Privacy Policy

To ensure absolute transparency and prevent ambiguity in legal and technical interpretations, this Privacy Policy strictly defines the pronouns and terms used throughout:

• "Pixir", "We", "Us", and "Our": Refer to the Pixir web application operated at https://www.pixir.in, including its developers, website systems, and operational maintainers.
• "You" and "Your": Refer to you as an individual, creator, business entity, or automated crawler visiting, reading, or utilizing Pixir and its background removal tools.
• "The Service": Refers collectively to the website, in-browser background removal studio, documentation, blog articles, and tools provided by Pixir.

Pixir’s architecture is engineered around the principle of client-side execution:

• 100% Local Execution: All background isolation tasks are executed directly on your personal computer, tablet, or smartphone using WebAssembly (WASM SIMD) and WebGPU inside your browser.
• Zero Remote Uploads: Photos selected or dropped into Pixir are never transmitted over the internet to our servers or any cloud provider. Processing takes place in your device's local memory.
• Zero Machine Learning Training: Because your photos never touch our servers, Pixir cannot and will never use your images, portraits, or intellectual property to train artificial intelligence models.

2.1 Verification & Technical Network Boundaries

Users can independently verify our privacy architecture using their browser Developer Tools (Network Tab):

• Your Photos Stay Local: Zero image payloads, binary blobs, or base64 data are transmitted across the network during upload, cutout, editing, or export.
• Asset Downloads: Network requests are strictly limited to downloading the neural model weights (~42MB ONNX binary) and WebAssembly runtime modules on initial application load.
• Anonymous Telemetry: Minimal numerical increments for site counters (visit counts and cutouts created) are recorded via Cloudflare edge buffer and Supabase without capturing user imagery.

2.2 Model and Library Downloads

On first load, your browser downloads the AI model (~42 MB) from our own storage (self-hosted directly on Pixir's servers at pixir.in) and WebAssembly files from jsDelivr (cdn.jsdelivr.net). Those hosts can see your IP address and browser details, like any website. No image data is involved.

Pixir does not collect Personally Identifiable Information (PII) from general users. We process only minimal, anonymized technical telemetry:

3.1 Visitor Counter & Deduplication

To show live stats, Pixir counts unique visitors and completed cutouts. Your browser creates a one-way SHA-256 hash from a randomly generated persistent device identifier stored in local storage (pixir_visitor_device_id), a client placeholder string (local-device), your browser user agent, browser language, screen dimensions and color depth, timezone offset, CPU hardware concurrency, and an HTML5 2D canvas rendering signature. Because these browser attributes are combined, this functions as client-side browser fingerprinting. Your browser cannot see its own public IP address, so the client hash does not contain your IP; your IP address is visible only at the network transmission level to our edge and database servers (Cloudflare and Supabase), but we don’t store your raw IP address in our database.

This hash is sent to our database (Supabase, hosted on AWS in the Asia Pacific ap-southeast-2 Sydney region). We use it only to avoid counting the same visitor twice in 24 hours. We don’t store your raw IP address. Hashes are deleted after 30 days during periodic maintenance log purges. Because a hash can still be linked to a device, we treat it as personal data, and you can ask us to delete it (see §7). If you choose “Essential Only”, the counter is not sent (your browser does not generate or transmit the device hash, your visit is not recorded in unique visitor stats, and only the public aggregate count is loaded for display).

3.2 Advertising & Sponsor Impression Verification

Pixir displays privacy-friendly promotional partner placements (the In-Studio processing unit and the brand marquee slider). We maintain fair, transparent campaign accounting without tracking users across the web:

• No Cross-Site Tracking: We do not deploy third-party advertising tracking pixels, fingerprinting scripts, or cross-site tracking cookies.
• Verified Visibility: Studio sponsor units only account for an impression after reaching 50% viewport visibility; brand sliders account for 1 impression per unique visitor.
• Full Image Isolation: Your images, edits, and creative outputs are never shared with advertisers or linked to campaign records.

3.3 Advertisers

If you buy an ad, we collect your email, ad image, text and URL, and payment status. Payments are handled by Razorpay under its own privacy policy, and we never see card or UPI details. We keep ad records for 8 years to comply with statutory accounting, GST, and tax obligations under Indian law (Section 128 of the Companies Act and Section 44AA of the Income-tax Act), after which they are permanently deleted.

3.4 Administrative Access Only

General users are never required to create an account, register, or provide an email to use Pixir. Authentication is restricted exclusively to authorized platform administrators managing system settings through encrypted Supabase Auth.

Pixir utilizes local browser storage (`localStorage` and `sessionStorage`) strictly for core functionality:

• Storing functional preferences (e.g., dismissing cookie or promotional notices).
• Maintaining temporary local session deduplication tokens to prevent double-counting ad impressions.
• Holding secure admin session tokens for authenticated administrators.

We do not deploy third-party marketing cookies or sell browsing histories to advertising networks.

We do not sell, rent, or trade your data or photos under any circumstances.

5.1 Database Infrastructure

We utilize Supabase for secure cloud database hosting (hosted on AWS in the Asia Pacific ap-southeast-2 Sydney region) to record aggregate numerical metrics (visitor counters) and sponsor campaign configurations. Client image processing never interacts with this storage.

5.2 Outbound Links

Pixir may link to external websites, including sponsor websites or our social media profiles (e.g., @sudhan_shuu). Clicking external links opens those services in a new tab, subject to their independent privacy terms. Pixir does not transfer personal data to external destinations.

5.3 Bot Detection & Abuse Prevention (Cloudflare Turnstile)

We use Cloudflare Turnstile across our core background removal studio to block bots on the Remove Background action, the ad form and admin login. When it runs, Cloudflare receives technical signals from your browser and device, such as IP address, browser type and how you interact with the widget, and may use cookies or local storage. Cloudflare also uses these signals, as an independent controller, to improve Turnstile. This data goes to Cloudflare, not our servers, and may be processed outside India. See Cloudflare’s Turnstile Privacy Addendum. Your photos are never sent to Cloudflare.

5.4 Content Delivery & WebAssembly Runtime (jsDelivr)

WebAssembly runtime files (onnxruntime-web) are served via jsDelivr CDN (cdn.jsdelivr.net). When your browser downloads these runtime modules on initial application load, jsDelivr receives standard technical network connection metadata (your IP address and User-Agent). No image data or personal user information is involved.

5.5 Payment Processing (Razorpay)

Payments for self-serve advertisement campaigns are processed by Razorpay Software Private Limited under its own privacy policy. Pixir never receives, stores, or sees sensitive credit/debit card details, net banking credentials, or UPI PINs.

Because Pixir does not collect your name, phone number, or raw image uploads, your personal privacy is safeguarded by design through strict data minimisation. Under India’s Digital Personal Data Protection Act, 2023 (DPDP Act) as well as the GDPR and CCPA, you hold fundamental rights as a Data Principal:

• Right to Access & Summary: You may request confirmation of whether Pixir processes any digital telemetry associated with your device.
• Right to Correction & Erasure: You hold the right to request deletion or purging of any session identifier or feedback record associated with your cryptographic hash.
• Right to Grievance Redressal: You have the right to readily accessible grievance redressal provided by our designated Grievance Officer.
• Right to Withdraw Consent: You may withdraw your cookie and telemetry consent at any time via our Cookie Policy page.

For information regarding paid advertising campaigns, payment disputes, or transaction reconciliations, please review our companion Refund & Cancellation Policy.

In compliance with the DPDP Act 2023 and the Information Technology Rules, Pixir provides an accessible Grievance Redressal mechanism: