Privacy Policy
1. Who We Are
PixGlory is operated by DevGlory LTD, a company registered in Bulgaria (EIK: BG205670946), which is the data controller for the personal data described in this policy.
For any privacy-related questions, please contact us at: support@pixglory.com
2. Information We Collect
Account Information
- Email address
- Name (if provided via OAuth)
- Profile information from Google or GitHub (if you use OAuth sign-in)
Content You Upload
- Images you upload for processing
- Processed/transformed images we generate for you
- Images and assets delivered through our CDN service
Usage Information
- Number of image transformations performed
- Storage space used
- CDN bandwidth consumption
- File metadata (size, format, dimensions)
Payment Information
Payment processing is handled by Polar, our merchant of record. We do not store your credit card details. Polar may collect payment information in accordance with their Privacy Policy.
Cookies
We use only essential cookies, for authentication and security. These are necessary for the service to function and cannot be disabled. We do not use advertising or analytics cookies; our analytics (Cloudflare Web Analytics) is cookieless and collects no personal data. See our Cookie Policy for the full list.
3. How We Use Your Information
We use your information to:
- Provide and maintain our services (Image Processing and CDN Delivery)
- Process your image transformations and deliver content via CDN
- Manage your account and subscriptions
- Communicate with you about your account or service updates
- Prevent fraud and ensure security
- Comply with legal obligations
4. Legal Basis for Processing (GDPR)
We process your data based on:
- Contract: Processing necessary to provide our service to you
- Legitimate Interest: Security, fraud prevention, and service improvement
- Legal Obligation: Compliance with applicable laws
5. Data Retention
Your Images: We store your uploaded and processed images indefinitely until you choose to delete them or delete your account.
Account Data: Retained until you delete your account.
Optional Auto-Deletion: You can enable automatic deletion of original uploads 7 or 30 days after processing in your processing settings. Generated ZIP archives expire and are deleted automatically.
Technical Logs: Server logs and error reports are retained for up to 90 days for security and reliability purposes.
Transaction Records: Retained for 7 years as required by law for accounting purposes.
6. Data Sharing
We share your data with the following processors, each bound by a data processing agreement:
- Cloudflare, Inc.: Hosting, content delivery, secure file storage (R2), bot protection (Turnstile), and cookieless web analytics
- Neon, Inc.: Managed database hosting for account and content metadata
- Railway Corp.: Container hosting for our image processing engine, which reads and writes your image files while a transformation runs. Deployed in Railway's EU West region
- Polar Software, Inc.: Payment processing, as our merchant of record (invoices are retained by Polar as required by tax and accounting law, including after account deletion)
- Amazon Web Services (SES): Delivery of transactional email (sign-in codes, batch and quota notifications, invitations)
- Functional Software, Inc. (Sentry): Error monitoring, limited to technical error reports
We do not sell your personal information to anyone.
7. International Data Transfers
DevGlory LTD is based in Bulgaria (EU). Your data may be processed in the United States, where our infrastructure providers (Cloudflare, Neon, Railway, Amazon Web Services, Sentry, Polar) operate servers.
Two of these are pinned to specific regions: our image processing engine runs in Railway's EU West region, and transactional email is sent through Amazon SES in eu-central-1. Cloudflare's Workers and R2 storage are global by design, so a request may be served from whichever location is closest to the person making it.
These transfers are protected by appropriate safeguards: each of these providers participates in the EU-US Data Privacy Framework and/or offers Standard Contractual Clauses as part of their data processing agreements.
8. Your Rights (GDPR)
If you are in the European Economic Area, you have the right to:
- Access: Request a copy of your personal data. You can download your data as JSON at any time from your profile page
- Rectification: Correct inaccurate data
- Erasure: Request deletion of your data
- Portability: Receive your data in a portable format via the self-serve JSON export on your profile page, and your images via the existing download options
- Object: Object to certain processing activities
- Complaint: Lodge a complaint with your local data protection authority
To exercise these rights, contact us at support@pixglory.com.
9. California Residents (CCPA)
If you are a California resident, you have the right to:
- Know what personal information we collect about you
- Request deletion of your personal information
- Opt-out of the sale of personal information (we do not sell your data)
- Non-discrimination for exercising your privacy rights
Categories of information we collect: Identifiers (email, name), commercial information (subscription status), and internet activity (usage data).
10. Security
We implement appropriate technical and organizational measures to protect your data, including:
- Encryption in transit (HTTPS/TLS)
- Secure authentication systems
- Access controls and monitoring
11. Children
Our service is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by email or through a notice on our website.
13. Contact Us
For any questions about this Privacy Policy or our data practices, please contact us at:
DevGlory LTD
Email: support@pixglory.com
EIK: BG205670946