Thrixel Inc. ("Thrixel," "we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard information that identifies, relates to, describes, or could reasonably be linked to you or your company ("Personal Data") when you access or use our web-based platform, API, and associated tools (collectively, the "Service").
By accessing or using the Service, you agree to the collection and use of information as described in this Privacy Policy. If you do not agree, please do not access the Service. Capitalized terms not defined here have the meanings given in our Terms of Service.
When you sign up, you authenticate through a designated third-party identity provider (Google, GitHub, or Discord). We collect your name, email address, and user ID provided by that platform. We do not receive or store your password as authentication is handled directly by your chosen provider. We use the information received from these providers solely for account creation and authentication purposes and we are not responsible for the privacy practices of these third-party providers.
We collect the text-based prompts, edit instructions, and follow-on textual inputs you submit to the Service ("User Prompts"), as well as any images, 3D models, or other files you upload ("Uploaded Content") to generate or modify your digital assets. User Prompts are retained indefinitely and used to operate, evaluate, and improve the Service, including training and refining our generative models, as described in our Terms of Service.
If you subscribe to a Paid Plan, your financial information is collected and processed exclusively by Stripe, our third-party payment processor. Thrixel does not store your full payment credentials on its servers. We are not responsible for the privacy practices of this third-party provider.
We collect data regarding your interactions with the Service through our own internal tools, including your IP address, browser type, session duration, navigation paths, and feature engagement. We may derive your approximate geographic location from your IP address. We do not use third-party analytics services.
We use cookies strictly for session maintenance and to securely remember your login state between sessions. We do not use advertising, marketing, or third-party cross-site tracking cookies.
We use the information we collect for the following purposes:
Thrixel does not sell your Personal Data. We share your information only in the following circumstances:
We share information with third-party service providers who help us operate the Service. These providers are required to handle your data securely and only for the purposes we specify:
We may share aggregated, de-identified data derived from your use of the Service, including usage trends and generation statistics, with third parties for any lawful business purpose. This data cannot reasonably be used to identify you.
We may disclose your information if required to do so by law, court order, or governmental authority, or if we believe in good faith that such disclosure is necessary to protect the rights, property, or safety of Thrixel, our users, or the public.
If Thrixel is involved in a merger, acquisition, reorganization, or sale of all or substantially all of its assets, your information may be transferred as part of that transaction. We will notify you of any such change as required by applicable law.
The Service interacts with the third-party tools and service providers described above. We are not responsible for the privacy practices or content policies of these third parties.
We retain your account information and associated content for as long as your account remains active and in good standing.
If you request to delete your account, your personal account details, identifiable profile information, and hosted user assets will be removed from our active databases within a reasonable administrative timeframe, subject to any legal obligations requiring us to retain certain records.
User Prompts are retained indefinitely and may continue to be used for model training and Service improvement following account deletion, in accordance with the license you granted us under our Terms of Service. This applies regardless of whether you access the Service under a Free Plan or a Paid Plan.
Thrixel is not required to delete, and will retain indefinitely, any completely anonymized, aggregated, or de-identified data extracted from your Usage Data that can no longer be reasonably linked to you.
We implement reasonable administrative, technical, and physical safeguards designed to protect your Personal Data against unauthorized access, disclosure, alteration, or destruction. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security. During the beta period in particular, the Service may be subject to instability or unforeseen vulnerabilities. You use the Service at your own risk.
The Service is strictly intended for individuals who are at least 18 years of age. We do not knowingly collect or solicit Personal Data from anyone under the age of 18. If we discover that we have inadvertently collected Personal Data from a minor, we will delete that information promptly. If you believe we have inadvertently collected such information, please contact us at support@thrixel.com.
Thrixel operates from the United States and we primarily store and process your information on infrastructure located in the United States. However, some of our service providers may maintain or access infrastructure in other countries. Data protection laws in those countries may differ from those in your country of residence. By using the Service, you consent to such transfer and processing.
Regardless of where you are located, you may have the right to request access to, correction of, or deletion of the Personal Data we hold about you. To submit any such request, please contact us at support@thrixel.com. We will respond within thirty (30) days of receiving your request, though we may extend this period where permitted by applicable law.
Please note that certain information may be exempt from such requests, such as User Prompts that have been incorporated into our training processes and that cannot be extracted or deleted from trained models, as described in Section 4.3.
Additional rights may apply depending on your location, as described in Sections 9 and 10 below.
If you are located in the European Economic Area ("EEA") or the United Kingdom, you may have additional rights under the General Data Protection Regulation ("GDPR") or equivalent local law, including the right to access, correct, delete, or restrict processing of your Personal Data, and the right to data portability.
Our lawful bases for processing your Personal Data include performance of a contract (to provide you the Service), legitimate interests (to operate and improve the Service), and compliance with legal obligations.
To exercise your rights or raise a concern, please contact us at support@thrixel.com. You also have the right to lodge a complaint with your local data protection authority.
Please note that Thrixel does not currently have a designated EU or UK representative or a formal Data Processing Agreement framework in place. If you are an organization subject to GDPR requirements, please contact us at support@thrixel.com to discuss your needs before using the Service.
If you are a California resident, you may have rights under the California Consumer Privacy Act ("CCPA"), including the right to know what Personal Data we collect and how we use it, the right to request deletion of your Personal Data, and the right not to be discriminated against for exercising your privacy rights.
Thrixel does not sell Personal Data as defined under the CCPA. To submit a privacy rights request or inquiry, please contact us at support@thrixel.com.
Some web browsers transmit Do-Not-Track ("DNT") signals to websites. Because there is currently no uniform standard for recognizing or responding to DNT signals, we do not currently respond to them. If an industry or legal standard is adopted in the future, we will update this Privacy Policy accordingly.
We reserve the right to update or modify this Privacy Policy at any time. When we make material changes, we will notify you via the email address associated with your account or by posting a conspicuous notice within the Service. Where required by applicable law, we will seek your affirmative consent before changes take effect.
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at support@thrixel.com.