Privacy policy

Last updated: 27 October 2026

Pixangelo operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the “Services”). Pixangelo is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use and disclose your personal information when you visit, use or make a purchase or other transaction using the Services or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy will control with respect to the collection, processing and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use and disclosure of your information as described in this Privacy Policy.

Personal Information We Collect or Process

When we use the term “personal information”, we are referring to information that identifies or can reasonably be linked to you or another person. Personal information does not include information that is collected anonymously or that has been de-identified, so that it cannot identify or be reasonably linked to you. We may collect or process the following categories of personal information, including inferences drawn from this personal information, depending on how you interact with the Services, where you live and as permitted or required by applicable law:

• Contact details including your name, address, billing address, shipping address, phone number and email address.
• Financial information including credit card, debit card and financial account numbers, payment card information, financial account information, transaction details, form of payment, payment confirmation and other payment details.
• Account information including your username, password, security questions, preferences and settings.
• Transaction information including the items you view, put in your cart, add to your wishlist or purchase, return, exchange or cancel, and your past transactions.
• Communications with us including the information you include in communications with us, for example when sending a customer support inquiry.
• Device information including information about your device, browser or network connection, your IP address and other unique identifiers.
• Usage information including information regarding your interaction with the Services, including how and when you interact with or navigate the Services.

Personal Information Sources

We may collect personal information from the following sources:

• Directly from you including when you create an account, visit or use the Services, communicate with us or otherwise provide us with your personal information;
• Automatically through the Services including from your device when you use our products or services or visit our websites, and through the use of cookies and similar technologies;
• From our service providers including when we engage them to enable certain technology and when they collect or process your personal information on our behalf;
• From our partners or other third parties.

How We Use Your Personal Information

Depending on how you interact with us or which of the Services you use, we may use personal information for the following purposes:

• Provide, tailor and improve the Services. We use your personal information to provide you with the Services, including to perform our contract with you, to process your payments, to fulfill your orders, to remember your preferences and items you are interested in, to send notifications to you related to your account, to process purchases, returns, exchanges or other transactions, to create, maintain and otherwise manage your account, to arrange for shipping, to facilitate any returns and exchanges, to enable you to post reviews, and to create a customized shopping experience for you, such as recommending products related to your purchases. This may include using your personal information to better tailor and improve the Services.
• Marketing and advertising. We use your personal information for marketing and promotional purposes, such as to send marketing, advertising and promotional communications by email, text message or postal mail, and to show you online advertisements for products or services on the Services or other websites, including based on items you previously have purchased or added to your cart and other activity on the Services.
• Security and fraud prevention. We use your personal information to authenticate your account, to provide a secure payment and shopping experience, to detect, investigate or take action regarding possible fraudulent, illegal, unsafe or malicious activity, to protect public safety and to secure our services. If you choose to use the Services and register an account, you are responsible for keeping your account credentials safe. We highly recommend that you do not share your username, password or other access details with anyone else.
• Communicating with you. We use your personal information to provide you with customer support, to be responsive to you, to provide effective services to you and to maintain our business relationship with you.
• Legal reasons. We use your personal information to comply with applicable law or respond to valid legal process, including requests from law enforcement or government agencies, to investigate or participate in civil discovery, potential or actual litigation or other adversarial legal proceedings, and to enforce or investigate potential violations of our terms or policies.

How We Disclose Personal Information

In certain circumstances, we may disclose your personal information to third parties for legitimate purposes subject to this Privacy Policy. Such circumstances may include:

• With Shopify, vendors and other third parties who perform services on our behalf (e.g. IT management, payment processing, data analytics, customer support, cloud storage, fulfillment and shipping).
• With business and marketing partners to provide marketing and advertising services to you. For example, we use Shopify to support personalized advertising with third-party services based on your online activity with different merchants and websites. Our business and marketing partners will use your information in accordance with their own privacy notices. Depending on where you reside, you may have a right to direct us not to share information about you to show you targeted advertisements and marketing based on your online activity with different merchants and websites.
• When you direct, request us or otherwise consent to our disclosure of certain information to third parties, such as to ship you products or through your use of social media widgets or login integrations.
• With our affiliates or otherwise within our corporate group.
• In connection with a business transaction such as a merger or bankruptcy, to comply with any applicable legal obligations (including to respond to subpoenas, search warrants and similar requests), to enforce any applicable terms of service or policies, and to protect or defend the Services, our rights, and the rights of our users or others.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve the Services for you. Information you submit to the Services will be transmitted to and shared with Shopify as well as third parties that may be located in countries other than where you reside, in order to provide and improve the Services for you. In addition, to help protect, grow and improve our business, we use certain Shopify enhanced features that incorporate data and information obtained from your interactions with our Store, along with other merchants and with Shopify. To provide these enhanced features, Shopify may make use of personal information collected about your interactions with our store, along with other merchants and with Shopify. In these circumstances, Shopify is responsible for the processing of your personal information, including for responding to your requests to exercise your rights over use of your personal information for these purposes. To learn more about how Shopify uses your personal information and any rights you may have, you can visit the Shopify Consumer Privacy Policy. Depending on where you live, you may exercise certain rights with respect to your personal information here: Shopify Privacy Portal link.

Third-Party Websites and Links

The Services may provide links to websites or other online platforms operated by third parties. If you follow links to sites not affiliated with or controlled by us, you should review their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness or reliability of information found on these sites. Information you provide on public or semi-public venues, including information you share on third-party social networking platforms, may also be viewable by other users of the Services and/or users of those third-party platforms without limitation as to its use by us or by a third party. Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators, except as disclosed on the Services.

Children’s Data

The Services are not intended to be used by children, and we do not knowingly collect any personal information about children under the age of majority in your jurisdiction. If you are the parent or guardian of a child who has provided us with their personal information, you may contact us using the contact details set out below to request that it be deleted. As of the Effective Date of this Privacy Policy, we do not have actual knowledge that we “share” or “sell” (as those terms are defined in applicable law) personal information of individuals under 16 years of age.

Security and Retention of Your Information

Please be aware that no security measures are perfect or impenetrable, and we cannot guarantee “perfect security”. In addition, any information you send to us may not be secure while in transit. We recommend that you do not use insecure channels to communicate sensitive or confidential information to us.

How long we retain your personal information depends on different factors, such as whether we need the information to maintain your account, to provide the Services, to comply with legal obligations, to resolve disputes or to enforce other applicable contracts and policies.

Your Rights and Choices

Depending on where you live, you may have some or all of the rights listed below in relation to your personal information. However, these rights are not absolute, may apply only in certain circumstances and, in certain cases, we may decline your request as permitted by law.

• Right to Access / Know. You may have a right to request access to personal information that we hold about you.
• Right to Delete. You may have a right to request that we delete personal information we maintain about you.
• Right to Correct. You may have a right to request that we correct inaccurate personal information we maintain about you.
• Right of Portability. You may have a right to receive a copy of the personal information we hold about you and to request that we transfer it to a third party, in certain circumstances and with certain exceptions.
• Managing Communication Preferences. We may send you promotional emails, and you may opt out of receiving these at any time by using the unsubscribe option displayed in our emails to you. If you opt out, we may still send you non-promotional emails, such as those about your account or orders that you have made.

You may exercise any of these rights where indicated on the Services or by contacting us using the contact details provided below. To learn more about how Shopify uses your personal information and any rights you may have, including rights related to data processed by Shopify, you can visit https://privacy.shopify.com/en.

We will not discriminate against you for exercising any of these rights. We may need to verify your identity before we can process your requests, as permitted or required under applicable law. In accordance with applicable laws, you may designate an authorized agent to make requests on your behalf to exercise your rights. Before accepting such a request from an agent, we will require that the agent provide proof that you have authorized them to act on your behalf, and we may need you to verify your identity directly with us. We will respond to your request in a timely manner as required under applicable law.

Complaints

If you have complaints about how we process your personal information, please contact us using the contact details provided below. Depending on where you live, you may have the right to appeal our decision by contacting us using the contact details set out below, or to lodge your complaint with your local data protection authority. For the EEA, you can find a list of the competent data protection supervisory authorities here.

International Transfers

Please note that we may transfer, store and process your personal information outside the country you live in.

If we transfer your personal information out of the European Economic Area or the United Kingdom, we will rely on recognized transfer mechanisms such as the European Commission’s Standard Contractual Clauses or any equivalent contracts issued by the relevant competent authority of the United Kingdom, unless the data transfer is to a country that has been determined to provide an adequate level of protection.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal or regulatory reasons. We will post the revised Privacy Policy on this website, update the “Last updated” date and provide notice as required by applicable law.

Contact

If you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of the rights available to you, please email us at info@pixangelo.com, call us at +421 950 890 037 or contact us at DREVKO s. r. o., Vitanová 423, 027 12 Vitanová, Slovakia. For the purpose of applicable data protection laws, we are the data controller of your personal information.

Privacy in Pixangelo Studio

This section explains how we process personal data when you create artwork in Pixangelo Studio, both in the editor in the www.pixangelo.com shop and on create.pixangelo.com. It also covers the AI assistant, uploaded photos, saved chats and ordering artwork. Purchases, payment, delivery and the shop customer account are described in the preceding general part. Version 2026-11.

Who processes your data

The controller is DREVKO s. r. o., Vitanová 423, 027 12 Vitanová, Slovakia, Company ID (IČO) 52 138 445, registered in the Commercial Register of the District Court Žilina, section Sro, file No. 71447/L.

• E-mail for questions about personal data: info@pixangelo.com
• Phone: +421 950 890 037
• Postal address: Oravická 1759, 028 01 Trstená
• We have not appointed a data protection officer because the law does not require us to.

What data we process

• Browser identifier: a random code in the px_session cookie that tells us which designs, chats and free creations are yours.
• Your e-mail, if you enter it. We link credits to it and use it to match your order with your design.
• Briefs and conversations: motifs, edit instructions, chat titles, your messages to the AI assistant and its replies.
• Generated images: previews, originals for further edits and, after payment, print files, together with technical data (model, version, seed and settings).
• Photos you upload to Photo to art or On my wall. When you upload a photo, we remove data stored in it, such as GPS location.
• Security data: a cryptographic fingerprint of your IP address (we do not store the IP address itself), results of the automatic content check, time and type of action, and credit usage.
• Order data from Shopify: order number, ordered variant and the order e-mail.
• We obtain data from you and order data from Shopify. If another person appears in a photo, whoever uploads it is responsible for having the right to use it.

What we use data for and our legal basis

• Creating in the editor (designs, edits, chats, credits, My art, wall, In a room, On my wall): performance of a contract and steps taken at your request before entering into one, Art. 6(1)(b) GDPR.
• Matching your order with your design, production, reprints and complaints: performance of a contract, (b), and legal obligations arising from liability for defects, (c).
• Content checks and an evidence trail. For every creation we record the brief, the IP address fingerprint, your e-mail (if you entered it) and the design identifier. This prevents illegal content from being created and printed, helps us detect abuse and lets us defend legal claims. Legal basis: legitimate interest, (f).
• Protection against bots and abuse of free creations (request limits, Cloudflare Turnstile): legitimate interest, (f).
• AI assistant: answering your questions and preparing the brief is performance of a contract, (b). Keeping a record of the conversation for quality, cost and abuse control is our legitimate interest, (f).
• Operating statistics and error reports without e-mail, IP address or brief texts: legitimate interest in running the service, (f). We enable statistics that need cookies or an identifier only with your consent in the cookie banner, (a).
• Accounting and tax: legal obligation, (c).
• For legitimate interests we considered that we actually print and sell the artwork, so we need to know who created what. You can object to such processing at any time.
• Entering an e-mail or uploading a photo is optional. Without an e-mail you have a lower daily creation limit and we cannot match an order with your design.

Artificial intelligence and automatic checks

• AI models create and edit the images. Before creating, we automatically translate a brief written in Slovak or another language into English.
• The AI assistant in the chat is a computer program, not a person. It can make mistakes.
• The automatic content check may block a brief, a photo or a result. This is not a decision with legal effects under Art. 22 GDPR, and a person checks every artwork before printing. If you think we blocked something by mistake, write to us.
• We do not use your briefs, photos or images to train AI models, and we do not allow our processors to do so.

Who we share data with

We do not sell data. We share it only with processors who help us run the service, and only to the extent needed for the task in question:

• A provider of an AI service for creating and editing images and upscaling them for print (USA). It receives the English brief, images to edit and your photos from Photo to art and On my wall. The author of the model used may also process the request.
• A provider of automatic content checks and translation (USA): checks of texts and images, including uploaded photos, and translation of the brief into English.
• A provider of the language model behind the AI assistant in the chat (USA). It receives your messages, earlier messages in the conversation and the state of your design (style, motif, size). It does not receive your photos, your editor e-mail or your IP address. We replace any e-mail address or phone number written in a message before sending it.
• A provider of image storage and delivery and of bot protection (USA). Bot protection is provided by Cloudflare Turnstile.
• A provider of our server and database (USA) with a data centre in Germany. Uploaded photos and encrypted backups are stored there too.
• The operator of the shop platform (Ireland and the companies of its group): shop, cart, checkout, orders, customer account and the cookie banner. We pass the chosen style, motif text, format, material and a link to the preview to the cart and the order.
• We will send you a list of processors with their names on request to info@pixangelo.com.
• We provide data to public authorities only when the law requires us to, for example if illegal content is suspected.
• We make the artwork ourselves in our own workshop in Trstená.

Transfers outside the European Union

The providers of AI services, content checks, storage and the server are based in the USA and may also process data there; the shop platform also in Canada and the USA. We protect these transfers with the European Commission's standard contractual clauses (Art. 46(2)(c) GDPR). If a recipient is certified under the EU-U.S. Data Privacy Framework, the transfer also relies on the Commission's adequacy decision (Art. 45 GDPR); for Canada, the Commission's adequacy decision applies. We will send you a copy of the safeguards on request.

How long we keep data

• Designs you do not buy, including the brief: 365 days after creation.
• Saved chats: 365 days after the last activity. A chat with an ordered artwork: 25 months.
• We permanently delete a removed chat no later than 365 days after it was removed. Artwork from it stays in My art until its own period ends.
• Messages to the AI assistant and its replies: 365 days after sending. A record of the cost and length of a reply, without its text, may remain until the end of the same period even after the chat is deleted.
• Photo in Photo to art: always at most 30 days after upload, even if you order the artwork (we do not need it for production). Designs made from the photo that you do not buy: 365 days.
• Wall photo in On my wall and previews made from it: 7 days. You can also delete them right away.
• Purchased artwork: preview, original and print file for 25 months after payment (24-month warranty period and reprints).
• Brief, technical data and content-check records of purchased artwork: 36 months after the last order to defend legal claims; then we delete them.
• Blocked attempts (brief, IP address fingerprint, check result): 12 months.
• Photo upload record without the photo itself (confirmation of rights, check result, IP address fingerprint): 12 months.
• Browser identifier: the cookie is valid for 12 months. 400 days after creation we remove the e-mail and the IP address fingerprint from the server record; only an anonymous technical record remains. If purchased artwork belongs to it, we remove the e-mail 36 months after the last order.
• E-mail and credit account: while you have unused purchased credits or until you ask for deletion; unused purchased credits expire on deletion. We delete an account without credits after 24 months of inactivity.
• Backups: at most 14 days. Technical server logs contain no brief texts or e-mails and we keep them only for a short time.
• Record of how we handled your request (deletion, copy of data): 3 years.
• Accounting documents for an order: 10 years under the Accounting Act.

Cookies and browser storage

The editor uses two cookies of its own and a few entries that stay only in your browser.

• px_session is an essential editor cookie (HttpOnly, Secure, valid for 12 months). It belongs only to the editor on create.pixangelo.com and is the same inside and outside the shop. Without it the editor would not know which designs and credits are yours, so we use it without consent (Section 109(8) of Slovak Act No. 452/2021 Coll.).
• px_locale is an essential editor cookie (HttpOnly, Secure, valid for 12 months) that remembers the language chosen in the shop so the editor stays in the same language. It contains only the language code.
• Browser storage (localStorage, sessionStorage) sends nothing to us. It holds the list of your favourite artworks, the state of the side panel and the welcome screen, an unfinished message (until you close the tab) and notices you have seen.
• Cloudflare Turnstile checks that you are not a robot. It processes technical browser data and your IP address under the Cloudflare Turnstile Privacy Addendum (https://www.cloudflare.com/turnstile-privacy-policy/).
• You set Shopify shop cookies, including analytics and marketing cookies, in the cookie banner. The Cookie settings link is in the shop footer.

Usage measurement

To improve the editor, we evaluate aggregate statistics from normal operation (for example how many created designs end in an order); these totals do not contain the text of your briefs, your IP address or e-mail. If you allow analytics cookies in the shop, we additionally store, against the random identifier of your session, which steps in the editor you went through (for example opening the configurator), the shop language and the device type. We delete these records no later than 90 days after consent is given, and you can change your consent at any time in the shop's cookie settings. Without consent we record nothing from your browser.

Error reports

When an error occurs in the editor, your browser sends us a technical record: the type of error, the place in the application, and the browser version and type. The record contains no IP address, e-mail or brief texts. We keep the record details for 30 days and anonymous summaries (error type and counts) for 90 days.

Shared links

• When you share a chat, we publicly show the link title, the artworks and — if you choose — your messages and the assistant's replies. We do not show your e-mail, IP address or any other details about you.
• Artwork made from photos and room photos is never shared. We automatically remove e-mail addresses, phone numbers and web links from shared messages.
• While a link is valid, we keep the shared designs (including their print file) and the shared messages so that others can view or order them; otherwise unpurchased designs would be deleted after 90 days.
• You can stop sharing at any time. The link stops working immediately and the content disappears from our systems within 30 days; a link is valid for at most the period you chose (at most 1 year). A social network may keep showing the preview in messages already sent for a while.
• When a link is created and when content is reported, we store a hashed IP address to protect against abuse. We store the e-mail from a report only if you provide it, for at most 180 days.
• We publish the copy at your request (Art. 6(1)(b) GDPR) and it passes a content check before publication.
• By sharing a chat you agree that anyone with the link can see it and that others may order prints of the shared artworks or create their own designs based on them. You must not share content that breaks the law, infringes the rights of others or our terms. We review reported content and may block it; you will see the reason in Shared links. Anyone can report inappropriate content using the “Report content” link on the shared page.

Signing in and devices

If you sign in to the studio with your store account, we link your chats, designs, walls and credits to your verified e-mail so you can see them on every device where you are signed in. We keep the store customer identifier and the e-mail. You can remove the link by signing out or by asking us to delete your data. Legal basis: performance of a contract, Art. 6(1)(b) GDPR.

Improving the assistant

To help our studio assistant better understand what customers want, we create anonymised records from finished conversations: the conversation texts, the artwork brief, the chosen style, the edits and whether the design ended up in the cart or in an order. Legal basis: legitimate interest (improving the service), Art. 6(1)(f) GDPR.

• Before storing them, we remove names, e-mail addresses, phone numbers, addresses, order numbers and links. To detect names, text without contact details may be processed by the language model of the AI provider we use for the chat. Text we are not sure about is not stored.
• The records do not contain your IP address, e-mail or session identifier and never contain your photos. We keep them only on our own server and do not use them to train models at AI providers.
• We delete them after 25 months; only general insights and aggregate statistics without personal data remain. You can object to this processing and ask for erasure — we will delete these records too.

Your rights

You have the right to access your data, to have it corrected or erased, to restrict processing, to data portability and to object to processing based on legitimate interest. You can withdraw consent at any time.

• Directly in the studio: Privacy and data → Download my data or Delete data from this browser.
• By e-mail to info@pixangelo.com. Write from the address the request concerns so that we can verify you. We reply within 1 month. In complex cases we may extend this period by up to 2 months and tell you why.
• After deletion we keep only what we must keep by law or to defend legal claims, for example orders, complaint data or blocked attempts. We will tell you what this is and for how long.
• You can lodge a complaint with the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27, www.dataprotection.gov.sk.

How we protect data

• The connection is encrypted (HTTPS).
• We store uploaded photos in private storage, never at a public address.
• Preview links are valid for a limited time, and clean originals are never sent to your browser.
• We store your IP address only as a cryptographic fingerprint.
• Backups are encrypted. Only an authorised person has access to the data.

Children

The editor is not intended for people under 16. A photo of a child may only be uploaded by a parent or a person with the consent of the child's legal guardian.

Changes

We update this section when a feature is added or the way we process data changes. The current version is always on this page. Version 2026-11, effective from 27 October 2026.