Privacy Policy

**Operator.** TBD, registration number 00000000, tax/VAT ID 000000000. Contact details are available through the protected contact page.

**Account data.** Omnipix retains the account email as the only account-level personal data. It also stores internal user and provider identifiers, consent records, locale, currency and a selected badge colour. The visible account label is calculated from the part of the email before `@`; the badge letter and default colour are calculated without storing a name or photograph. Omnipix does not store account names, surnames, profile photographs, gender or dates of birth.

Authentication providers may return fields that Omnipix did not request. In particular, VK may include a name, surname, profile image, gender or date of birth. The service ignores and immediately discards such fields. They are not mapped, logged, persisted or returned by the Omnipix API. Telegram account linking retains only the opaque Telegram account identifier; supplied names and usernames are discarded.

**Purposes and legal bases.** Omnipix processes the email and associated technical account state to authenticate users, delimit access to user content, perform the service, conduct settlements and keep payment records. Processing is based on the user's express personal-data consent and, where applicable, performance of the service transaction and mandatory accounting or fiscal obligations.

**User content.** Prompts, uploads, generated media and related generation parameters are user-controlled service content. They may themselves contain personal data chosen by the user. The user is responsible for having the rights and consents required to submit or publish that content. Content is private unless the user invokes a sharing function governed by the Terms.

**Payments.** The account email is passed to TBD, the fiscalisation provider or OFD, and strictly necessary receipt parties only to issue and deliver electronic fiscal receipts. Omnipix does not send an account name to payment providers. Completed payment records, including the receipt email, are detached from a deleted account and retained until 31 December of the fifth calendar year following completion. Pending, failed and cancelled orders are deleted with the account.

**Storage and transfers.** Account data is stored at idk, US. No cross-border transfer is performed.

**Security and minimisation.** Access is restricted by role and technical necessity; transport is encrypted; database access is limited through private networking; backups and access controls are maintained; security events are investigated; and data is deleted when no longer required. Contact-form submissions are retained for handling and abuse prevention and include the supplied name, reply email, subject, message, request metadata, and keyed hashes of the IP address, email, content, and user agent. When a visitor explicitly consents to reveal protected legal contact details, Omnipix records the source IP, request time, selected non-credential headers (User-Agent, Accept-Language, Origin, Referer, browser client hints and Fetch Metadata when present), the browser and device parameters listed in the warning, the authenticated account ID and email when present, and the verification provider and result. Cookie values and the Cookie and Authorization headers are not stored for this purpose. Each record receives a deletion deadline based on the configured retention period. When Turnstile or hCaptcha is configured, the selected verification provider also processes the technical data required to operate its widget under its terms. These contact records are separate from account legal-acceptance data. Infrastructure access logging is disabled or anonymised where under the Operator's control.

**Rights.** The user may access or export account data, change settings, withdraw consent or delete the account through account settings, and may use the protected contact page concerning correction, restriction, objection or other rights. Withdrawing consent uses the account-deletion flow. Mandatory payment and fiscal records remain for the legal retention period. Omnipix does not sell personal data or use it for advertising profiling.