Pixlr

GDPR overview

GDPR implementation is concrete and documented. The controller is Pixlr Pte. Ltd., and Pixlr Lab Pte. Ltd. for the education programme. The privacy policy, effective 13 May 2026, cites legal bases article by article: consent (Art. 6(1)(a)), contract (Art. 6(1)(b)), legal obligation (Art. 6(1)(c)) and legitimate interest (Art. 6(1)(f)). An Article 27 EU representative is named, RIVACY GmbH in Hamburg, alongside a UK representative, RIVACY Ltd. in Lancing, and a DPO at dpo@pixlr.com. Access, rectification, erasure, restriction, objection, portability, withdrawal of consent and complaint to a supervisory authority are all set out. Transfers outside the EEA rely on binding corporate rules or European Commission standard contractual clauses, with a copy available on request. The children's policy follows COPPA and the GDPR, accepting teacher and administrator consent for school activities. Biometric face geometry collected for face swap is stated never to be shared with third parties.

Who owns the data?

Pixlr separates AI Input (the prompts, descriptions and images you supply) from AI Output (what the service returns); together they form AI Content. You may use AI Content for personal and commercial purposes, and you remain solely responsible for that use. In exchange, you grant Pixlr a non-exclusive, worldwide, perpetual, irrevocable, royalty-free and sublicensable right over both inputs and outputs, and that grant survives termination. Publishing AI-generated content on the platform triggers a comparable license. Pixlr retains all rights to the service, its underlying technology and its marks, owns any data derived from customer data, and may exploit user feedback royalty-free.

Reuse rights

End users may reuse AI Content for personal and commercial purposes without asking further permission, subject to the agreements. On the publisher's side, browsing data supports usage statistics and fraud prevention under legitimate interest (Art. 6(1)(f)), profile and billing data serve performance of the contract (Art. 6(1)(b)), and commercial prospecting or surveys require consent (Art. 6(1)(a)), which can be withdrawn at any time. Data may be shared with IT providers, financial institutions and payment gateways, marketing agencies, legal and accounting advisers, and other group companies located in the EEA; no card number is stored, only the transaction data received from the payment gateway. A broad Aggregated Anonymous Data clause in the terms of use lets Pixlr use, process, modify, compile and create derivative works from customer data for any internal business purpose, for improving and operating the service, and for developing other products, and to release non-identifying aggregates to third parties. Pixlr states that no data obtained through the Google Workspace APIs is used to develop, improve or train AI or ML models; for all other content the site says nothing and documents no training opt-out, the only available opt-outs covering marketing and personalized advertising.

Data retention & training

Hosting summary

Pixlr names no hosting country and no hosting region anywhere in its legal pages. What the privacy policy does say is that transfers outside the European Economic Area take place, and that they are framed either by binding corporate rules or by the European Commission's standard contractual clauses, a copy of which can be obtained on request through the published contact details. Data may also be shared with other companies of the group located within the EEA. The controller itself is established in Singapore, at the company's registered address, which sets the primary jurisdiction for the processing. On the technical side, the site is served behind Amazon CloudFront: the resolved IP address points to an edge node in Italy, which reflects the position of a content delivery network node and says nothing about where data is actually stored. In short, the jurisdiction of the controller is documented, the jurisdiction of storage is not, and any buyer with a data residency requirement will have to ask Pixlr directly.