Security & Data Handling

How your files, payments and account data are protected on Pixoate.

Tools that run in your browser

PDF utilities, JSON/HTML formatters, hash and password generators, the collage maker, scan/HEIC converters, signers, annotators and similar tools process files entirely on your device. For these tools, your files never leave your browser and are never uploaded to a server.

Tools that run on our servers

Image conversion, compression, resizing, rotation, background removal, AI upscaling, photo effects, OCR and translation require server-side processing. Your file is sent over an encrypted HTTPS connection, processed, and automatically deleted once processing is complete. We do not retain your uploaded files and have no access to them after processing.

What we never do

  • We never use your files or content to train AI models.
  • We never share your files with third parties.
  • We never keep your files after processing is complete.
  • We never add watermarks to your output.

Payments

Paid subscriptions are processed by our payment provider, Paddle, which acts as the merchant of record. Your full card details go directly to Paddle and are handled under industry payment-card security standards — they are never received or stored on Pixoate servers. Every paid subscription is covered by a 14-day money-back guarantee.

Your account data

A free account stores only the details you provide — name, email and profile settings — plus your plan and usage counters. You can request complete deletion of your account and all associated data at any time by contacting support; deletion is permanent and cannot be undone.

Reporting a security issue

If you believe you have found a vulnerability in Pixoate, please report it through our contact form with "Security" in the subject and include steps to reproduce. We review every report and will respond as quickly as we can. Please give us reasonable time to fix an issue before disclosing it publicly.

Contact us about security