Privacy Policy

Ixalabs, [address], registered with the Dutch Chamber of Commerce (KvK) under number [KvK number]. Email: [contact email].

We decide what happens to the personal data described here (we're its “controller”).

You can make screenshots without an account. Your projects then stay in your browser's own storage and don't reach our servers, with one exception: when you export, the project goes to our server to be drawn as images, and nothing of it is kept once the images are sent back.

Like every website, our hosting provider sees your IP address and browser in its request logs, which are kept for a short time for security.

• Account details: your email address and, if you add them or sign in with Google, your name and profile picture. Your password is stored scrambled (hashed); we can't read it.
• Your projects: everything in them, such as texts, settings, your store listing and the images you add (screenshots and app icons).
• Your plan: which plan you have, its renewal date and Stripe's reference numbers for your purchases. We never see your full card number.
• AI use: how much AI translation you used each month, to keep to your plan's allowance.
• Sign-in records: when you sign in or change your account, with your IP address and browser, for security.

Images in your projects are stored at long, random web addresses. They aren't listed anywhere, but anyone who has the exact address can open an image, so don't add anything you wouldn't show in an app store.

• To give you the service you signed up for: your account, saving and exporting your projects, translating them and your plan. This is needed for our agreement with you.
• To keep it secure and fair: sign-in records, request logs and the AI allowance help us stop abuse. This is our legitimate interest.
• To meet the law, for example tax rules on payments, which Stripe handles as the seller.

We don't sell your data, don't show ads, and don't use analytics or tracking.

• Supabase runs accounts, the database and file storage, and sends account emails, such as confirming your address or resetting your password.
• Anthropic translates with AI: the texts you choose to translate (headlines, store listing and your app's name) go to its Claude API, which sends the translations back. Under its commercial terms, Anthropic doesn't train its models on them.
• Render runs the website and the export.
• Stripe, through Link, sells our plans and handles payments. It collects your payment details at checkout under its own privacy policy and Link's, and tells us what you bought.
• Google, only if you choose “Continue with Google”: it tells us your name, email address and profile picture.

Supabase, Anthropic and our hosting provider work for us, under data processing agreements. Stripe and Google are responsible for what they collect themselves.

Some of them are based in, or use servers in, the United States. When data leaves the European Economic Area, it's protected by the EU's Standard Contractual Clauses or the EU–US Data Privacy Framework.

• For as long as you have an account. When you delete it on your account page, your account, projects, images and AI use are deleted at once, and a subscription stops. Copies in our backups expire within 30 days.
• Projects saved in your browser stay there until you delete them or clear the site's data.
• Stripe keeps payment records for as long as tax law requires.

We only use what the site needs to work: a cookie that keeps you signed in, and your browser's storage for projects saved there and the one you had open last. There are no advertising or analytics cookies, which is why you don't see a cookie banner. Stripe's checkout page uses its own cookies for the payment and to prevent fraud.

You can ask us for a copy of your data, to correct it, to delete it, to receive it in a portable form, or to limit or object to how we use it. You can delete your account yourself on the account page; for anything else, email [contact email]. We answer within a month.

If you're not happy with how we handle your data, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, or the one where you live.

If we change this policy in a way that matters to you, we'll tell you by email or in the studio before the change applies.