PXORAX Privacy Policy

Effective Date: July 16, 2026 Last Updated: July 16, 2026

PXORAX is an independently operated AI creative and marketing technology platform. In this document, “PXORAX,” “the Platform,” “the platform operator,” or “we” refers to the actual operator of the PXORAX platform and the related services it provides. This Privacy Policy explains how we collect, use, share, and protect information when you use the PXORAX platform (the “Service”) and should be read together with the Terms of Service.

This Policy explains how the Platform processes personal information. Where applicable law requires consent, we will obtain it through a separate notice, checkbox, or another appropriate method.

1. Scope and Geographic Notice

1.1 This Policy applies to your access to and use of the Service.

1.2 The Platform does not provide marketing technology services for the Mainland China market. Restricted access may still generate necessary IP, network, security, and compliance logs used to identify, investigate, and block improper or restricted access. Third-party services such as Google or Apple sign-in process your information under their own policies.

2. Information We Collect

2.1 Information you provide

  • Account information: your email address and basic profile details returned by a third-party sign-in provider such as Google or Apple, including name or avatar. Passwords are managed by the authentication provider Clerk; we do not store your plaintext password.
  • Invitation codes and registration-verification information.
  • Compliance and qualification information: licenses, qualifications, or compliance evidence you provide when requested for reviews required under the Terms of Service.
  • User Content: uploaded reference images and entered prompts, titles, subtitles, calls to action, brand or platform selections, and similar content.
  • Generated Content and metadata: generated images and videos and related metadata, including asset type, brand platform, output dimensions, time, generation parameters, and your thumbs-up or thumbs-down feedback.
  • Market and preference information: your selected target market, interface language, time zone, and account preferences.

2.2 Information collected automatically

  • Usage and log data: access time, features used, generation requests, error logs, and similar records.
  • Device and network information: IP address, browser and device type, operating system, and similar data. IP data may also be used for geographic compliance decisions.
  • Local storage: cookies and browser local storage used to maintain sign-in, access markers, interface language, and catalog caches.

3. How We Use Information

We use information to:

  • provide, maintain, and improve the Service, including authentication, generation, editing, export, and history;
  • transmit prompts, copy, generation parameters, and reference images to third-party AI providers to generate images, videos, localized copy, or perform asset analysis and visual evaluation;
  • enforce the Terms of Service, review qualifications and compliance, apply geographic restrictions, and prevent risk and abuse;
  • protect security and prevent fraud and unauthorized access;
  • troubleshoot, analyze data, and improve the product;
  • communicate about the Service, including verification codes and account or security notices; and
  • comply with applicable legal obligations and respond to lawful requests from competent authorities.

4. Information Sharing and Third-Party Processors

We do not sell your personal information. We share it only in the following circumstances:

  • Authentication: Clerk processes registration, sign-in, email verification, and password reset. Clerk manages registration, sign-in, forgotten-password, and email-verification messages. If you choose third-party sign-in, Google or Apple also processes the relevant authentication information under its own policy.
  • Cloud infrastructure and storage: Cloudflare provides Pages, Workers / Functions, object storage (R2), database services (D1), network delivery, and security protection.
  • AI image and video services: WaveSpeed processes image-generation, image-to-video, and necessary reference-media requests.
  • AI analysis services: Agnes AI processes AI copy, asset-analysis, or visual-evaluation requests.
  • AI video services: WaveSpeedAI processes video generation, task queries, and generated results.
  • Security verification: Turnstile provides security verification and anti-abuse checks.
  • Legal and compliance: We may disclose necessary information where required by law, in response to a lawful request from a competent or judicial authority, or to investigate unlawful conduct and protect the lawful rights and safety of the Platform or others. This may include reporting suspected criminal activity and providing relevant records and evidence.

These providers process information only as needed to provide their respective services and may process requests under their own terms. If the Platform cannot confirm whether a third-party provider uses inputs for training, how long it retains them, or whether it performs human review, we do not make an absolute “never used for training” or similar promise.

5. Cookies and Local Storage

We use cookies and browser local storage to maintain sign-in sessions, record access status and interface preferences, and cache catalogs for performance. You may manage or clear them through browser settings, but doing so may affect sign-in and some features.

6. Data Storage and Retention

6.1 We retain information for as long as needed to provide the Service, protect security, handle disputes, comply with legal obligations, or fulfill the purposes described in this Policy. Because the Service does not currently provide automated end-to-end account and content erasure, we do not promise a fixed deletion deadline.

6.2 You may email [email protected] to request access, correction, deletion, export, or account closure. We may require identity verification and will handle the request based on its scope, applicable law, technical feasibility, third-party processing status, and security, legal, or dispute records that must be retained. Closing an account or requesting deletion may not immediately delete every copy and does not affect information that must be retained by law.

7. Data Security

We use reasonable technical and organizational measures to protect information, including transport encryption (HTTPS), access controls, and signed, time-limited URLs for assets. No internet transmission or storage is absolutely secure, and you are also responsible for protecting your account credentials.

8. International Data Transfers

The Service operates through globally distributed cloud infrastructure and third-party providers that may be located in other countries or regions. To provide the Service, your information may be processed or stored outside your location. Where applicable, we will use contractual, technical, or other reasonable safeguards. Continuing to use the Service is not treated as blanket consent to every cross-border transfer; if the law requires consent, we will obtain it separately through an appropriate method.

9. Your Rights

To the extent permitted by applicable law, you may access, correct, or update account information; request deletion of personal information or account closure; object to or restrict certain processing; withdraw prior consent without affecting the lawfulness of processing before withdrawal; and request an exportable copy of personal information. You may also complain to an appropriate data-protection or other competent authority where you live. To exercise a right, email [email protected]. We may first need to verify your identity. These rights do not prevent processing or retention necessary to meet legal obligations or preserve evidence of violations.

Regional Notes

The following are brief rights notices for ten target markets. Specific rights depend on where you live, applicable law, and the actual circumstances of the Service:

  • Brazil: you may have rights to confirmation, access, correction, anonymization, blocking, deletion, and related measures.
  • Mexico: you may have ARCO rights of access, rectification, cancellation, and opposition.
  • United States: state privacy rights may differ based on your state, service activity, and applicable thresholds.
  • Canada: you may raise requests or questions about access, correction, and cross-border processing.
  • Australia: you may raise requests or questions about access, correction, and overseas processing.
  • United Kingdom: you may have rights concerning information, access, correction, deletion, restriction, portability, objection, and automated decision-making.
  • Thailand: you may have rights to access, correction, deletion, restriction, objection, and related measures.
  • Indonesia: you may have rights to access, correct, update, delete, and take related measures.
  • India: relevant rights will be handled under the legal rules that are actually applicable and in force.
  • Japan: you may have rights to disclosure, correction, cessation of use, or deletion and related measures.

10. Children’s Privacy

The Service is only for users at least 18 years old (or the higher local age of majority). We do not knowingly collect minors’ personal information. If we discover that information was collected by mistake, we will address it promptly. If you believe this has happened, contact [email protected].

11. Changes to This Policy

We may update this Policy from time to time and will revise the “Effective Date” and “Last Updated” information above. We will provide reasonable notice of material changes. If applicable law requires renewed consent, we will obtain it separately.

12. Contact Us