LegalPRIVACY

Privacy Policy

This policy describes what we collect, why, and how we protect it. It's a companion to the Turkish KVKK disclosure document.

Last updated:

1. What We Collect

• Account information (name, email) — via Clerk • Service usage (office name, vertical, which Pixmates you use, brief content, output) • Technical data (IP, browser, OS, anonymous session metrics) • Cookies and similar (session management, preferences)

2. Cookies

Strictly necessary: sign-in + locale (always used) Analytics: PostHog (anonymous product usage) Third-party: Clerk (auth) + Stripe (payments)

You can disable cookies in your browser, but parts of the service may stop working.

3. Third-Party Service Providers

We use these providers to deliver the service:

• Clerk (auth) — see clerk.com privacy policy • Anthropic (AI) — see anthropic.com privacy policy • OpenAI (fallback AI) — see openai.com privacy policy • Stripe (payments) — see stripe.com privacy policy • Vercel + Railway + Neon (infrastructure) • Sentry + PostHog (observability)

None of these providers use your data for their own marketing; we have signed Data Processing Agreements (DPAs).

4. AI Training Data

Your briefs, files, or output are NOT used to train Anthropic or OpenAI models. We call the Anthropic API in 'no training' mode and opt out of OpenAI's training pipeline.

Pixel Office itself doesn't train models on user data either. Aggregated, anonymised usage metrics (e.g. "which Pixmate is hired most often") are used for platform improvements only.

5. Security

• HTTPS everywhere (HSTS active) • Sensitive DB fields (API keys) encrypted with Fernet • Optional 2FA via Clerk • Anomalous-session detection (Sentry + Clerk Client Trust)

No system is 100% secure — please report suspected breaches to our privacy team.

6. Children's Privacy

Pixel Office doesn't serve users under 18. If we learn an account belongs to a minor, it will be deleted.

7. International Data Transfers

Data may be processed on servers outside Turkey (notably the EU and US). Such transfers happen under Standard Contractual Clauses (SCCs) and Article 9 of the Turkish KVKK.

8. Contact

Privacy questions: hukuk@pixeloffice.app

We respond within 30 days.