Privacy Policy
Last updated: 1 October 2026
At EnlightPixel, we believe privacy is a fundamental right, not a feature. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data.
The short version: We collect the bare minimum to operate. Our desktop apps run entirely on your machine. We don't sell your data. Ever.
1. What We Collect
Account Information
- Email address — used for account creation, login, and order-related communications
- Full name — used for personalizing your account and purchase receipts
- Authentication data — managed securely by our authentication provider
Purchase Information
- Order details — product purchased, date, amount, license key and, for recurring products, subscription status and billing-period dates
- Payment information — processed entirely by our merchant of record. We never store your credit card numbers, bank details, or billing address on our servers.
Website Analytics
- Optional website analytics — with your consent, we record page paths, broad country information where available, campaign labels, and limited checkout/download intent events. We do not store raw IP addresses in these analytics records. Hosting providers may separately retain access logs
- No cookies for tracking — we do not use advertising cookies, retargeting pixels, or cross-site tracking
Product update requests
If you ask for product updates, we store your email address and the time you consented. Contact support to withdraw consent and remove your address.
2. What We Don't Collect
We want to be explicit about what we do not collect:
- Personal files or documents on your computer
- Browsing history or search queries
- Location data or GPS coordinates
- Device fingerprints or hardware identifiers
- Keystroke data or screen recordings
- Contacts, calendars, or any private content
- Data from other applications on your device
3. Desktop Software Privacy
Our local desktop features are designed to process files on your device. Product-specific requirements are described on each product page; future cloud-connected features must disclose any additional data processing before use:
- 100% local processing — file processing happens on your machine; license verification sends the credentials needed to check purchase access
- No telemetry — we do not collect usage statistics, crash reports, or behavioral data from the desktop apps
- License verification — requests include a license key and product identifier. Apps using signed verification also send a random installation identifier and request nonce. These bind the response to the installation, not to fingerprint hardware. Provider/hosting access logs may record network information. Permanent offline certificates do not require recurring checks. Online access tokens expire and require connected verification.
- Your files stay yours — we have zero access to the files you process with our tools
4. How We Use Your Data
We use the data we collect exclusively for:
- Providing our services — creating your account, processing purchases, and delivering products
- Customer support — responding to your questions and resolving issues
- Transactional emails — provider receipts and configured account verification/password-reset messages. Guest claim tokens are shown on the purchase confirmation page; we do not email them.
- Product updates — notifying you about important updates (only if you opt in)
- Legal compliance — meeting our legal and regulatory obligations
We do not use your data for advertising, profiling, or selling to third parties.
5. Third-Party Services
We use a limited number of trusted, industry-standard third-party services to operate:
- Authentication provider — handles secure account creation and login. Receives your email and hashed password.
- Payment processor (merchant of record) — handles all payment transactions. Receives payment details, email, and order data. We never see or store your card information.
- Hosting provider — serves our website. Standard access logs and IP addresses are processed as part of normal web hosting.
- Optional OAuth provider — if you choose to sign in with Google, your email and name are shared with Google's OAuth service. This is entirely optional.
Each of these services operates under strict data protection standards and has their own privacy policy.
6. Data Retention
- Active accounts — your data is retained for as long as your account is active
- Deleted accounts — deletion requests have a 30-day cancellation period, after which support completes the request. Transaction records needed for payment reconciliation or legal obligations may be retained
- Purchase records — order records may be retained for up to 7 years for tax and legal compliance, even after account deletion
- Support correspondence — emails and support tickets are retained for up to 2 years
7. Your Rights
You have the right to:
- Access — request a copy of the personal data we hold about you
- Correction — request correction of any inaccurate data
- Deletion — delete your account and associated data at any time from your dashboard
- Data portability — request your data in a machine-readable format
- Withdraw consent — withdraw your consent for optional data processing at any time
To exercise any of these rights, email us at support@enlightpixel.com.
8. Data Security
We implement industry-standard security measures to protect your data:
- All data in transit is encrypted with TLS/SSL
- Passwords are hashed and never stored in plaintext
- Database access is restricted through row-level security policies
- Administrative access requires multi-factor authentication
- We conduct regular security reviews of our infrastructure
9. Children's Privacy
Our products and services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If we discover that a child has provided us with personal data, we will delete it promptly.
10. International Data Transfers
Our services are hosted in the United States and European Union through our infrastructure providers. If you access our services from outside these regions, your data may be transferred to and processed in these locations.
11. Changes to This Policy
We may update this Privacy Policy periodically. When we make significant changes, we will update the "Last updated" date and, where appropriate, notify you via email or a prominent notice on our website.
12. Contact
For any privacy-related questions, concerns, or data requests:
Email: support@enlightpixel.com
We aim to respond to all privacy inquiries within 5 business days.