Consent to Personal Data Processing

I consent to OMNIPIX DOO, registered in Serbia (registration number 22331558, tax/VAT ID 115948361), processing my personal data to provide my Omnipix account.

**Data and purposes.** This includes my email, internal and authentication identifiers, account settings, consent history, credit balance and ledger, purchases and payment history, prompts, uploaded and generated media, assistant conversations, saved projects and associated technical records. Identifiers and content can be personal data; the service does not treat them as anonymous merely because they contain no name. Processing supports authentication, account recovery, generation, media delivery, billing, fraud prevention, security, support and required non-marketing service email. Google profile fields not required for login are discarded.

**Locations and recipients.** The service infrastructure has changed: account records previously held in the Russian database are stored in the United States after account recovery. Account database: PlanetScale, AWS US East (Northern Virginia), USA. Application: Contabo, USA. Media: Cloudflare R2 and CDN; distributed storage and caches. Media for all users is also stored in Timeweb in Russia and delivered through the Russian CDN for connections from Russia. Mail: Contabo, Germany. Legacy account records remain in the Russian Timeweb database until account recovery. The Serbian operator processes account data using the infrastructure described here. Existing account data is recovered from the Russian database after verified email login. Content needed for generation is sent to the selected model provider. Cloudflare storage, network delivery and provider processing may involve other countries. The application is hosted by Contabo in the United States; the account database is hosted by PlanetScale in AWS US East (Northern Virginia). Cloudflare provides R2 object storage and network delivery; its distributed processing and caches are not a promise of exclusive storage in a single country. Media for all users is stored in both Cloudflare R2 and Timeweb in Russia. Connections from Russia receive media through the Russian CDN; other connections use the Cloudflare CDN. Country is determined from the connection IP, not citizenship. The operator's mail server is hosted by Contabo in Germany. Requested generation content is sent to the provider for the selected model. Gift-card purchases are handled separately by gifted.land; Omnipix receives the card information needed for redemption.

**Processing and transfer.** Processing includes collection, recording, storage, use, retrieval, restricted disclosure to service providers, international transfer, correction and deletion. The legacy transfer is performed in the background, preserves the account identifier and credit history. Acceptance of this document does not waive mandatory privacy rights or replace any transfer safeguards required by applicable law. The operator must maintain the applicable safeguards and service-provider arrangements.

**Duration and rights.** This consent takes effect when accepted and may be withdrawn through account settings or support. Withdrawing consent ends the authenticated account and initiates its deletion, subject to required retention of transaction records. Withdrawal does not retrospectively invalidate processing before withdrawal. Legacy copies and backups remain subject to retention and deletion obligations. Contact details and the privacy policy are available in the legal section. I can request access, export, correction or deletion through support without recovering or transferring my account first.

**Marketing email preferences.** Newsletters, promotions and product marketing are controlled separately in Settings → Privacy. When a new account is created, this setting is off if the connection is located in the European Union or its country cannot be determined, and on for other identified countries. You can enable or disable it at any time without losing access to the service. Later sign-ins and recovery of an existing account preserve its previous preference. An automatic initial setting is not an affirmative consent statement and does not replace consent where applicable law requires it.