Privacy Policy

Last updated: 18 October 2026

At EnlightPixel, we believe privacy is a fundamental right, not a feature. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data.

The short version: We collect the bare minimum to operate. Our desktop apps run entirely on your machine. We don't sell your data. Ever.

1. What We Collect

Account Information

• Email address — used for account creation, login, and order-related communications

• Full name — used for personalizing your account and purchase receipts

• Authentication data — managed securely by our authentication provider

Purchase Information

• Order details — product purchased, date, amount, license key and, for recurring products, subscription status and billing-period dates

• Payment information — processed entirely by our merchant of record. We never store your credit card numbers, bank details, or billing address on our servers.

Website Analytics

• Optional website analytics — with your consent, we record page paths, broad country information where available, campaign labels, and limited checkout/download intent events. We do not store raw IP addresses in these analytics records. Hosting providers may separately retain access logs

• No cookies for tracking — we do not use advertising cookies, retargeting pixels, or cross-site tracking

Website updates and video tutorials

For signed-in visitors, the update bell stores read status locally in the browser, separately for each account. It is not sent to our database and does not synchronize across devices. Clearing browser storage removes this preference.

Video thumbnails are loaded from YouTube. Tutorial watch pages load an embedded YouTube player; product promo players load when you press play. These requests share network information, such as your IP address and browser details, with Google. We use YouTube's privacy-enhanced embedding mode. Playback and any provider storage remain subject to Google's privacy policy. Privacy-enhanced mode does not mean that no data is sent to Google.

Feedback and reviews

When you send feedback, we store your name, message, optional email, product and rating, plus your IP address for abuse handling. Review publication is optional. We record your publication consent, its wording version and time, and whether you requested anonymous display. Anonymous publication keeps your name private and omits identifying attribution; your email is never published. Contact support if you wish to withdraw publication permission.

Website reviews require a verified signed-in account and a qualifying live paid purchase. We retain the account and purchase reference and verification time privately to substantiate the review. Published reviews include the permitted display name (or Anonymous), original review, rating, product and submission date. Selected testimonials do not represent a complete review feed.

Product delivery and creator copies

When we issue a download link for an eligible paid purchase, we retain the first delivery-link issuance per account and product. This supports deduplicated product delivery counts, not browsing or app-usage tracking, and does not confirm that a transfer completed. We do not add IP addresses, device fingerprints or session histories to those records. Account deletion removes the account's individual delivery records.

Complimentary creator licenses are recorded separately from payments. We retain the recipient account, product, license key, issuance reason, issuing administrator and whether future access has been disabled. They use the same activation protocol as purchased licenses, with the product's licensing mode saved when the license is issued. Permanent offline activations do not require recurring checks; online licenses use standard connected verification.

Product update requests

If you ask for product updates, we store your email address and the time you consented. Contact support to withdraw consent and remove your address.

2. What We Don't Collect

We want to be explicit about what we do not collect:

• Personal files or documents on your computer
• Browsing history or search queries
• Location data or GPS coordinates
• Device fingerprints or hardware identifiers
• Keystroke data or screen recordings
• Contacts, calendars, or any private content
• Data from other applications on your device

3. Desktop Software Privacy

Our local desktop features are designed to process files on your device. Product-specific requirements are described on each product page; future cloud-connected features must disclose any additional data processing before use:

• 100% local processing — file processing happens on your machine; license verification sends the credentials needed to check purchase access
• No telemetry — we do not collect usage statistics, crash reports, or behavioral data from the desktop apps
• License verification — requests include a license key and product identifier. Apps using signed verification also send a random installation identifier and request nonce. These bind the response to the installation, not to fingerprint hardware. Provider/hosting access logs may record network information. Permanent offline certificates do not require recurring checks. Online access tokens expire and require connected verification.
• Your files stay yours — we have zero access to the files you process with our tools

4. How We Use Your Data

We use the data we collect exclusively for:

• Providing our services — creating your account, processing purchases, and delivering products
• Customer support — responding to your questions and resolving issues
• Transactional emails — provider receipts and configured account verification/password-reset messages. Guest orders are associated with the checkout email. Verify that email to link eligible unclaimed purchases automatically. A private claim token is also available on the purchase confirmation page; contact support if you need help recovering access.
• Product updates — notifying you about important updates (only if you opt in)
• Legal compliance — meeting our legal and regulatory obligations

We do not use your data for advertising, profiling, or selling to third parties.

5. Third-Party Services

We use a limited number of trusted, industry-standard third-party services to operate:

• Authentication provider — handles secure account creation and login. Receives your email and hashed password.
• Payment processor (merchant of record) — handles all payment transactions. Receives payment details, email, and order data. We never see or store your card information.
• Hosting provider — serves our website. Standard access logs and IP addresses are processed as part of normal web hosting.
• Optional OAuth provider — if you choose to sign in with Google, your email and name are shared with Google's OAuth service. This is entirely optional.

Each of these services operates under strict data protection standards and has their own privacy policy.

6. Data Retention

• Active accounts — your data is retained for as long as your account is active
• Deleted accounts — deletion requests have a 30-day cancellation period, after which support completes the request. Transaction records needed for payment reconciliation or legal obligations may be retained
• Purchase records — order records may be retained for up to 7 years for tax and legal compliance, even after account deletion
• Support correspondence — emails and support tickets are retained for up to 2 years

7. Your Rights

You have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of any inaccurate data
• Deletion — delete your account and associated data at any time from your dashboard
• Data portability — request your data in a machine-readable format
• Withdraw consent — withdraw your consent for optional data processing at any time

To exercise any of these rights, email us at support@enlightpixel.com.

8. Data Security

We implement industry-standard security measures to protect your data:

• All data in transit is encrypted with TLS/SSL
• Passwords are hashed and never stored in plaintext
• Database access is restricted through row-level security policies
• Administrative access requires multi-factor authentication
• We conduct regular security reviews of our infrastructure

9. Children's Privacy

Our products and services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If we discover that a child has provided us with personal data, we will delete it promptly.

10. International Data Transfers

Our services are hosted in the United States and European Union through our infrastructure providers. If you access our services from outside these regions, your data may be transferred to and processed in these locations.

11. Changes to This Policy

We may update this Privacy Policy periodically. When we make significant changes, we will update the "Last updated" date and, where appropriate, notify you via email or a prominent notice on our website.

12. Contact

For any privacy-related questions, concerns, or data requests:

Email: support@enlightpixel.com

We aim to respond to all privacy inquiries within 5 business days.