Privacy policy

Pixtrait is operated by Ceeb Moz Ltd (company number 16399132), registered office Office 109, 200 York Way, London, N7 9AX, United Kingdom. We are the data controller for the personal data described in this policy.

Questions about your data, or requests to exercise your rights: our contact form.

• Account details: your name, email address and mobile number.
• Consent choices: your agreement to our terms and whether you opted in to offers and promotions, with the date and time.
• Photos you upload: the reference photos you provide to create headshots.
• Headshots we create: the images generated for you, plus the style, lighting, pose, outfit and background choices you made.
• Billing records: plan, purchases, invoices and currency. Card payments are handled by Stripe; we never see or store your full card number.
• Usage and device data: pages visited, actions taken, approximate country (used to show prices in your currency), device and browser type.
• Attribution: the campaign link or referral code you arrived through, if any.
• Communications: support messages, feedback and notes from calls you agreed to receive.
• Teams enquiries: company name, contact details, team size and message.

We treat your photos with particular care:

• They are used only to create your own headshots.
• We do not use them to identify or verify you, and we do not create biometric templates.
• They are never used to train AI models, by us or by our providers.
• They are kept in private storage that only your account can access.
• They are sent to our image-generation provider only to process your request.
• You can delete any photo or headshot at any time from your account.

Only upload photos of yourself, or of someone who has given you permission.

• Providing the service (account, creating headshots, credits, downloads) — performance of our contract with you.
• Taking payments and keeping financial records — contract and legal obligation.
• Service messages such as sign-in codes, receipts and important account notices — contract.
• Keeping the service secure, preventing duplicate accounts, fraud and misuse — legitimate interests.
• Improving the service and measuring campaigns using usage data — legitimate interests.
• Marketing emails, offers and sales calls — your consent only.
• Responding to Teams enquiries — steps before entering a contract / legitimate interests.

Marketing is optional. If you tick the offers and promotions box at sign-up, we may email you offers and a member of our team may call the mobile number you gave us about your account and plans. As a thank-you for opting in we add an extra headshot to your account.

You can withdraw consent at any time by using the unsubscribe link, telling us on a call, changing your settings or emailing our contact form. Withdrawing does not remove any reward already given. We comply with the Privacy and Electronic Communications Regulations (PECR) and screen calls against your stated preferences.

We never sell your personal data. We share it only with trusted processors acting on our instructions:

• Cloud hosting, database and file-storage providers.
• AI image-generation providers, solely to process your requests.
• Stripe, for payments, subscriptions and invoices.
• Email delivery providers, for sign-in codes and messages.

We may also disclose information where required by law, to enforce our terms, or as part of a sale or reorganisation of our business (with equivalent protections in place).

Some providers process data outside the UK. When they do, we rely on UK adequacy regulations or the UK International Data Transfer Agreement / Addendum to the EU Standard Contractual Clauses, so your data receives equivalent protection.

• Account details: while your account is open, then deleted within 30 days of closure.
• Photos and headshots: until you delete them or close your account.
• Photos added before creating an account: held in your own browser and deleted if no account is created.
• Billing records: 6 years, as required by HMRC.
• Marketing consent records: for as long as needed to prove consent, and for 2 years after withdrawal.
• Support messages and Teams enquiries: up to 2 years after the last contact.
• Security and usage logs: up to 12 months.

We use encrypted connections, access-controlled private storage, row-level database permissions, passwordless sign-in codes and restricted staff access. No system is completely secure, but we work to protect your data and will tell you and the ICO about a serious breach where the law requires.

Under UK data protection law you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased;
• restrict or object to our processing, including direct marketing at any time;
• receive your data in a portable format;
• withdraw consent at any time.

Email our contact form to use these rights. We reply within one month and it is normally free.

If you are unhappy, you can complain to the Information Commissioner's Office (ICO): ico.org.uk or 0303 123 1113. We would appreciate the chance to resolve your concern first.

We only use strictly necessary cookies and browser storage — to keep you signed in, remember photos and choices while you create a headshot, and show prices in your currency. We do not use advertising or cross-site tracking cookies, so no cookie banner is needed. If we add optional cookies in future we will ask first.

To improve Pixtrait we record, on our own systems only, which pages are viewed, how long for, how far down they are scrolled and which buttons are pressed, linked to a random identifier stored in your browser. Your approximate country and device type are recorded too. This is not shared with advertisers. If you create an account, this activity may be linked to it. We keep it for 13 months, then delete it. You can clear it at any time by clearing your browser storage.

Pixtrait is for people aged 16 and over. We do not knowingly collect data from children under 16.

We may update this policy. Significant changes will be emailed to you or shown in the app before they take effect. See also our terms of service.