Privacy Policy

1. Introduction

This Privacy Policy describes how PixToCode (operated by Zarko Savic, based in Uzice, Serbia) ("we", "us", "our") collects, uses, and protects your personal information when you use our Figma plugin and website at pixtocode.com ("Service").

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address when you sign up
• Payment Information: Processed by Lemon Squeezy (our Merchant of Record) — we never see or store your credit card details
• Figma Content: Design files (PNG images and structural data) you submit to be converted to code

2.2 Information Collected Automatically

• Usage Data: Number of code generations, frameworks used, timestamps
• Technical Data: IP address, browser type, Figma client ID (for anonymous trial tracking)
• Authentication Cookies: Session tokens via Supabase Auth (for logged-in users only)

3. How We Use Your Information

We use your information to:

• Provide the code generation service
• Track usage against your subscription plan limits
• Process payments through Lemon Squeezy
• Send essential account and billing emails
• Prevent abuse and enforce rate limits
• Improve the Service quality

4. Third-Party Services

We use the following third-party services to operate PixToCode:

• Supabase — Authentication and database (servers in Frankfurt, EU)
• Vercel — Web hosting
• Anthropic (Claude AI) — AI processing of your design files to generate code
• Lemon Squeezy — Payment processing and billing (Merchant of Record)
• Resend — Transactional emails
• Cloudflare — DNS and email routing

Each provider has their own privacy policy. We only share the minimum data necessary for each service to function.

5. How Long We Keep Your Data

• Submitted Designs (PNG + structure): Sent to Anthropic for processing, not permanently stored by us
• Generated Code: Not stored on our servers — delivered to you and discarded
• Account Data: Kept while your account is active, plus 30 days after deletion
• Usage Logs: Retained for 12 months for billing and fraud prevention
• Payment Records: Retained as required by tax law (typically 7 years)

6. Your Rights (GDPR / CCPA)

You have the right to:

• Access: Request a copy of your personal data
• Correction: Correct inaccurate data
• Deletion: Request deletion of your account and data
• Portability: Receive your data in a machine-readable format
• Objection: Object to certain processing activities
• Withdraw Consent: Withdraw consent at any time

To exercise any of these rights, email us at support@pixtocode.com. We will respond within 30 days.

7. Data Security

We implement industry-standard security measures including HTTPS encryption, secure password hashing, and row-level security on our database. However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

8. Cookies

We use essential cookies for authentication (session management) via Supabase Auth. We do not use tracking or advertising cookies.

9. Children's Privacy

PixToCode is not intended for users under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us data, please contact support@pixtocode.com.

10. International Data Transfers

Your data may be transferred to and processed in countries outside of your country of residence, including the United States (Anthropic, Vercel) and European Union (Supabase, Lemon Squeezy). We ensure appropriate safeguards are in place for such transfers.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes by email and by updating the "Last updated" date above.

12. Contact Us

For privacy questions or requests, contact: