Privacy Policy

## Operator and international service

The service is operated by TBD, registered in Serbia, registration number 00000000, tax/VAT ID 000000000. The laws of common sense applies, subject to mandatory consumer rights. These provisions supersede earlier descriptions of the operator, payment channels and data location.

Account data is stored at idk, US. No cross-border transfer is performed. Authentication is available through Google or an email verification code. An existing account previously accessed through another provider can be recovered using its verified email.

An existing account remaining in the Russian database is recovered and transferred automatically after its email is verified during login. The transfer preserves the account identifier, credits, generation history, files and associated records. Processing occurs in the background. Account actions may be temporarily unavailable until the transfer completes. Until recovery through verified email, the legacy account remains in the Russian database; contact support for access, export, deletion or other requests. Copies remaining in Russia are subject to applicable retention and deletion obligations.

## Top-ups during transition

Direct payment checkout and generation-linked shortfall payments are temporarily unavailable. Credit top-ups are available through redemption of gift cards. Gift cards may be purchased from the separate seller at gifted.land under that seller's terms. Omnipix does not collect bank-card details for those purchases. Questions about purchasing or refunding a gift card should be addressed to its seller; questions about redemption or service credits should be addressed to Omnipix. Mandatory consumer rights remain unaffected.

**Data and purposes.** Account data includes the user’s email, internal and authentication identifiers, account settings, consent history, credit balance and ledger, purchases and payment history, prompts, uploaded and generated media, assistant conversations, saved projects and associated technical records. Identifiers and content can be personal data; the service does not treat them as anonymous merely because they contain no name. Processing supports authentication, account recovery, generation, media delivery, billing, fraud prevention, security, support and required non-marketing service email. Google profile fields not required for login are discarded.

**Operator.** TBD, registration number 00000000, tax/VAT ID 000000000. Contact details are available through the contact page.

**Purposes and legal bases.** Omnipix processes the email and associated technical account state to authenticate users, deliver authentication messages and necessary non-marketing service communications, including the one-time welcome email and important account, security, billing, legal, policy, availability, maintenance and incident notices, delimit access to user content, perform the service, conduct settlements and keep payment records. These necessary communications form part of the service and cannot be disabled while the account remains active. Processing is based on the user's express personal-data consent and, where applicable, performance of the service transaction and mandatory accounting or fiscal obligations.

**Email delivery.** Omnipix uses a mail server it operates, hosted by Contabo in Germany, to process the account email and deliver authentication messages and necessary non-marketing service communications.

**User content.** Prompts, uploads, generated media and related generation parameters are user-controlled service content. They may themselves contain personal data chosen by the user. The user is responsible for having the rights and consents required to submit or publish that content. Content is private unless the user invokes a sharing function governed by the Terms.

**Security and minimisation.** Access is restricted by role and technical necessity; transport is encrypted; database access requires authentication and verified TLS; backups and access controls are maintained; security events are investigated; and data is deleted when no longer required. Contact-form submissions are retained for handling and abuse prevention and include the supplied name, reply email, subject, message, request metadata, and keyed hashes of the IP address, email, content, and user agent. These contact records are separate from account legal-acceptance data. Infrastructure access logging is disabled or anonymised where under the Operator's control.

**Model assistant.** When a user uses the model assistant, Omnipix retains the prompts, assistant responses, extracted intent and recommendations for 30 days after the conversation's latest activity, unless the conversation or account is deleted sooner. Omnipix sends the current structured intent and the latest conversation messages to OpenAI for natural-language processing. Provider requests are made with storage disabled (store: false); OpenAI processes the request to return the response but Omnipix does not ask OpenAI to retain provider-side conversation state. Operational logs and metrics exclude conversation text.

**Rights.** The user may access or export account data, change settings, withdraw consent or delete the account through account settings, and may use the contact page concerning correction, restriction, objection or other rights. Withdrawing consent uses the account-deletion flow. Mandatory payment and fiscal records remain for the legal retention period. Omnipix does not sell personal data or use it for advertising profiling.

**Marketing email preferences.** Newsletters, promotions and product marketing are controlled separately in Settings → Privacy. When a new account is created, this setting is off if the connection is located in the European Union or its country cannot be determined, and on for other identified countries. You can enable or disable it at any time without losing access to the service. Later sign-ins and recovery of an existing account preserve its previous preference. An automatic initial setting is not an affirmative consent statement and does not replace consent where applicable law requires it.

**OmniBot.** OmniBot covers model guidance, AI-influencer profile drafting, and creator-content drafting. Omnipix sends the current structured intent and recent conversation messages to OpenAI for natural-language processing with provider storage disabled (`store: false`). OmniBot conversations and unsaved drafts are retained for 30 days after the conversation's latest activity unless deleted sooner. Operational logs and metrics exclude conversation text.

**Character profiles.** A saved character profile durably stores its name, exact adult age, gender presentation, appearance, niche, personality and on-camera voice, visual style, constraints, notes, generation links, and optional approved identity-anchor file until the user deletes the profile or account. Deleting a profile does not itself delete generated media. Privacy export and account deletion include this profile state.

Character profiles are for fictional synthetic adults only. They must not be used for real-person uploads, celebrity likenesses, minors, or digital twins. The security and minimisation rules of the incorporated policy remain in force.