Last updated September 13, 2026

Who is responsible

She Just Works LLC is the data controller for pixfaro.com and the Pixfaro API — the company decides what is collected and why, and answers data requests. The company-level policy at shejust.works/privacy is the baseline; this page adds Pixfaro's specifics and controls where they differ.

What we collect

• Account — your email and the identity you sign in with (Google, GitHub, or email/password). API keys are stored only as hashes.
• Billing — handled by Stripe. We store your customer ID and a record of top-ups; we never see or store full card numbers.
• Usage — generation metadata: the model used, timestamps, cost, resolution, and image IDs, tied to your account for accounting and abuse prevention.
• Prompts & images — the prompts you send and the images you generate.

How prompts and images are handled

Generated images are stored in our object storage (Cloudflare R2) and served over unguessable URLs so you can fetch them by link. Prompts are retained for a bounded operational window — to power features, debug, and detect abuse — and then scrubbed. To fulfill a request, your prompt and any input image are sent to the third-party model provider you selected.

How we use it

To provide and secure the service, process payments, prevent abuse and fraud, communicate with you about your account, and comply with legal obligations.

Who we share it with

• Model providers (e.g. OpenAI, Google) — to generate your images.
• Stripe — to process payments.
• Cloudflare — hosting, storage, and content delivery.
• Brevo — to send transactional email (verification, password reset).

We may also disclose information where required by law or to protect the service and its users.

Cookies

We use an essential session cookie for the dashboard. We do not use third-party advertising or tracking cookies.

Retention & your choices

We keep account and billing records while your account is active and as needed for accounting and legal compliance; prompts are scrubbed after the operational window; images remain until you or we delete them. You can request access, correction, or deletion of your personal data by emailing dasha@shejust.works (She Just Works LLC, the data controller) from the address on your account — we answer within 3 business days. Deleting your account removes your personal data except records we must retain by law.

Security & children

We use encryption in transit, hash secrets and API keys, and scope access to what's needed. Pixfaro is not directed to anyone under 18. Questions: support@pixfaro.com.