Thrixel Inc. ("Thrixel," "we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard information that identifies, relates to, describes, or could reasonably be linked to you or your company ("Personal Data") when you access or use our web-based platform, API, and associated tools (collectively, the "Service").
By accessing or using the Service, you agree to the collection and use of information as described in this Privacy Policy. If you do not agree, please do not access the Service. Capitalized terms not defined here have the meanings given in our Terms of Service.
When you sign up, you authenticate through a designated third-party identity provider (Google, GitHub, or Discord). We collect your Personal Data, including, name, email address, and user ID provided by that platform. We do not receive or store your password as authentication is handled directly by your chosen provider. We use the Personal Data received from these providers solely for account creation and authentication purposes and we are not responsible for the privacy practices of these third-party providers.
We collect the text-based prompts, edit instructions, and follow-on textual inputs you submit to the Service ("User Prompts"), as well as any images, 3D models, or other files you upload ("Uploaded Content") to generate or modify your digital assets. If you include Personal Data in your User Prompts or Uploaded Content, you must do so only in compliance with applicable data protection laws.
If you subscribe to a Paid Plan, your financial information is collected and processed exclusively by Stripe, our third-party payment processor. Thrixel does not store your full payment credentials on its servers. We are not responsible for the privacy practices of this third-party provider.
We collect data regarding your interactions with the Service, including your IP address, browser type, session duration, navigation paths, and feature engagement. We may derive your approximate geographic location from your IP address. We collect this data through our own internal tools and, on our website and only where you have consented, through the third-party analytics and advertising technologies described in Section 1.5.
We and our service providers may use cookies and similar technologies to collect usage and browser information when you use our Site. The technologies we use for this automatic data collection may include cookies and web beacons that permit us to verify system and server integrity and generate statistics around the popularity of certain content. We process the information collected through such technologies, which may include or be combined with Personal Data, to help operate certain features of our Site, to remember your login state between sessions, and to help us better understand the features of our Site that you and other users are most interested in. We may use third-party providers to enable certain customer interaction opportunities, content delivery (like audio or video), or other service capabilities.
On our website, we group these technologies into three categories:
We use Google Tag Manager to manage these technologies, and the Meta pixel for category (c). We do not currently use a separate analytics provider; if we adopt one, we will name it here before enabling it. Please see Google's Privacy Policy and Meta's Privacy Policy for information on how those companies process Personal Data.
How we obtain your agreement to categories (b) and (c) depends on where you are.
In every location you can change or withdraw your choice at any time using the "Your Privacy Choices" link in our footer, which opens your cookie preferences. In the European Economic Area, the United Kingdom, and Switzerland a "Cookie settings" control is also available on every page. We honor Global Privacy Control signals wherever you are, as described in Section 10. Withdrawing consent does not affect processing carried out before you withdrew it.
To determine which of the above applies to you, our content delivery network derives your approximate country from your IP address and records it in a strictly necessary cookie. That cookie is used only to decide which consent experience to present, and for no other purpose.
We may use the information we collect for the following purposes:
Thrixel does not sell your Personal Data for monetary consideration. Certain privacy laws, including the California Consumer Privacy Act as amended, define a "sale" or "share" broadly enough to include disclosing online identifiers to advertising platforms for cross-context behavioral advertising. Where you have consented to advertising cookies as described in Section 1.5, our disclosures to Meta may constitute a "sale" or "share" under those laws. You may withdraw that consent at any time, as described in Sections 1.5 and 8. We share your information only in the following circumstances:
We share information with third-party service providers who help us operate the Service. These providers are required to handle your data securely and only for the purposes we specify:
Where advertising cookies are active under Section 1.5, we share online identifiers and information about your activity on our website with Meta Platforms, Inc. so that we can measure the performance of our advertising and show you Thrixel advertisements on Meta's services. Meta is not acting as our service provider for this purpose: it processes this information for its own purposes as an independent controller, and its use of that information is governed by Meta's Privacy Policy. We do not share your name, email address, User Prompts, or Uploaded Content with Meta.
In the European Economic Area, the United Kingdom, and Switzerland this sharing does not occur unless you have consented. Elsewhere it occurs unless you opt out. In either case it stops when you withdraw consent or opt out, by any of the means described in Section 1.5.
We may share aggregated, de-identified data derived from your use of the Service, including usage trends and generation statistics, with third parties for any lawful business purpose. This data cannot reasonably be used to identify you.
We may disclose your information if required to do so by law, court order, or governmental authority, or if we believe in good faith that such disclosure is necessary to protect the rights, property, or safety of Thrixel, our users, or the public.
If Thrixel is involved in a merger, acquisition, reorganization, or sale of all or substantially all of its assets, your information may be transferred as part of that transaction. We will notify you of any such change as required by applicable law.
The Service interacts with the third-party tools and service providers described above. We are not responsible for the privacy practices or content policies of these third parties.
We retain your account information and associated content for as long as your account remains active and in good standing.
If you request to delete your account, your personal account details, identifiable profile information, and hosted user assets will be removed from our active databases within a reasonable administrative timeframe, subject to any legal obligations requiring us to retain certain records.
User Prompts are retained indefinitely and may continue to be used for model training and Service improvement following account deletion, in accordance with the license you granted us under our Terms of Service. This applies regardless of whether you access the Service under a Free Plan or a Paid Plan.
Thrixel is not required to delete, and will retain indefinitely, any completely anonymized, aggregated, or de-identified data extracted from your Personal Data that can no longer be reasonably linked to you.
We implement reasonable administrative, technical, and physical safeguards designed to protect your Personal Data against unauthorized access, disclosure, alteration, or destruction. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security. The Service may be subject to instability or unforeseen vulnerabilities. You use the Service at your own risk.
The Service is strictly intended for individuals who are at least 18 years of age. We do not knowingly collect or solicit Personal Data from anyone under the age of 18. If we discover that we have inadvertently collected Personal Data from a minor, we will delete that information promptly. If you believe we have inadvertently collected such information, please contact us at support@thrixel.com.
Thrixel operates from the United States and we primarily store and process your information on infrastructure located in the United States. However, some of our service providers may maintain or access infrastructure in other countries. Data protection laws in those countries may differ from those in your country of residence.
Depending on where you live, you may have the following rights with respect to your Personal Data under applicable data protection laws:
To exercise any of the privacy rights afforded to you under applicable data protection laws, please e-mail us at support@thrixel.com.
You will not be discriminated against in any way by virtue of your exercise of the rights listed in this Notice. However, should you withdraw your consent or object to processing of your Personal Data, or if you choose not to provide certain Personal Data, we may be unable to provide some, or all, of our Services to you.
Only you, or an authorized agent that you authorize to act on your behalf, may make a request related to your Personal Data. We may need to verify your identity before fulfilling certain requests, and if we cannot verify your identity, we may request additional information from you. If you are an authorized agent making certain requests on behalf of another person, we will also need to verify your identity, which may require proof of your written authorization or evidence of power of attorney. We endeavor to respond to requests within the time period required by applicable law. If we require more time, we will inform you of the reason and extension period in writing.
We do not charge a fee to process or respond to your requests unless they are excessive or repetitive. If we determine that a request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request. We may deny certain requests, or only fulfill some in part, as permitted or required by law. If you are not satisfied with the resolution of your request and you are afforded a right to appeal such decision, you will be notified of our appeal process in our response to your request.
California Shine the Light – Under California Civil Code Section 1798.83, individual customers who reside in California and who have an existing business relationship with us may request information about our disclosure of certain categories of Personal Data to third parties for the third parties' direct marketing purposes, if any. To make such a request, please contact us at support@thrixel.com. Please be aware that not all information sharing is covered by these California privacy rights requirements and only information on covered sharing will be included in our response. This request may be made no more than once per calendar year.
Some web browsers transmit Do-Not-Track ("DNT") signals to websites, and some transmit Global Privacy Control ("GPC") signals. We treat a GPC signal as a valid request to opt out of the sale or sharing of your Personal Data and of processing for cross-context behavioral advertising. Where we receive one, the advertising technologies described in Section 1.5 remain disabled and cannot be enabled through our cookie banner. We do not currently respond to DNT signals, as no common standard for them has been adopted.
We reserve the right to update or modify this Privacy Policy at any time. When we make material changes, we will notify you via the email address associated with your account or by posting a conspicuous notice within the Service. Where required by applicable law, we will seek your affirmative consent before changes take effect.
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at support@thrixel.com.