PixelForge / invite-only preview
Privacy notice
What PixelForge processes to run the workbench, why it is needed, and the choices available to preview users.
1. Data we process
We process account details, organization membership, prompts, generation settings, uploaded references, generated assets, canon history, job and credit records, support messages, and operational security logs. Payment providers process payment details; raw card numbers do not pass through PixelForge.
2. Why we process it
We use this data to authenticate users, create and deliver assets, maintain project canon, meter credits, prevent fraud and abuse, troubleshoot failures, comply with legal duties, and improve reliability. We do not sell personal information or use customer content to train a shared model.
3. Legal bases
Where the GDPR or UK GDPR applies, core account, generation, and billing processing is necessary to provide the service you request. Security, abuse prevention, and product reliability rely on legitimate interests. Legal preservation and reporting rely on legal obligations. Optional training or marketing requires a separate choice where consent is required.
4. Service providers and transfers
Infrastructure, authentication, email, monitoring, payment, and content-safety providers may process data for PixelForge under contractual restrictions. Processing may occur in the United States or other countries; legally required transfer safeguards will be used when applicable. The final public notice will name the operator and current subprocessors.
5. Retention and deletion
Raw generation intermediates are configured for a limited retention window; generated assets, project records, audit entries, and credit history remain while needed to provide the account and resolve disputes. Backups rotate on an operational schedule and age out after deletion. Customer-specific training artifacts, when implemented, must be isolated so the whole artifact can be deleted with the customer request.
6. Your choices and rights
Depending on where you live, you may request access, correction, deletion, restriction, objection, or portability, and may complain to a privacy regulator. Some financial, security, or legal records may need to be retained. Send a request through the contact in your account invitation; identity verification may be required.
7. Security and children
PixelForge uses access controls, private service networking, encrypted transport, tenant isolation, restricted worker credentials, and tested backups. No system is risk-free. PixelForge is not directed to children, and preview users must not submit a child's personal information or sexualized minor content.
8. Changes
Material changes receive a new version. The workbench blocks generation until an authenticated user explicitly accepts every current document, preserving prior versions as acceptance history during the account lifetime.