Privacy policy

1. Data controller

Miroslav Smik • Petzvalova 332/65, 059 01 Spišská Belá, Slovak Republic • Business registration number: 54552206 • Data protection email: support@embrixell.com

2. What data we process and why

• File creation and order fulfilment: design settings, analysed mask, dimensions, format, order identifier and delivered file; the legal basis is performance of the contract.
• Account and cloud projects: email, user identifier and projects the customer chooses to save; performance of the contract.
• Payments and accounting: amount, currency, payment status, payment identifiers and billing information; performance of the contract and legal obligations. Embrixell is not intended to store full payment card numbers.
• Support and complaints: contact details, message content, diagnostic data and attachments; performance of the contract, legal obligations and a legitimate interest in handling requests and protecting claims.
• Security: technical logs, IP address and session events to the extent necessary; a legitimate interest in secure operation.
• Marketing: only with separate consent, which can be withdrawn at any time.

3. Image processing

Without consent to Meta AI recognition, the image stays in your browser and uses local processing. If you explicitly enable recognition, a normalized copy is sent through the Embrixell server to Meta AI to recognize objects and their masks. During this analysis, Embrixell does not store the image or model response in its database. Masks return to your browser and can become part of a saved project. Stitches are generated in your browser.

Cloud saving is an explicit action and stores the project, including its original image, in your private account. A paid digital order sends the design data needed to deliver the machine file. A physical order can store the original image, preview and production files needed to manufacture and deliver it. Signing in alone does not save your image. Details of processing, recipients and retention are in the privacy policy.

Text AI assistance may process the question, the most recent part of the conversation and design settings. It does not receive the image unless the service expressly announces this and the customer confirms.

Browser storage

The chosen language and information needed to maintain sign-in are stored on the device. Signing out removes the sign-in session from that browser. It does not delete cloud projects, orders or subscriptions. A project downloaded to the device remains a local copy even after the cloud project is deleted.

4. Recipients

Depending on the features used, data may be processed by OpenAI Sites (hosting), Cloudflare (CDN and security), Supabase (sign-in and cloud storage), Stripe (payments), OpenAI (text AI assistance) and Meta AI (image and mask recognition).

For transfers outside the European Economic Area, a valid legal mechanism is used, such as an adequacy decision or standard contractual clauses, depending on the provider.

5. How long we retain data

• Local preview: only while working in the browser, unless the customer deliberately saves it to the cloud;
• Cloud project: until deletion by the customer or account deletion, or for a reasonable technical backup period up to 30 days;
• Purchased output and download link: for the lifetime of the customer account; secure links are short-lived and renewable;
• Accounting and tax records: for the legally required period;
• Support and complaints: during handling and then for the period needed to protect legal claims up to 3 years;
• Security logs: up to 90 days.

6. Customer rights

The data subject may request access, rectification, erasure, restriction of processing and data portability; they may object to processing based on legitimate interests and withdraw consent at any time without affecting earlier processing. Requests should be sent to support@embrixell.com. Identity may be reasonably verified.

Anyone who believes their rights have been infringed may request proceedings before the Office for Personal Data Protection of the Slovak Republic.

7. Required data and automation

Data marked as required during ordering are necessary to conclude and perform the contract; without them the order cannot be completed. Embrixell is not intended to make decisions with legal or similarly significant effects based solely on automated processing.

Data for physical production

Delivery address, phone, production files and the necessary order details are shared with the named manufacturer and carrier only for production, delivery, tracking and claims. A manufacturer can access only their own orders.