • provided directly by you;
  • collected automatically when you interact with the Services;
  • generated as a result of your use of the Services;
  • received from third parties where you choose to interact with those third parties through the Services.
This Privacy Policy applies to both registered and unregistered users.
Some Services may involve the submission, collection, analysis, transformation or generation of content or may use artificial intelligence, machine-learning or other automated technologies. Where such processing involves personal data, the relevant practices are described in the applicable sections of this Privacy Policy.
This Privacy Policy does not apply to third-party websites, applications, products or services that you access independently from PIXIO. Those third parties are responsible for their own privacy practices.
For clarity, this exclusion does not apply to service providers that we engage to process personal data on our behalf in order to provide PIXIO Services. Our disclosures to such service providers are described in this Privacy Policy and, in relation to AI service providers, in Appendix 1.
WHO WE ARE
Trendformer Limited is responsible for determining how and why personal data is processed in connection with the Services and acts as the controller, business, data user or equivalent responsible entity under applicable data protection laws.
Company details
Trendformer Limited
604, Tower A, New Trade Plaza
6 On Ping Street
Shatin, N.T.
Hong Kong
Privacy contact:  [email protected]
ADDITIONAL PRIVACY NOTICES
We may provide additional or contextual privacy information where a particular feature or processing activity materially differs from the practices described in this Privacy Policy or where additional notice is required by applicable law.
Such information may be provided at or before the point at which the relevant personal data is collected.
Any additional notice supplements this Privacy Policy. Where applicable law requires consent, parental authorisation or another affirmative choice, we will obtain it separately where required.
PERSONAL DATA WE MAY PROCESS
The personal data we process depends on the Services and features you use.
Account and Identity Data
Where account functionality is available, this may include:
  • name;
  • username or other account identifier;
  • email address;
  • authentication information;
  • information received from a third-party authentication provider if you choose to use one;
  • account status and settings.
User Content
“User Content” means content that you choose to provide through the Services, including, where applicable:
  • photographs and images;
  • camera captures;
  • text;
  • prompts and instructions;
  • other content submitted for analysis, transformation or generation.
User Content may contain personal data relating to you or another person.
Generated Content
Certain Services may create or transform content based on User Content you provide.
We may therefore process:
  • generated images;
  • generated avatars;
  • transformed images;
  • generated text;
  • other AI-generated or digitally generated outputs.
Whether generated content is retained by PIXIO after being delivered to you depends on the relevant functionality and is described in the Data Retention section below.
Technical, Device and Network Data
We may process technical information such as:
  • IP address;
  • device type;
  • operating system;
  • application version;
  • device or application identifiers;
  • language settings;
  • time zone or regional settings;
  • request timestamps;
  • network and connection information;
  • crash and diagnostic information.
We do not collect precise geolocation data, such as GPS coordinates, unless a particular feature expressly requires it and appropriate notice is provided.
We may use your IP address to determine your approximate location, such as your country or general region, for purposes such as selecting the appropriate language, regional version or configuration of the Services. We do not use IP-based location information to determine your precise physical location.
Usage Data
We may process information about use of the Services, such as:
  • features accessed;
  • generation or processing requests;
  • request status;
  • successful and unsuccessful requests;
  • applicable usage counts;
  • feature entitlements;
  • interactions with the Services.
Security and Abuse-Prevention Data
We may process information reasonably necessary to:
  • apply usage and generation limits;
  • protect the Services;
  • prevent fraud or misuse;
  • detect attempts to circumvent technical restrictions;
  • investigate security incidents.
This may include IP addresses, request timestamps, generation counts, security events and related technical identifiers.
Transaction and Purchase Data
Where paid Services or products are available through the App, our website or online store, payments may be processed by third-party platforms or payment providers, including Apple and Google where applicable.
Depending on the purchase channel, we may process:
  • transaction identifier;
  • purchase or subscription status;
  • purchased product, Service or entitlement;
  • order details;
  • transaction date;
  • billing or contact information;
  • delivery information, where applicable; and
  • limited receipt or payment confirmation information.
Where payment details are processed directly by a third-party payment provider, we do not receive your full payment card details.
Communications and Support Data
If you contact us, we may process:
  • your name;
  • email address;
  • correspondence;
  • support requests;
  • attachments;
  • technical information you provide in connection with a support request.
Age and Parental Authorisation Data
Where required to comply with laws protecting children or younger users, we may process limited information necessary to:
  • determine whether age-related restrictions apply;
  • obtain or document parental or guardian consent;
  • verify an adult’s authority where required;
  • manage parental privacy requests.
Sources of Personal Data
We collect personal data:
  • directly from you when you provide information or User Content, create an account, make a purchase or contact us;
  • automatically when you use or interact with the Services;
  • from other users where they submit, publish or otherwise provide content relating to you;
  • from third parties such as authentication providers, app stores, payment providers and other service providers where relevant to the Services you use; and
  • by generating or deriving information from your use of the Services, such as usage counts, security indicators or approximate country or region derived from your IP address.
Providing Personal Data
Providing personal data to PIXIO is generally voluntary. However, certain information may be necessary to create or maintain an account, complete a purchase, provide a requested feature, process User Content or comply with applicable legal requirements. If you do not provide information that is necessary for a particular Service or functionality, we may be unable to provide that Service or functionality to you.
The actual information used for these purposes depends on the age-assurance or parental-consent process implemented by PIXIO.
USER CONTENT, SHARING AND FACIAL IMAGES
Certain Services may allow you to upload, capture, create, submit, store, publish or otherwise make available content through PIXIO (“User Content”).
Depending on the functionality you use, User Content may include:
  • photographs, images and screenshots;
  • videos and audio recordings;
  • text, captions, comments and messages;
  • prompts and instructions;
  • documents and other files;
  • profile content;
  • content created or edited using the Services; and
  • other information or materials you choose to submit through the Services.
User Content may or may not contain personal data. This Privacy Policy applies to User Content to the extent that it contains personal data or can reasonably be linked to an identifiable individual. Your intellectual property rights in User Content and the rights you grant PIXIO to use User Content are separately governed by our Terms of Use.
How we process User Content
Depending on the functionality you use, we may process User Content to:
  • provide the feature or Service you request;
  • store, display, transmit or deliver the content;
  • analyse, edit, transform or generate content;
  • enable sharing, commenting, reposting or other interactions between users;
  • moderate content and enforce our Terms of Use and community standards;
  • maintain the security and integrity of the Services;
  • prevent fraud, abuse and prohibited uses;
  • provide customer support and troubleshoot technical issues; and
  • where permitted by applicable law and our Terms of Use, feature or promote content in connection with PIXIO and our Services.
The particular processing that applies depends on the functionality you choose to use. User Content may also be disclosed to service providers where this is necessary to provide the relevant functionality, as described in other sections of this Policy.
Retention of User Content depends on the relevant functionality and is described in the “Data Retention” section below.
Public and shared User Content
Certain Services may allow you to make User Content available to other users or to the public.
Where you choose to publish or share User Content, depending on the functionality and privacy settings available:
  • other users may be able to view, react to, comment on, share or repost that content;
  • information associated with the content, such as your username, profile information or posting date, may also be visible;
  • publicly available content may be viewed by persons outside your intended audience;
  • other users or third parties may copy, save, screenshot, download or redistribute publicly available content.
You should therefore consider carefully what information you choose to make public.
If you delete User Content or your account, PIXIO will handle copies retained in PIXIO-controlled systems in accordance with the Data Retention section of this Privacy Policy. However, content that has previously been copied, saved, screenshot, reposted or otherwise redistributed by other users or third parties may remain available outside our control.
Where functionality allows users to control the audience for User Content, the available audience and privacy settings may vary depending on the Service, the user's age and applicable legal requirements.
PIXIO use of User Content
In addition to processing User Content as necessary to operate the Services, PIXIO may, subject to our Terms of Use and applicable law, display, reproduce, distribute or feature User Content in connection with operating, presenting and promoting PIXIO and the Services.
This may include, where applicable, featuring User Content within PIXIO, on PIXIO-operated websites or social media channels, or in communications relating to the Services.
Where User Content contains personal data, our use of that personal data must also have an appropriate legal basis under applicable data protection law. Where separate consent or permission is required for a particular promotional or marketing use, we will obtain it before using the relevant content for that purpose.
The fact that User Content is publicly available through the Services does not, by itself, mean that PIXIO may use personal data contained in that content for any unrelated purpose.
Photographs and facial images
Certain Services may allow you to upload photographs or other images from your device or capture new images using your device camera.
Images may be processed to provide the functionality requested by you, including, where applicable, analysing, editing, transforming or generating visual content.
Images may also be transmitted to service providers that provide infrastructure, artificial intelligence or other processing functionality necessary to perform the requested Service.
Where an original image is processed temporarily, the applicable PIXIO retention period is described in the sections below.
No facial recognition or biometric identification
PIXIO does not use facial images submitted to creative Services for facial recognition, identity authentication or biometric identification.
We do not intentionally create persistent biometric templates from such images for the purpose of uniquely identifying or authenticating individuals.
AI or other automated systems may analyse visual characteristics of an image in order to perform the transformation, validation or generation requested by the user. Such processing is used to provide the requested functionality and not to establish or verify the identity of the person shown in the image.
Content relating to other people
User Content may contain information about individuals other than the user submitting it.
You should only submit, publish or otherwise use content relating to another person where you have the rights, permissions or other lawful authority necessary to do so.
The Terms of Use may impose additional requirements concerning content depicting or relating to other individuals.
Content relating to children
Additional safeguards apply where PIXIO knows that User Content contains personal data submitted by a child or where a Service is subject to child-specific privacy requirements.
Where required by applicable law:
  • we will obtain verifiable parental or guardian consent before collecting, using, disclosing or making publicly available a child's personal data where such consent is required;
  • sharing and visibility settings for child users will be restricted or set to a high level of privacy by default;
  • children and their parents or guardians will be provided with age-appropriate information about how personal data is used;
  • parents or guardians will be provided with applicable rights to review, delete or prevent further collection or use of a child's personal data; and
  • we will not require a child to provide more personal data than is reasonably necessary to participate in the relevant activity.
Where PIXIO wishes to use User Content depicting or identifying a child for advertising or other external promotional purposes, we will obtain any separate parental or guardian authorisation required by applicable law before doing so.
AI-POWERED PROCESSING
Certain Services may use artificial intelligence, machine-learning or other automated technologies to analyse, validate, transform or generate User Content and to provide other functionality requested by users.
Depending on the relevant functionality, AI-powered processing may include:
  • assessing whether submitted content can be processed;
  • analysing technical, textual, audio or visual characteristics of User Content;
  • interpreting prompts or instructions;
  • transforming or generating content;
  • performing content moderation, safety or abuse-prevention checks; and
  • producing and delivering generated or transformed results.
Third-party AI providers
We may use third-party AI service providers to perform some or all of these operations on our behalf.
Depending on the functionality, we may provide an AI service provider with User Content, including photographs, images, text, audio, prompts or instructions, together with generated content and limited technical or request metadata reasonably necessary to perform the requested processing.
Where reasonably available and appropriate for the relevant functionality, we seek to use providers, services or technical configurations that minimise retention of User Content and that do not use User Content submitted through PIXIO to train general-purpose AI models without an affirmative opt-in or other separate arrangement.
However, AI technologies, providers and their technical configurations may change over time. Data retention, model-training practices and other processing conditions may differ depending on the provider, service, model, API endpoint and configuration used. Zero-retention or equivalent technical configurations may not be available for every provider or functionality.
PIXIO evaluates the data-handling practices of AI providers before using them and requires providers acting on our behalf to process personal data subject to applicable contractual and data-protection requirements.
AI model training
PIXIO does not use User Content submitted for user-requested processing to train its own general-purpose AI models unless we expressly inform you otherwise and establish an appropriate legal basis before such processing begins.
Where a third-party AI provider processes User Content on our behalf, the provider's ability to retain or use that content is governed by our contractual arrangements with that provider, the configuration of the relevant service and applicable law.
Information about the AI providers currently used by PIXIO, together with links to relevant information about their data-handling practices, is provided in the “AI Service Providers” Schedule thereto. We encourage you to review that information if you would like to understand how the relevant providers handle data processed through their services.
We may add, replace or discontinue AI providers from time to time. Where a change materially affects the processing of personal data, we will update this Privacy Policy or provide additional notice where required by applicable law.
GENERATED CONTENT
Where a Service produces generated or transformed content, we process the resulting output for the purpose of returning it to you and operating the relevant Service.
Depending on the feature, generated content may:
  • be displayed transiently;
  • remain available for a limited period;
  • be associated with your account;
  • be saved only when you choose to save it;
  • be stored only on your device.
The applicable retention period depends on how the relevant functionality is implemented and is described in the Data Retention section below where relevant.
CAMERA AND DEVICE PERMISSIONS
Certain functionality may request access to device features such as:
  • camera;
  • photo library;
  • storage;
  • notifications;
  • other device capabilities.
We request device permissions only where relevant to the requested functionality.
You can normally manage permissions through your device settings. Refusing a permission may prevent a feature that depends on that permission from operating, but should not prevent use of unrelated functionality unless technically necessary.
COOKIES AND SIMILAR TECHNOLOGIES
Our website and online Services may use cookies and similar technologies to operate the Services, remember settings, maintain security, understand how the Services are used and, where applicable, provide other functionality.
Where applicable law requires consent for the use of non-essential cookies or similar technologies, we will obtain that consent before using them. Further information about the technologies we use and the choices available to you may be provided through our cookie settings or a separate Cookie Notice.
HOW WE USE PERSONAL DATA
We process personal data for purposes including:
  • providing and operating the Services;
  • performing functionality requested by users;
  • managing user accounts;
  • processing and generating User Content;
  • featuring or promoting User Content in connection with PIXIO and the Services where permitted by our Terms of Use and applicable law;
  • providing customer support;
  • maintaining and improving the reliability of the Services;
  • enforcing usage limits;
  • detecting and preventing fraud, security threats and abuse;
  • managing purchases and subscriptions;
  • complying with applicable law;
  • establishing, exercising or defending legal claims;
  • communicating with users where appropriate;
  • conducting analytics or improving the Services where permitted by law.
The particular purposes applicable to your personal data depend on the Services and functionality you use. We do not process personal data for materially incompatible new purposes without providing additional notice or obtaining consent where required by applicable law.
LEGAL BASES FOR USERS IN THE EEA AND UK
Where the GDPR, UK GDPR or substantially equivalent law applies, we rely on one or more of the following legal bases.
Performance of a contract
We process personal data where processing is necessary to provide a Service or feature requested by you or otherwise perform our Terms of Use.
For example, where you submit content for a transformation or generation, processing that content is necessary to perform the requested function.
Legitimate interests
We may process personal data where necessary for legitimate interests such as:
  • maintaining the security of the Services;
  • preventing abuse and fraud;
  • applying reasonable usage restrictions;
  • troubleshooting;
  • improving service reliability;
  • managing and defending legal claims.
We consider the nature of the processing and the potential impact on individuals before relying on legitimate interests.
Right to object. 
Where we rely on legitimate interests as our legal basis, you have the right to object to the processing on grounds relating to your particular situation. You can exercise this right by contacting us at  [email protected].
Legal obligation
We may process information where necessary to comply with applicable law, regulatory obligations, court orders or lawful government requests.
Consent
Where applicable law requires consent for a particular processing operation, we will request consent before carrying out that processing.
Where processing is based on consent, you may withdraw your consent at any time, without affecting processing that occurred before withdrawal.
The legal basis applicable to a particular processing activity depends on its purpose and the circumstances in which the data is processed.
SERVICE PROVIDERS AND OTHER RECIPIENTS
We may disclose personal data to third parties where reasonably necessary for the purposes described in this Privacy Policy.
Recipients may include:
Infrastructure and hosting providers
Providers that host, transmit, secure or operate components of the Services.
AI and machine-learning service providers
Providers that analyse, transform or generate content on our behalf.
Authentication providers
Where users choose third-party sign-in functionality.
Application stores and payment providers
For purchases, subscriptions, licensing and entitlement verification.
Analytics, diagnostics and security providers
Where used to monitor performance, identify errors, secure the Services or prevent abuse.
Professional advisers
Lawyers, accountants, auditors, insurers and similar advisers where reasonably necessary.
Authorities and legal recipients
Courts, regulatory authorities, law enforcement and governmental bodies where disclosure is required or permitted by law.
Corporate transactions
Potential or actual purchasers, investors, lenders, advisers or successors in connection with a merger, acquisition, financing, restructuring, insolvency, sale of assets or similar transaction, subject to appropriate confidentiality and data-protection arrangements.
SALE, SHARING AND TARGETED ADVERTISING
PIXIO does not sell personal data for monetary consideration and does not share personal data for cross-context behavioural advertising or process personal data for targeted advertising as those terms are defined under applicable U.S. state privacy laws.
INTERNATIONAL PROCESSING AND TRANSFERS
Trendformer Limited is established in Hong Kong and our users and service providers may be located in different countries.
Accordingly, personal data may be processed in Hong Kong and in other jurisdictions in which we or our service providers operate.
Those jurisdictions may have data-protection laws that differ from the laws of your country.
Where applicable law requires safeguards for international transfers, we use appropriate mechanisms, which may include:
  • adequacy decisions;
  • standard contractual clauses;
  • UK international data-transfer safeguards;
  • other recognised transfer mechanisms.
Where required, additional information about a particular transfer mechanism or a copy of applicable safeguards may be requested by contacting us.
DATA RETENTION
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, taking into account:
  • the nature of the data;
  • the purpose of processing;
  • technical requirements;
  • security and fraud-prevention needs;
  • applicable contractual obligations;
  • statutory record-keeping requirements;
  • limitation periods;
  • potential legal claims;
  • applicable data-protection requirements.
Different categories of personal data have different retention periods.
The current retention periods or criteria are
Category Retention
User Content submitted for temporary processing Retained by PIXIO only for as long as necessary to complete the requested processing. Original photographs currently submitted for temporary AI image processing are deleted from PIXIO-controlled temporary storage after processing and in any event within 24 hours.
Generated Content Retained only for as long as necessary to generate, display and deliver the requested result, unless the relevant functionality expressly allows or requires the content to be saved. Where content is saved to an account or otherwise stored at the user’s request, it is retained until deleted by the user, the relevant functionality is discontinued, the account is deleted, or longer retention is reasonably necessary for legal, security or operational purposes.
Account Data Retained while the account remains active and thereafter only for as long as reasonably necessary to administer account closure, comply with legal obligations, prevent fraud or abuse, resolve disputes or establish, exercise or defend legal claims.
Technical, Usage and Security Data Retained for as long as reasonably necessary to operate and secure the Services, enforce applicable usage limits, prevent abuse and investigate security incidents. Records used solely to enforce a time-limited usage restriction are not retained longer than reasonably necessary for that restriction and related abuse-prevention purposes.
Transaction Data Retained for applicable accounting, tax and legal record-keeping periods.
Support Communications Retained for as long as reasonably necessary to respond to and resolve the relevant request and thereafter where necessary for service administration, dispute resolution, legal compliance or the establishment, exercise or defence of legal claims.
Age / Parental Authorisation Data Retained only as long as reasonably necessary to demonstrate compliance with applicable child-privacy requirements.
Temporary processing does not necessarily mean identical retention by all providers
Where PIXIO temporarily holds User Content in memory, cache or other short-term infrastructure, our own deletion schedule applies to PIXIO-controlled systems.
Accordingly, deletion from PIXIO-controlled temporary storage does not necessarily mean that every processor copy or provider log is deleted at exactly the same time.
Deidentified information
We may retain aggregated or deidentified information that can no longer reasonably be linked to an identifiable individual.
Where required by applicable law, we will not attempt to reidentify information maintained as deidentified data.
Retention by Service Providers
Deletion of personal data or User Content from PIXIO-controlled systems does not necessarily result in simultaneous deletion from systems operated by service providers involved in processing the relevant request. Service providers may apply separate technical retention periods in accordance with our contractual arrangements with them, applicable law and the configuration of the relevant service. Information about retention practices of AI service providers currently used by PIXIO is provided in Appendix 1.
SECURITY
We use appropriate technical and organisational measures designed to protect personal data against:
  • unauthorised or unlawful access;
  • accidental loss;
  • destruction;
  • alteration;
  • unauthorised disclosure;
  • misuse.
Our security measures are reviewed in light of the nature of the Services and the personal data processed.
No transmission or storage system can be guaranteed to be completely secure.
CHILDREN AND YOUNGER USERS
Age requirements will, as applicable, differ depending on:
  • the Service;
  • the user’s location;
  • whether personal data is collected;
  • the legal basis for processing;
  • whether parental or guardian authorisation is required.
We do not knowingly collect personal data from a child in circumstances where applicable law requires parental or guardian consent unless the required consent or another lawful basis has been established.
Where we know that a user is a child and applicable law requires parental consent or other child-specific safeguards, we will, as applicable:
  • provide a specific children’s privacy notice;
  • obtain verifiable parental or guardian consent;
  • limit the information collected;
  • restrict particular functionality;
  • provide parents or guardians with applicable access, deletion and control rights.
We do not condition a child’s participation in an activity on the child providing more personal data than is reasonably necessary for the relevant activity.
Additional child-specific notices, parental-consent mechanisms or age-related restrictions may apply to particular Services where required by applicable law.
AUTOMATED DECISION-MAKING AND PROFILING
PIXIO may use automated systems to perform technical tasks such as:
  • content generation;
  • image validation;
  • content moderation;
  • fraud or abuse detection;
  • security checks;
  • usage-limit enforcement.
Unless specifically disclosed otherwise, PIXIO does not use automated processing to make decisions about users that produce legal effects or similarly significant effects concerning them.
If we introduce such processing in the future, we will provide any additional notice and rights required by applicable law before the processing begins.
YOUR PRIVACY RIGHTS
Depending on your location and applicable law, you may have rights relating to your personal data, including rights to:
  • obtain information about processing;
  • request access;
  • request correction;
  • request deletion;
  • request restriction of processing;
  • object to certain processing;
  • obtain data portability;
  • withdraw consent;
  • opt out of certain sale, sharing, targeted advertising or profiling activities;
  • limit certain uses of sensitive personal information;
  • appeal certain decisions relating to a privacy request;
  • lodge a complaint with a competent privacy or data-protection authority.
Not all rights apply in every jurisdiction or to every processing operation.
You may submit a privacy request by contacting:
 [email protected]
We may take reasonable steps to verify your identity before fulfilling a request.
You will not be unlawfully discriminated against for exercising applicable privacy rights.
Where permitted by law, an authorised agent may submit certain requests on your behalf, subject to appropriate verification.
EEA PRIVACY SUPPLEMENT
If you are located in the European Economic Area and the GDPR applies to our processing, you may have rights including:
  • access;
  • rectification;
  • erasure;
  • restriction;
  • objection;
  • portability;
  • withdrawal of consent;
  • rights relating to qualifying automated decision-making.
You also have the right to lodge a complaint with the competent supervisory authority.
Where we rely on legitimate interests, you may object to processing based on grounds relating to your particular situation as provided by applicable law.
Where personal data is transferred internationally and transfer safeguards are required, information about applicable safeguards may be obtained by contacting us.
UK PRIVACY SUPPLEMENT
If you are located in the United Kingdom and UK data-protection law applies, you may have rights including:
  • access;
  • rectification;
  • erasure;
  • restriction;
  • objection;
  • portability;
  • withdrawal of consent;
  • applicable rights relating to automated decision-making.
You may complain to the UK Information Commissioner’s Office.
U.S. STATE PRIVACY SUPPLEMENT
This section applies to residents of U.S. states whose comprehensive consumer privacy laws apply to PIXIO.
Depending on your state, you may have rights to:
  • confirm whether we process your personal data;
  • access personal data;
  • correct inaccuracies;
  • delete personal data;
  • obtain a portable copy;
  • opt out of the sale of personal data;
  • opt out of targeted advertising;
  • opt out of certain profiling;
  • limit certain processing of sensitive personal data;
  • appeal a decision concerning your privacy request.
We will provide the mechanisms required by the applicable state law.
California
The categories of sources from which we collect personal information are described in Section 4.10 above.
During the preceding 12 months, depending on the Services used, PIXIO may have disclosed the following categories of personal information to service providers or contractors for business purposes:
  • identifiers and technical, device, network and usage information to infrastructure, authentication, analytics, diagnostics and security providers;
  • User Content and Generated Content to infrastructure and AI service providers where necessary to provide the requested functionality;
  • transaction and commercial information to application stores, payment providers and related service providers; and
  • communications and support information to providers assisting us with customer support.
The business purposes for these disclosures include providing and operating the Services, authentication, processing requested functionality, security and abuse prevention, diagnostics, payments and customer support, as described in Sections 10 and 12.
During the preceding 12 months, PIXIO:
  • sold personal information: NO;
  • shared personal information for cross-context behavioural advertising: NO;
PIXIO does not use or disclose sensitive personal information for purposes requiring a right to limit unless expressly disclosed here: NO SUCH PROCESSING.
PIXIO offers financial incentives relating to personal information: NO.
Appeals
Where applicable state law provides a right to appeal a refusal of a privacy request, you may submit an appeal by:  [email protected]
HONG KONG PRIVACY SUPPLEMENT
Trendformer Limited is based in Hong Kong and processes personal data in accordance with applicable requirements of the Hong Kong Personal Data (Privacy) Ordinance.
The purposes for which personal data is collected and the categories of persons or organisations to whom it may be disclosed are described in this Privacy Policy.
Unless expressly stated otherwise, providing personal data to PIXIO is voluntary.
Where particular information is necessary to provide a requested Service, failure to provide that information may mean that we cannot provide the relevant Service or feature.
You may request access to or correction of personal data held about you as provided by applicable Hong Kong law by contacting:
 [email protected]
Trendformer Limited
604, Tower A, New Trade Plaza
6 On Ping Street
Shatin, N.T.
Hong Kong
Where we use personal data for direct marketing, we will comply with applicable notice and consent requirements before doing so.
THIRD-PARTY SERVICES AND LINKS
The Services may contain links to third-party websites or platforms.
If you leave PIXIO and interact directly with a third-party service, that third party’s privacy notice governs its independent processing of your personal data.
We are not responsible for the privacy practices of independent third parties.
CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy as our Services, processing activities or legal obligations change.
We will update the “Last updated” date when we revise the Privacy Policy.
Where changes materially affect how we process personal data, we will provide additional notice where appropriate or required by applicable law.
Where a new processing purpose requires consent under applicable law, we will obtain that consent rather than treating continued use of the Services as consent merely because this Privacy Policy has changed.
APPENDIX 1 — AI SERVICE PROVIDERS
We currently use the following third-party providers for certain AI-powered functionality:
Provider / category OpenAI
Function AI content validation, analysis, image generation/transformation
Personal data involved User-submitted images, prompts/instructions, generated outputs and request metadata necessary for the API request
Role Processor/service provider where acting on PIXIO's instructions
Processing locations Multiple jurisdictions depending on OpenAI infrastructure and subprocessors, including the United States and other locations
Provider retention / data use PIXIO does not currently have Zero Data Retention enabled. Under OpenAI’s standard API data controls, customer content may be retained in abuse-monitoring logs for up to 30 days, unless longer retention is required by law or is reasonably necessary to protect OpenAI’s services or third parties from harm. Additional application-state retention may depend on the API endpoint and configuration used. OpenAI states that data submitted through its API is not used to train or improve OpenAI models unless the API customer expressly opts in to share data for that purpose.
Transfer safeguards Further information about OpenAI’s data-handling practices is available in OpenAI’s Data Controls documentation and Privacy Policy.
The precise data sent to a provider depends on the functionality being used. We do not provide an AI provider with User Content that is not reasonably necessary for the relevant processing.
This list may be updated as our AI providers change.