🔒 Photo Processing Terms

Your privacy is our priority. Here's exactly how we handle your photos.

🇪🇺 EU Servers
🛡️ EU Data Protection
⏰ 72h Auto-Delete
🔐 Secure Processing

🔐 Secure Processing

Your photos are processed exclusively on secure EU-based servers. We use encrypted connections (SSL/TLS) to ensure your images are protected during upload and processing.

🗑️ Automatic Photo Deletion (Standard Uploads)

For standard direct-print orders, all uploaded images are stored securely on our AWS servers in Frankfurt and are automatically and permanently deleted within 72 hours of upload. Not archived. Not moved to cold storage. Not backed up. Once 72 hours have passed, your photos are removed from our systems — regardless of order status. This process is fully automated with no human decision involved.

Note: This 72-hour policy applies strictly to direct-print photos. AI Portrait Engine processing has a different data retention flow, as detailed below.

👤 Human Access — Printing & Quality Only

Your photo is handled by a person at exactly two points:

✓ Printing — loading your design into the UV printer ✓ Quality check — inspecting the printed case for accuracy and defects

No one browses customer uploads. No one archives your photos. The only reason a human sees your image is to ensure it prints correctly on your case.

🚫 What We Don’t Do

To be absolutely clear:

✓ We don’t train AI on your photos ✓ We don’t use photos for marketing or advertising ✓ We don't use third-party printing services — all production is in-house ✓ We don’t keep backups after auto-delete ✓ We don’t build profiles from your uploads

⚖️ EU Data Protection Standards

RoboPixel is operated by PixelGravity GmbH, registered in Ludwigsfelde, Brandenburg, Germany. Our processes are aligned with the EU General Data Protection Regulation (GDPR) and applicable data protection laws. Our system is designed so privacy alignment happens automatically — not as an afterthought.

📦 Order Fulfillment Consent

By uploading an image, you consent to temporary processing solely for creating your custom phone case. This includes:

✓ Temporary secure cloud storage (72h max) ✓ Production printing ✓ Visual quality checks on the printed case

🎨 AI Photo Transformation (PORTRAIT ENGINE)

Because the PORTRAIT ENGINE requires advanced AI processing to transform your photo into character art, we use a 3rd-party API (OpenAI) for this specific feature. Processing for this feature operates under a strict, separate data flow governed by our Data Processing Agreement (DPA) with OpenAI:

✓ Service Provider: Processed by OpenAI Ireland Ltd., acting strictly as a Data Processor. ✓ Purpose Limitation: Processed exclusively for generating your portrait artwork. ✓ No AI Training: Your uploaded photos and generated outputs are NOT used to train OpenAI's models. ✓ Data Retention: API inputs are retained for a maximum of 30 days strictly for abuse monitoring, after which they are permanently deleted. ✓ Data Transfer: Secured via Standard Contractual Clauses (SCCs) for processing outside the EEA.

Unlike standard uploads, which fall under our own 72-hour deletion rule, PORTRAIT ENGINE photos are securely sent to OpenAI's API. A formal Data Processing Agreement is in place to align with EU privacy laws. View the DPA between PixelGravity GmbH and OpenAI.

🖼️ AI PROMPT ENGINE Generation

When using PROMPT ENGINE to generate original artwork from text descriptions:

✓ Text prompts processed via secure AI infrastructure ✓ Generated images are NOT permanently stored ✓ NOT used to train AI models ✓ No personal photos involved in PROMPT ENGINE generation

🏢 Sub-Processors (Auftragsverarbeiter)

The following service providers are involved in processing your data as sub-processors (Art. 28 DSGVO):

Sub-Processor Purpose Location Retention
OpenAI Ireland Ltd. AI image generation (PORTRAIT ENGINE & PROMPT ENGINE) EU/US (SCCs) Max 30 days (abuse monitoring only)
Cloudflare Workers (API proxy), Turnstile (bot protection) EU edge nodes Transient (no storage)
AWS S3 Temporary image storage eu-central-1 (Frankfurt) 72 hours, auto-deleted
Cloudinary Image optimization & CDN delivery EU CDN cache only
Shopify E-commerce platform & order processing Canada/EU (adequacy) Per order retention policy

With all sub-processors, appropriate data processing agreements (AVV/DPA) per Art. 28 DSGVO are in place. For US-based processors, Standard Contractual Clauses (SCCs) ensure adequate data protection.

🤖 EU AI Act Transparency (Art. 50 KI-VO)

In compliance with the EU Artificial Intelligence Act (Regulation (EU) 2024/1689), we inform you that:

✓ PORTRAIT ENGINE uses AI to transform uploaded photos into stylized artwork ✓ PROMPT ENGINE uses AI to create original artwork from text descriptions ✓ All AI-generated content is labeled as such on the website ✓ The AI system is classified as limited-risk under the EU AI Act ✓ No autonomous decision-making — users review and approve all designs before purchase ✓ No high-risk AI processing, no profiling, no automated decisions with legal effects

⚖️ Legal Basis Overview

✓ Art. 6(1)(a) DSGVO: Consent for photo upload and processing ✓ Art. 6(1)(b) DSGVO: Contract performance for order fulfillment ✓ Art. 28 DSGVO: Data processing agreements with all sub-processors

🤖 AI Output Liability & Disclaimer

While we strive for high-quality results, AI image generation is an experimental technology with inherent unpredictability. By using the "Transform Photo" feature, you acknowledge and agree that:

✓ Results Vary: AI may produce distorted, inaccurate, or unexpected results ("hallucinations"). ✓ No Malicious Intent: Any perceived offense, mockery, or inappropriate elements are unintentional artifacts. ✓ User Responsibility: You must review your final design before purchasing.

Liability Waiver: You agree not to hold RoboPixel liable for any distress, offense, or damages caused by the content of AI-generated images. We do not offer refunds for "unliked" artistic interpretations once the order is printed.

📋 Your Data Rights (Art. 15–21 DSGVO)

Under EU data protection law, you have the following rights regarding your personal data:

✓ Right of access (Art. 15)
✓ Right to rectification (Art. 16)
✓ Right to erasure (Art. 17)
✓ Right to restriction (Art. 18)
✓ Right to data portability (Art. 20)
✓ Right to object (Art. 21)
✓ Right to withdraw consent (Art. 7(3))
✓ Right to lodge complaint

Photos are automatically deleted within 72 hours. For immediate deletion, email hello@robopixel.eu.

Competent supervisory authority: Die Landesbeauftragte fuer den Datenschutz und fuer das Recht auf Akteneinsicht Brandenburg, Stahnsdorfer Damm 77, 14532 Kleinmachnow.

To exercise these rights, contact us at hello@robopixel.eu or visit our Support Page.

⛔ Prohibited Content Policy

For legal and safety reasons, we strictly prohibit uploading:

  • Nudity, sexual acts, or sexually explicit content
  • Violence, hate speech, illegal acts, or symbols of hate
  • Copyrighted material (Disney, Marvel, brand logos) you don't own

Violating orders will be automatically cancelled.

Last updated: January 2026 · RoboPixel