Sécurité et traitement des données

Ce que nous ne faisons jamais

• Nous n'utilisons jamais vos fichiers ni votre contenu pour entraîner des modèles d'IA.
• Nous ne vendons ni ne publions jamais vos fichiers. Les fournisseurs d'infrastructure et de traitement ne les manipulent que dans la mesure nécessaire pour réaliser l'opération que vous avez demandée.
• Temporary processing files expire within 24 hours — except private account uploads, saved tool results and editable Photo Editor designs, kept without automatic expiration while active in your account; and a result you deliberately share, which lives at its public link anyone who has it can open without automatic expiration while Pixoate provides the sharing service; when you are signed in, the small preview image behind each My Work entry, kept 7 days on the free plan or 180 days on Premium and never a copy of your file; and an image you explicitly tick a box to let our team investigate after a thumbs-down rating, kept up to 30 days.
• Nous n’ajoutons jamais de filigrane Pixoate à vos téléchargements. L’utilisation standard des outils est gratuite et ne nécessite aucune inscription.

Partage public et créations privées du compte

Sharing a result is the only thing that ever makes it public, and it only happens when you ask for it. New share links keep that result — and, where the shared page shows a before/after, the photo you started from — without automatic expiration while Pixoate provides the sharing service. A link ends when you remove it, delete its owning account, or we remove it for abuse, legal requirements, or discontinuation of the sharing service. Lifetime sharing is not a guarantee of permanent archival storage; keep your own copy. Existing links with an expiry date keep that date, shown on their shared page. A share link is public: the address is unguessable, but it is not password-protected and does not require signing in, so anyone who has the link can open the result. The shared page is marked noindex, which instructs search engines not to include it in search results. Nothing is ever published unless you create the link yourself. To take a link down, open the result and choose “Remove link” — you can revoke your own share link at any time, and the page stops opening for everyone who has it. Once no active share or other disclosed retention exception keeps a file, it becomes eligible for the normal cleanup. When signed in, accepted tool uploads and completed results can be saved privately within your account storage allowance, alongside editable Photo Editor designs. Reverse image search is excluded. My Work shows files whose account save completed; a processing result can still be downloaded immediately if its account save fails. Active saved work has no automatic expiration. Storage limits and subscription downgrades do not delete existing work; they can prevent new saves that need more space. Removing an item moves it to Trash for 30 days, except files still needed by saved designs or related results, which remain with that work. Removing a library entry does not revoke a separate public share link. Deleting your account revokes access and queues removal of its stored files. The five previous design saves are kept for recovery, not as an independent backup. Keep exports of important work.

Votre historique de travaux

If you are signed in, we also keep a short history of result previews, separate from the saved files in My Work. An entry is a small preview image — at most 32 KB — plus the details of the job, such as the tool you used and the file name. The history entry is never a copy of the file you uploaded and does not itself retain a processed file. Files not retained by account storage, sharing or another disclosed exception expire on the normal 24-hour schedule, after which an expired result can no longer be opened from its preview. How far back the history reaches depends on your plan — 7 days on the free plan, 180 days on Premium — and each entry deletes itself automatically at the end of that window. You can remove a single entry or clear the whole list from recent history at any time; this removes its preview and details, not a separately saved library file. Deleting your account erases the history with it. Signed out, none of this happens: the recent-work list on a signed-out device is stored in that browser only and is never sent to us.

Images que vous nous demandez d'analyser

Si un résultat pose problème et que vous le notez négativement, nous vous proposons une case à cocher permettant à notre équipe de conserver la photo que vous avez importée ainsi que le résultat produit, afin de reproduire l'anomalie et de la corriger. La case est cochée par défaut pour que votre signalement contienne d'emblée ce dont nous avons besoin, mais vous pouvez la décocher avant d'envoyer — dans ce cas, rien n'est conservé. Cela ne concerne que ce résultat précis ; il n'existe aucun réglage qui active cette option pour l'ensemble de vos résultats. Le consentement donné est strictement limité : la paire de fichiers n'est consultable que par notre équipe via une connexion interne, elle n'est jamais publiée, jamais partagée, jamais utilisée pour entraîner des modèles, et elle est supprimée automatiquement au bout de 30 jours. La suppression de votre compte supprime également tous les échantillons associés.