Privacy policy
Zoyor Inc
1500 N Grant St Unit 560, Denver, CO 80203, United States
2026-10-25
This policy explains what personal data MendPixel collects, why, which providers process it, where it is stored and the choices you have. The data controller is Zoyor Inc, a Colorado corporation (Colorado company number 20268269161) with its registered office at 1500 N Grant St Unit 560, Denver, CO 80203, United States. Contact: support@mendpixel.com.
Data we collect
Account data: name, email address, whether you confirmed your email, and password (stored as a secure hash). If you sign in with Google, we receive your name, email address and profile picture from Google instead of a password. Content: photos you upload and the enhanced results. Account activity: credit history, moderation decisions and support messages. Order data: order references, product, amount, currency, country and payment status received from our Merchant of Record; we never receive full card numbers. Technical data: IP address, browser and request details used for security, rate limiting and bot checks. Usage analytics, only if you click Allow analytics in our cookie banner: Google Analytics and Microsoft Clarity record how pages are used (pages viewed, clicks, scrolling, device, browser and approximate location); Clarity masks text you type into forms. We do not use advertising trackers.
How we use data
We use this data to provide the service, enhance and store your photos, check content for safety, limit free credits to one account per person, handle credits, purchases and refunds, prevent fraud and abuse, comply with law and respond to support requests. With your consent we also use aggregate usage analytics to understand and improve the site. We do not sell personal data, do not share it for targeted advertising, and do not use your photos to train AI models.
Service providers
Each provider receives only what it needs for its purpose and processes it under its own terms. Vercel Inc. (United States): website hosting and request logs. Neon (United States): our database of accounts, credits, job and order records. Cloudflare, Inc. (United States and its global network): DNS, private storage of uploaded photos and results, Turnstile bot checks at sign-up (IP address and browser signals), and email forwarding for our support address. Resend, Inc. (United States): sends account emails such as email confirmation and password reset (your email address and the message). Google LLC (United States): only if you choose Sign in with Google, Google confirms your identity and shares your name, email address and profile picture with us; and, only if you allow analytics, Google Analytics measures site usage. Microsoft Corporation (United States): Microsoft Clarity, only if you allow analytics, records anonymised page interactions to show how the site is used. Kie AI (NexusAI Services LLC, United States) with the OpenAI GPT Image 2.5 model: receives each uploaded photo to produce the enhanced result; Kie keeps generated files for about 14 days and request logs for about 2 months. OpenAI (United States): moderation of uploaded photos and results; under OpenAI's API terms this data is not used to train its models and is kept for up to 30 days for abuse monitoring. Waffo.com Limited (Waffo Pancake, Hong Kong), our Merchant of Record: checkout, payment card and billing details, email, order and tax data. Tencent QQ Mail (China): the mailbox where messages sent to our support address are delivered and kept.
Where data is stored and international transfers
Zoyor Inc is based in the United States, and most data is stored and processed there. Payment data is processed by our Merchant of Record in Hong Kong and its payment partners. Emails you send to our support address are delivered to a mailbox hosted in China. When data leaves the country you live in, we rely on our providers' contractual commitments and security measures, and we send each provider only the data it needs.
Retention and your rights
We keep account data, uploaded photos, results and credit records while your account is open. If you close your account or ask us to delete your data, we delete it from our live systems within 30 days and from backups within a further 30 days. We keep order and payment records for as long as tax and accounting law requires (up to 7 years), moderation decisions without any images for as long as the related account exists, and support emails for up to 2 years. You can ask to access, correct, export or delete your data, or close your account, by emailing support@mendpixel.com; we answer within 30 days. MendPixel is not intended for anyone under 18.
US state privacy rights
Depending on where you live in the United States, you may have the right to know what personal data we hold about you, to get a copy, to correct or delete it, and to opt out of its sale, targeted advertising and profiling with legal or similarly significant effects. We do not sell personal data, do not share it for targeted advertising, and do not make decisions with legal or similarly significant effects by automated means; automated content checks can be appealed as described in the acceptable use policy. Email support@mendpixel.com with the subject "Privacy request"; we respond within 45 days and will not treat you differently for using these rights.