Privacy Policy

NeatPix is operated by XIAO ZHIYI (China). This policy explains what we collect and why. Questions: support@neatpix.com.

What we collect

• Account: your email address. If you sign in with Google, also the name on your Google account. We do not store your profile picture or any Google access tokens, and we never see your Google password.
• Purchases: payments are processed by Creem, our merchant of record. We receive your order number, email, country and amount paid, but never your card details. We keep your credit history (purchases, credits used and refunded) for as long as your account exists, because your balance is calculated from it.
• Usage: which tools you run, IP address and browser type, and a random device identifier. We use this to provide the service, prevent abuse and fraud, and handle refund or chargeback disputes. Kept for 180 days, then deleted.
• Free credits: when an account is created we record a one-way hash of the email address, the device identifier and the IP address, so free credits cannot be claimed again by creating more accounts. Kept for 180 days, also after the account is deleted.
• Checkout security: when you start a checkout we record your account, the time and a one-way hash of your IP address, to stop card testing and limit repeated attempts. Kept for 30 days. If a payment is disputed with the card issuer or is found to be fraudulent, we keep the account identifier, a one-way hash of the email address and the payment provider's customer number on a list of accounts that cannot buy again, for 2 years, also after the account is deleted.
• Files: files you upload and results we generate are deleted automatically after 24 hours. To speed things up, the result for an identical input may be kept and reused for up to 24 hours, including for other users who submit the same input.
• AI runs: for each run we record the tool, the time, whether it succeeded and what it cost us, but not your input or the result. These records are kept while your account exists, because they explain your credit usage, and are deleted 180 days after the account is deleted; cost totals are kept without any account identifier.

Who processes data for us

• Cloudflare: hosting, storage and security, including Cloudflare Turnstile, which checks that sign-in and checkout requests come from a person.
• Creem, our merchant of record: payments, receipts and tax.
• Resend: sending sign-in links and account emails.
• Google: sign-in, if you choose “Sign in with Google”.

Cookies

We use the cookie __Secure-wz.session_token to keep you signed in. It lasts 30 days and is removed when you sign out. During Google sign-in we also set a short-lived security cookie that expires after 5 minutes. When you sign in we also set wz.device, a random identifier that lasts 365 days and is used to prevent abuse of free credits. We do not use advertising or analytics cookies.

Your choices

You can delete your account at any time from your account page; this deletes your profile and signs you out everywhere. You can also ask us for a copy of your data or to correct it by emailing support@neatpix.com. We reply within 30 days. We do not sell your personal data.

After an account is deleted, we keep purchase records, your credit history and the usage and fraud-prevention records described above for up to 180 days, because we need them to handle refunds, chargebacks and abuse and to meet tax obligations. Purchase records may be kept longer where tax law requires. The list of accounts that cannot buy again after a disputed or fraudulent payment is the exception: it is kept for 2 years, as described above.

Changes

If we change this policy we update the date at the top of this page.