Privacy Policy

1. Who Controls Your Data

Linx ai limited, company number 17367619, is the data controller for the Service. Its registered office is Unit A, 82 James Carter Road, Midenhall, United Kingdom, IP28 7DE.

2. Data We Collect

• Account data - display name, email address, password hash and verification status. If you choose Google sign-in, we also receive your Google account identifier and the basic profile details Google shares with us, such as your name and profile image.
• Commission content - source images, instructions, style proofs, model references, generated models, refinement feedback and approval records.
• Order and delivery data - selected product options, recipient name, address, telephone number, payment status, discounts, carrier, tracking and delivery events.
• Support and compliance data - messages, claim evidence, rights reports, audit records and fraud-prevention signals.
• Technical data - IP address, browser and device information, security logs, session identifiers and essential preference storage.
• Payment data - payment status, amount, provider and provider reference. Full card details are handled by the payment provider and are not stored by us.

3. Why We Use It

4. Images and AI-assisted Processing

Images are processed to create the requested proof, modelling reference, model and physical object. AI and production providers receive only the data needed for their assigned stage and are subject to contractual or platform safeguards.

We do not use customer images to train AI models, publish them, or use them in marketing unless the customer separately and explicitly opts in. A commission remains private by default.

5. Who Receives Data

• AI, modelling and production providers receive commission content needed for generation, refinement or manufacture.
• Payment providers receive checkout and transaction data needed to process payment or refunds.
• Carriers and customs agents receive recipient, address, telephone and parcel information needed for delivery.
• Cloud hosting, email, storage, monitoring and support providers process data needed to operate the Service.
• Google processes the authentication request when you choose Google sign-in; Google does not receive your commission images through this sign-in flow.
• Authorities may receive data where disclosure is required by law. We do not sell personal data.

6. International Transfers

Commission, hosting or delivery providers may process data outside the UK or EEA. Where required, we rely on adequacy regulations, the UK International Data Transfer Agreement or Addendum, EU Standard Contractual Clauses, or another lawful safeguard.

7. Retention and Deletion

Account and commission records are kept while your account or commission remains active and for as long as reasonably needed to provide support, establish approvals, resolve claims and comply with tax, payment and other legal duties.

A project without a linked physical order can be removed from your visible archive. Order-linked commission records are retained as contract and fulfilment evidence. You may also request erasure; we will remove or anonymise data where the law permits and explain any record we must retain.

When stored files are eligible for deletion, removal is performed from live storage and expires from operational backups as those backups rotate. The standard backup window is up to 14 days, subject to a limited retained snapshot count.

8. Your Rights

Depending on your location, you may have rights to access, correct, erase, restrict or object to processing, obtain portable data and withdraw consent. Withdrawing consent does not affect processing already carried out lawfully.

We normally respond to verified data-rights requests within one month. You may complain to the UK Information Commissioner's Office at ico.org.uk or to your local supervisory authority.

9. Security

We use TLS in transit, hashed passwords, access controls, private-by-default archives and audit records. No system is completely secure; if a personal-data breach creates a legally reportable risk, we will notify affected people and the relevant authority as required.

10. Cookies and Local Storage

The Service uses strictly necessary session cookies and local storage for authentication, security and interface preferences. We do not currently set optional advertising cookies. Optional analytics remain disabled until you choose to enable them.

With your permission, we use Microsoft Clarity for usage analytics, heatmaps and session recordings to improve the website. Clarity is not loaded until you accept analytics. You can reject optional analytics or withdraw your choice using Cookie settings. Our administration pages do not load Clarity. See Microsoft's privacy statement at https://privacy.microsoft.com/privacystatement for information about its processing.

11. Children and Changes

The Service is not directed to children and you must be at least 18 to place an order. An image of a minor may be uploaded only by a parent, legal guardian or person holding the necessary authority.

We will publish changes on this page and update the date above. We will use an appropriate direct notice for material changes affecting existing account holders.