Privacy Policy

Last updated: 28 September 2026

This policy explains what we do with your personal data when you use Pixeraa to make a portrait. We are the data controller for that data.

Who we are

Pixeraa is a trading name of CHICRESTEMPIRE LTD, a company registered in England and Wales under company number 17435313, with its registered office at 66 Paul Street, London, EC2A 4NA.

What we collect

• The photos you upload. Reference photographs of a face, used to make the portrait you asked for.
• The portraits we make from them, and which of them you chose.
• Your email address, and — if you sign in with Google or Apple — the account identifier they give us. We never receive your password.
• Your orders and credit balance: what you bought, when, for how much, and every credit added or spent.
• Payment metadata only. Card details are entered on Stripe’s own checkout page and never reach our servers. We hold a Stripe customer reference and the outcome of each payment.
• Delivery details for printed orders, which we pass to the printer.
• Technical data: your IP address when a form is checked for automated abuse, and diagnostic data if something errors.

Facial analysis, and why we ask your permission for it

Making your portrait involves analysing the face in your photographs — detecting it, measuring its features, and afterwards comparing the finished portrait against your photographs to check that it actually looks like you. That is analysis of biometric characteristics, which UK data protection law treats as a special category of personal data needing your explicit consent.

You give that consent by ticking the box when you start, and you can withdraw it at any time by deleting the project or your account. Withdrawing does not undo processing already carried out, but it stops any further processing and deletes the photographs.

Please only upload photographs of yourself, or of someone who has agreed to it and has seen this policy. You must not upload photographs of children.

We never train AI models on your photos

Your photographs and portraits are used to make the thing you asked for, and for nothing else. We do not use them to train, fine-tune or improve any AI model, we do not sell them, and we do not share them with anyone except the processors listed below, each of which is contractually bound to the same limit.

Why we are allowed to use it

• To perform our contract with you — making the portrait, taking payment, delivering the download or the print, and keeping your credit balance right.
• Your explicit consent — for the facial analysis described above.
• Our legitimate interests — keeping the service secure, preventing fraud and automated abuse, and fixing errors. We keep this to what is necessary.
• Legal obligation — keeping records of sales for tax purposes.

Who else processes it

We use a small number of suppliers, each acting on our instructions under a contract, and each with access only to what their job requires:

• fal.ai — image generation. Your reference photographs are sent here to produce the portrait.
• Stripe — payments. Stripe is the controller of your card data under its own privacy policy.
• Cloudflare — the Turnstile check that tells a person from a bot on our sign-up forms.
• Sentry — error monitoring, so a failure gets diagnosed rather than guessed at.
• Google and Apple — only if you choose to sign in with them.
• Our UK print partner — for a printed order, they receive the finished portrait file and your delivery address. Not your photographs.
• Our hosting and object storage provider — where the service runs and your files are stored, encrypted.

Some of these operate outside the UK. Where personal data leaves the UK, it is protected by the safeguards UK data protection law requires — an adequacy decision, or the UK International Data Transfer Agreement or Addendum.

How long we keep it

• Uploaded photographs: 90 days, then deleted automatically by a job that runs every night. Deleting a project deletes them immediately.
• Portraits and projects: until you delete them or close your account.
• Order and payment records: six years, which is how long UK tax law requires us to keep them.
• Your account: until you close it.

Keeping it safe

Your session is held in a cookie your browser will not let any script read. Files are stored encrypted and served through short-lived links rather than public URLs. Where a member of our support staff needs to look at one of your images to resolve a problem you have raised, that access is logged against the ticket it was for — we can tell you who looked, and when.

Your rights

You have the right to:

• ask for a copy of the personal data we hold about you;
• have inaccurate data corrected;
• have your data deleted;
• restrict or object to how we use it;
• receive it in a portable format;
• withdraw your consent to facial analysis at any time.

You can delete any project, and everything in it, from the project’s own page without asking us. For anything else, email us and we will respond within one month.

Cookies

We use one cookie, and it is the one that keeps you signed in. The Cookie Policy explains it and everything else we store in your browser.

Children

This service is not for under-18s, and it is not for making portraits of children. We do not knowingly collect data about anyone under 18. If you believe we have, tell us and we will delete it.

Changes to this policy

If we change it we will update the date at the top, and tell you by email if the change materially affects you.

How to contact us

Email support@pixeraa.com, call 07838 637293, or write to CHICRESTEMPIRE LTD at 170 Clowes Street, Salford, Manchester.