How we handle your data.

AltPixel accounts use email + password or Google sign-in. Sessions are managed by our authentication provider and stored as secure tokens in your browser. Password reset and session revocation are handled through the same provider.

Only your own account can view or change your subscription and usage. We do not offer shared logins or admin impersonation of user accounts.

We store the minimum needed to run the product:

• Your account email and authentication metadata
• Your Stripe customer ID and subscription status
• Alt-text usage counters (how many generations you've used this month)

We do not store the images you convert. Conversion happens entirely inside your browser and never touches our servers.

When you click Generate alt text, the image is sent to our AI vision provider so it can describe the content. We use the response to display and return alt text to you, and we do not retain the image afterwards. If you never click the AI button, no image ever leaves your device.

Payments are processed by Stripe. Stripe holds card and billing information directly — we never see or store your card number. On our side we only keep your Stripe customer ID and the state of your subscription (active, canceled, period end, etc.) so we know which plan to grant.

Checkout runs inside a Stripe-hosted flow. You can cancel or update your payment method at any time from the Stripe customer portal.

Our current subprocessors, and what each is used for:

• Lovable Cloud — hosting, database, and authentication.
• Stripe — payment processing and subscription management.
• AI vision provider — used only when you request alt text; image is discarded after the response.

We use the cookies and local storage strictly necessary to keep you signed in, run Stripe checkout, and remember dismissible banners. We do not run third-party ad trackers.

Account data is kept while your account is active. To delete your account and associated data, email contact@brandinghousedubai.com from the address on file and we will process the deletion within 30 days. Certain billing records may be retained where required for tax and legal compliance.

If you believe you've found a security vulnerability, please email contact@brandinghousedubai.com with a description and reproduction steps. We aim to acknowledge reports within 2 business days.

Security is shared between us, our platform providers, and you. We're responsible for the app's code, sensible defaults, and vendor choices. Our platform providers are responsible for the underlying infrastructure. You're responsible for keeping your login credentials safe — use a unique password and enable 2FA on your Google account if you sign in with Google.