Privacy Policy

## Operator and international service

The service is operated by OMNIPIX DOO, registered in Serbia, registration number 22331558, tax/VAT ID 115948361. The laws of the Republic of Serbia applies, subject to mandatory consumer rights. These provisions supersede earlier descriptions of the operator, payment channels and data location.

Account data is stored at Account database: PlanetScale, AWS US East (Northern Virginia), USA. Application: Contabo, USA. Media: Cloudflare R2 and CDN; distributed storage and caches. Media for all users is also stored in Timeweb in Russia and delivered through the Russian CDN for connections from Russia. Mail: Contabo, Germany. Legacy account records remain in the Russian Timeweb database until account recovery.. The Serbian operator processes account data using the infrastructure described here. Existing account data is recovered from the Russian database after verified email login. Content needed for generation is sent to the selected model provider. Cloudflare storage, network delivery and provider processing may involve other countries. Authentication is available through Google or an email verification code. An existing account previously accessed through another provider can be recovered using its verified email.

An existing account remaining in the Russian database is recovered and transferred automatically after its email is verified during login. The transfer preserves the account identifier, credits, generation history, files and associated records. Processing occurs in the background. Account actions may be temporarily unavailable until the transfer completes. Until recovery through verified email, the legacy account remains in the Russian database; contact support for access, export, deletion or other requests. Copies remaining in Russia are subject to applicable retention and deletion obligations.

## Top-ups during transition

Direct payment checkout and generation-linked shortfall payments are temporarily unavailable. Credit top-ups are available through redemption of gift cards. Gift cards may be purchased from the separate seller at gifted.land under that seller's terms. Omnipix does not collect bank-card details for those purchases. Questions about purchasing or refunding a gift card should be addressed to its seller; questions about redemption or service credits should be addressed to Omnipix. Mandatory consumer rights remain unaffected.

**Data and purposes.** Account data includes the user’s email, internal and authentication identifiers, account settings, consent history, credit balance and ledger, purchases and payment history, prompts, uploaded and generated media, assistant conversations, saved projects and associated technical records. Identifiers and content can be personal data; the service does not treat them as anonymous merely because they contain no name. Processing supports authentication, account recovery, generation, media delivery, billing, fraud prevention, security, support and required non-marketing service email. Google profile fields not required for login are discarded.

**Operator.** OMNIPIX DOO, registration number 22331558, tax/VAT ID 115948361. Contact details are available through the contact page.

**Purposes and legal bases.** Omnipix processes the email and associated technical account state to authenticate users, deliver authentication messages and necessary non-marketing service communications, including the one-time welcome email and important account, security, billing, legal, policy, availability, maintenance and incident notices, delimit access to user content, perform the service, conduct settlements and keep payment records. These necessary communications form part of the service and cannot be disabled while the account remains active. Processing is based on the user's express personal-data consent and, where applicable, performance of the service transaction and mandatory accounting or fiscal obligations.

**Email delivery.** Omnipix uses a mail server it operates, hosted by Contabo in Germany, to process the account email and deliver authentication messages and necessary non-marketing service communications.

**User content.** Prompts, uploads, generated media and related generation parameters are user-controlled service content. They may themselves contain personal data chosen by the user. The user is responsible for having the rights and consents required to submit or publish that content. Content is private unless the user invokes a sharing function governed by the Terms.

**Security and minimisation.** Access is restricted by role and technical necessity; transport is encrypted; database access requires authentication and verified TLS; backups and access controls are maintained; security events are investigated; and data is deleted when no longer required. Contact-form submissions are retained for handling and abuse prevention and include the supplied name, reply email, subject, message, request metadata, and keyed hashes of the IP address, email, content, and user agent. These contact records are separate from account legal-acceptance data. Infrastructure access logging is disabled or anonymised where under the Operator's control.

**Model assistant.** When a user uses the model assistant, Omnipix retains the prompts, assistant responses, extracted intent and recommendations for 30 days after the conversation's latest activity, unless the conversation or account is deleted sooner. Omnipix sends the current structured intent and the latest conversation messages to OpenAI for natural-language processing. Provider requests are made with storage disabled (store: false); OpenAI processes the request to return the response but Omnipix does not ask OpenAI to retain provider-side conversation state. Operational logs and metrics exclude conversation text.

**Rights.** The user may access or export account data, change settings, withdraw consent or delete the account through account settings, and may use the contact page concerning correction, restriction, objection or other rights. Withdrawing consent uses the account-deletion flow. Mandatory payment and fiscal records remain for the legal retention period. Omnipix does not sell personal data or use it for advertising profiling.

**Marketing email preferences.** Newsletters, promotions and product marketing are controlled separately in Settings → Privacy. When a new account is created, this setting is off if the connection is located in the European Union or its country cannot be determined, and on for other identified countries. You can enable or disable it at any time without losing access to the service. Later sign-ins and recovery of an existing account preserve its previous preference. An automatic initial setting is not an affirmative consent statement and does not replace consent where applicable law requires it.