Privacy Policy

1. Who We Are

The controller of your personal data is Bigpixel Maciej Nowakowski, NIP 659 153 01 34("we", "us"), operating bigpixel.pl and The Big Pixel batch image studio. This Privacy Policy explains how we collect, use, and protect personal data when you use the Service (including waitlist signup, accounts, Studio, collections, and Pro checkout).

2. Data We Collect

We may collect the following categories of data:

• Account data — name, email address, and authentication credentials managed through our identity provider (Amazon Cognito)
• Waitlist / interest data — email address and related signup metadata when you request access
• Content data — images and files you upload, collection and pipeline metadata, processing outputs, and download/export artifacts
• Usage & quota data — actions in the app, storage consumption, pipeline credit counts, and session information
• Payment data — billing-related identifiers and entitlement status for Pro purchases. Card details are processed by Stripe; we do not store full payment card numbers
• Technical data — IP address, browser type, device information, and diagnostic logs
• Communications — messages you send via support or in-app feedback

3. How We Use Your Data

We use personal data to:

• Provide, maintain, and improve the Service
• Authenticate users and secure accounts
• Process uploads, run image pipelines (resize, filters, export), store collections, and deliver downloads
• Enforce Free and Pro plan limits (storage and credits)
• Process Pro purchases and fulfill entitlements via Stripe
• Manage waitlist invitations and access waves
• Monitor performance, prevent abuse, and troubleshoot issues
• Send service-related notices and respond to support or feedback
• Comply with legal obligations

We process your data on the legal bases of contract performance, legitimate interests (such as security and product improvement), and consent where required (for example optional marketing, if offered).

4. Automated Image Processing

When you run a pipeline, your images and related metadata are processed automatically to apply the steps you selected (for example resize, creative filters, and export encoding). Processing is performed to deliver the requested functionality. We do not use your private uploads to train public third-party models without your explicit consent. Features labeled as coming soon are not active processing paths until released.

5. Data Sharing

We do not sell your personal data. We may share data with:

• Infrastructure providers — cloud hosting, object storage, databases, and authentication (including Amazon Web Services) that process data on our behalf
• Payment processors — Stripe, to complete Pro checkout and related payment operations
• Professional advisers — where required for legal, accounting, or compliance purposes
• Authorities — when required by law or to protect rights and safety

All processors are bound by contractual obligations to protect your data and use it only as instructed.

6. International Transfers

Your data may be processed in the European Economic Area and, where necessary, in other countries with appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms recognized under GDPR.

7. Retention

We retain account, content, usage, and entitlement data for as long as your account is active or as needed to provide the Service. Waitlist emails may be retained until we invite you or you ask us to delete them. After account deletion, we delete or anonymize personal data within a reasonable period, except where retention is required by law or for legitimate security or accounting purposes (including payment records).

8. Security

We implement technical and organizational measures to protect your data, including encryption in transit, access controls, and monitoring. No method of transmission or storage is completely secure; please use a strong, unique password for your account.

9. Your Rights

If you are in the EEA or UK, you may have the right to access, rectify, erase, restrict, or port your personal data, and to object to certain processing. You may also withdraw consent where processing is consent-based, and lodge a complaint with your local data protection authority (in Poland: Prezes Urzędu Ochrony Danych Osobowych).

To exercise your rights, contact privacy@bigpixel.pl. We will respond within the timeframes required by applicable law.

10. Cookies & Local Storage

We use essential cookies and local storage to maintain sessions, remember preferences, and keep the Service secure. We do not use non-essential tracking cookies without your consent.

11. Children

The Service is not directed at children under 16. We do not knowingly collect personal data from children. Contact us if you believe a child has provided data and we will delete it promptly.

12. Changes

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated date. We encourage you to review this policy periodically.

13. Contact

Controller / administrator: Bigpixel Maciej Nowakowski, NIP 659 153 01 34.

Privacy inquiries: privacy@bigpixel.pl