安全与数据处理

您的文件、付款和账户数据在 Pixoate 上如何受到保护。

在您浏览器中运行的工具

Text and developer utilities — the JSON, HTML and Markdown formatters, the hash, Base64, JWT and URL tools, the case and word-count tools, the diff checker, color picker, password and lorem-ipsum generators, and the QR generator — process on your device.

在我们服务器上运行的工具

Everything that processes an uploaded image, PDF or document — image conversion, compression, resizing, rotation, cropping, background removal, AI upscaling, photo effects, OCR and translation, plus all PDF tools including merge, split, rotate, compress, sign, annotate, fill, scan-to-PDF and HEIC conversion — requires server-side processing. Your file is sent over an encrypted HTTPS connection, protected by access controls, and automatically deleted within 24 hours — unless you explicitly share a result: new public links have no automatic expiration while the sharing service remains available, and end when removed or when their owning account is deleted; anyone with the link can open it, and, when you are signed in, your account keeps a small preview image and the details of each result for 7 days on the free plan or 180 days on Premium — never a copy of your file, and you can delete it whenever you like, and, if you rate a result thumbs-down and leave the investigate box ticked, that image and its result stay for up to 30 days for our team to debug, or have uploads, completed tool results or editable Photo Editor designs saved to your private account, where active saved work has no automatic expiration. During that delivery and recovery window, access is limited to the services and authorized operators needed to run, secure, or support the operation you requested.

我们绝不会做的事

我们绝不会使用您的文件或内容来训练 AI 模型。
我们绝不会出售或公开你的文件。基础设施和处理服务提供商仅在为完成你所请求的操作所必需时才处理它们。
Temporary processing files expire within 24 hours — except private account uploads, saved tool results and editable Photo Editor designs, kept without automatic expiration while active in your account; and a result you deliberately share, which lives at its public link anyone who has it can open without automatic expiration while Pixoate provides the sharing service; when you are signed in, the small preview image behind each My Work entry, kept 7 days on the free plan or 180 days on Premium and never a copy of your file; and an image you explicitly tick a box to let our team investigate after a thumbs-down rating, kept up to 30 days.
我们从不在下载文件中添加 Pixoate 水印。标准工具使用免费，无需注册。

公开分享与私人账户设计

Sharing a result is the only thing that ever makes it public, and it only happens when you ask for it. New share links keep that result — and, where the shared page shows a before/after, the photo you started from — without automatic expiration while Pixoate provides the sharing service. A link ends when you remove it, delete its owning account, or we remove it for abuse, legal requirements, or discontinuation of the sharing service. Lifetime sharing is not a guarantee of permanent archival storage; keep your own copy. Existing links with an expiry date keep that date, shown on their shared page. A share link is public: the address is unguessable, but it is not password-protected and does not require signing in, so anyone who has the link can open the result. The shared page is marked noindex, which instructs search engines not to include it in search results. Nothing is ever published unless you create the link yourself. To take a link down, open the result and choose “Remove link” — you can revoke your own share link at any time, and the page stops opening for everyone who has it. Once no active share or other disclosed retention exception keeps a file, it becomes eligible for the normal cleanup. When signed in, accepted tool uploads and completed results can be saved privately within your account storage allowance, alongside editable Photo Editor designs. Reverse image search is excluded. My Work shows files whose account save completed; a processing result can still be downloaded immediately if its account save fails. Active saved work has no automatic expiration. Storage limits and subscription downgrades do not delete existing work; they can prevent new saves that need more space. Removing an item moves it to Trash for 30 days, except files still needed by saved designs or related results, which remain with that work. Removing a library entry does not revoke a separate public share link. Deleting your account revokes access and queues removal of its stored files. The five previous design saves are kept for recovery, not as an independent backup. Keep exports of important work.

您的工作经历

If you are signed in, we also keep a short history of result previews, separate from the saved files in My Work. An entry is a small preview image — at most 32 KB — plus the details of the job, such as the tool you used and the file name. The history entry is never a copy of the file you uploaded and does not itself retain a processed file. Files not retained by account storage, sharing or another disclosed exception expire on the normal 24-hour schedule, after which an expired result can no longer be opened from its preview. How far back the history reaches depends on your plan — 7 days on the free plan, 180 days on Premium — and each entry deletes itself automatically at the end of that window. You can remove a single entry or clear the whole list from recent history at any time; this removes its preview and details, not a separately saved library file. Deleting your account erases the history with it. Signed out, none of this happens: the recent-work list on a signed-out device is stored in that browser only and is never sent to us.

你请我们排查的图片

如果结果出错并且您对其评分较低，我们会向您显示一个复选框，让我们的团队保留您上传的照片和我们生成的结果，以便我们可以重现错误并修复它。该框开始被勾选，以便快速报告包含我们调试它所需的内容，您可以在提交之前取消勾选它 - 然后什么都不会保留。它仅适用于该特定结果；没有任何设置可以为所有内容打开它。您同意的范围很窄：该对只能由我们内部登录的团队读取，它永远不会发布，永远不会共享，也永远不会用于训练模型，并且它会在 30 天后自动删除。删除您的帐户会删除该帐户中的所有样本。