Privacy Policy

CharPix ("we", "us") turns your AI characters into consistent images. This policy explains what data we collect, why we collect it, who processes it on our behalf, and the choices you have. If anything here is unclear, write to us at [email protected].

What we collect

• Account data. When you sign in with Google, we receive your name, email address, and profile picture from Google. We store your email and a unique account ID — nothing else from your Google account.
• Content you create. Character descriptions, prompts, and the images you generate. Generated images are stored on our server so you can view and download them later.
• Payment data. When you buy credits, the transaction is handled entirely by PayPal. We never see or store your card number or bank details — only the PayPal order ID, amount, and payment status.
• Usage data. We use GoatCounter, a privacy-friendly analytics tool, to count page visits. GoatCounter does not use cookies and does not collect personal information or track you across sites.

How we use your data

• To provide the service: sign you in, keep your credit balance, and generate images.
• To process payments and prevent fraud.
• To understand aggregate usage (which pages are visited) so we can improve the product.
• To respond when you contact us.

We do not sell your data, we do not show ads, and we do not use your prompts or images to train models.

Who processes data on our behalf

• Google — authentication (sign-in). Google Privacy Policy.
• fal.ai — runs the image-generation models. Your prompts and reference images are sent to fal.ai to produce results, subject to fal.ai's privacy policy.
• PayPal — payment processing. PayPal Privacy Statement.
• Cloudflare — DNS and traffic delivery for our domain.

Cookies

We use a single session cookie to keep you signed in. Our analytics (GoatCounter) sets no cookies. There are no advertising or tracking cookies on CharPix.

Data retention and deletion

We keep your account and generated images while your account exists. You can request full deletion of your account, generated images, and associated data at any time by emailing [email protected] from your sign-in address. We aim to complete deletion requests within 30 days. Payment records may be retained as required for accounting and fraud-prevention purposes.

Security

Traffic is encrypted with HTTPS. Access to our servers is restricted to key-based authentication, and payment credentials live only in server-side environment variables. No method of transmission or storage is 100% secure, but we work to protect your data with industry-standard measures.

Children

CharPix is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has provided us data, contact us and we will delete it.

Changes to this policy

If we make material changes, we will update the date at the top of this page. Continued use of CharPix after a change means you accept the updated policy.

Contact

Questions or requests about your data: [email protected].