RGPixelrgpixel
Log inGet started

Legal

Privacy policy

Last updated: July 14, 2026

RGPixel is an image conversion service operated by RG DIGITAL TECHNOLOGIES S.R.L., Targu Jiu, Romania. This policy explains what personal data we collect when you use RGPixel, why we collect it, who we share it with, and the rights you have under the EU General Data Protection Regulation (GDPR). Questions? Write to support@rgpixel.com.

Who we are

  • The data controller is RG DIGITAL TECHNOLOGIES S.R.L., registered in Romania (Targu Jiu, Romania).
  • You can reach us about anything privacy-related at support@rgpixel.com. We answer data requests without undue delay and at the latest within one month.

What we collect

  • Account data: your name, your email address, and a password stored only as a bcrypt hash. If you sign in with Google, we receive your verified email, name and Google account identifier instead of a password.
  • Billing details (only if you subscribe to a paid plan): whether you are an individual or a company, company name, VAT / tax ID number and billing address. These are required to issue valid invoices.
  • Your content: the images you upload and the converted results (SVG, PNG, WebP, AVIF) stored in your library so you can re-open, edit and re-export them.
  • Usage data: which pages of the site are visited, recorded first-party against a random visitor identifier (see the Cookie policy). We run no third-party analytics or advertising trackers.
  • Anti-bot data: when you create an account, Google reCAPTCHA collects your IP address and interaction data with the sign-up page to tell humans from bots. We receive only a pass/fail answer.
  • Payment data: card details are entered directly with Stripe, our payment processor. We never see or store your card number — we only store your subscription status and Stripe references.

Why we process it (legal bases)

  • To provide the service you signed up for — running conversions, storing your library, letting you edit and export (performance of a contract, Art. 6(1)(b) GDPR).
  • To bill paid plans and keep invoicing records (contract performance and legal obligation under Romanian fiscal law, Art. 6(1)(b) and (c)).
  • To keep the service secure, prevent abuse of free limits, block automated sign-ups and understand which pages are used, via first-party measurement only (legitimate interest, Art. 6(1)(f)).
  • To send transactional emails about your account or subscription. We do not send marketing emails without your explicit consent.

Your images

  • Your uploads and conversion results are processed only to deliver the service to you: conversion, editing in the studio, and export.
  • We do not use your images to train AI models, we do not sell them, and we do not share or publish them. They stay private to your account.
  • Retention follows your plan: on the Free plan, library items are deleted 30 days after upload. On paid plans, items are kept for as long as your account exists. Anonymous demo conversions are deleted within 24 hours.
  • When you delete an image, or delete your account, the associated files are removed from our storage.

Who we share data with

  • Stripe (payments): processes subscription payments and stores your card details under its own privacy policy. We receive only payment status and subscription references.
  • Google (optional sign-in): if you choose 'Continue with Google', Google shares your verified email and name with us under its own privacy policy.
  • Google reCAPTCHA (sign-up protection): the sign-up page loads reCAPTCHA to block automated account creation. Its use is subject to the Google Privacy Policy (policies.google.com/privacy) and Terms of Service (policies.google.com/terms).
  • We use no advertising networks, no data brokers, and no third-party analytics providers. We disclose data to authorities only where the law requires it.

Retention & security

  • Account data is kept while your account is active and deleted when you close it, except records we must keep by law (issued invoices are retained for the statutory fiscal period).
  • Sessions use signed, HttpOnly cookies valid for 14 days. Passwords are stored only as bcrypt hashes and are never logged.
  • Access to production data is restricted, and payment credentials never touch our servers.

Your rights

  • You have the right to access, rectify, export (data portability), restrict or object to processing of your personal data, and the right to erasure.
  • To exercise any right, use your account settings or email support@rgpixel.com from the address on your account.
  • Deleting your account removes your personal data and your image library; only legally required records (e.g. issued invoices) are retained for their statutory period.
  • You may lodge a complaint with your national supervisory authority. In Romania this is ANSPDCP (dataprotection.ro).

Changes to this policy

  • If we materially change how we handle personal data, we will update this page and notify registered users by email before the change takes effect.