Legal
Privacy Policy
This policy explains what personal data DevNex collects when you use Pixnex, why, and the choices you have.
Last updated 30 Oct 2026
The short version
- Your images are never uploaded. The image tools run in your browser, so we never receive, see or store the images you process.
- You can use the tools without an account. If you create one, we store your email address, an optional display name and your billing history.
- We don't sell your data, and we don't use advertising or analytics cookies. We count visits with a cookieless tool that doesn't identify you.
Who we are
DevNex ("we", "us") runs Pixnex and is the controller of your personal data under UK data protection law (the UK GDPR and the Data Protection Act 2018). You can contact us at contact@dev-nex.com.
What we collect and why
| Data | Why we use it | Legal basis |
|---|---|---|
| Account details: email address, optional display name, and your password (stored only as a secure hash by our authentication provider) | To create and secure your account, sign you in, and send account emails such as confirmation and password reset links | Contract |
| Billing records: the plan you chose, amount, payment reference, dates, the payer name and any note you give us when you report a transfer, and our decision on it | To match your bank transfer, activate your plan, answer questions about payments, and keep accounting records | Contract; legal obligation (accounting records) |
| Subscription status and plan dates | To give you the limits of the plan you paid for | Contract |
| Records of actions our staff take on your account, such as approving a payment | Accountability, preventing fraud and resolving disputes | Legitimate interests |
| Technical data: IP address, browser type and request logs kept by our hosting and database providers | To run the service securely, limit abuse such as repeated sign-in attempts, and fix problems | Legitimate interests |
| Visit statistics: pages viewed, the referring website, approximate country, and device and browser type. Collected without cookies by Vercel Web Analytics, which doesn't identify or follow individual visitors, and shown to us only as totals | To see which pages and tools are used, and improve the site | Legitimate interests |
| Messages you send us | To reply and help you | Legitimate interests; contract where it concerns your account |
What we don't collect
The images you compress, convert or resize are processed on your device and never sent to us. We don't take card payments, so we never receive card details. Your bank sends us the transfer details any bank transfer includes, such as the payer's name and the reference.
Who we share data with
We use a small number of service providers who process data on our behalf, under contracts that require them to protect it:
- Supabase: authentication and our database (account, subscription and billing records)
- Vercel: hosts the website, keeps short-term request logs and provides cookieless visit statistics
- Our email delivery provider: sends account emails such as confirmation and password reset links
- Our bank: receives your transfer
We may also share data where the law requires it, or to protect our rights, for example in a payment dispute. We never sell personal data.
International transfers
Some providers may process data outside the UK. Where they do, we rely on safeguards recognised under UK law, such as adequacy regulations or the International Data Transfer Agreement.
How long we keep data
- Account details: while your account exists. When you delete your account, we delete them within 30 days.
- Billing records and the related staff actions: six years after the end of the financial year they relate to, because UK law requires us to keep accounting records.
- Technical logs: kept by our providers for a limited period, typically no more than 90 days.
- Messages: as long as needed to deal with your request, and no longer than two years.
Your rights
Under UK data protection law you can ask us to:
- give you a copy of your personal data
- correct data that's wrong
- delete your data or your account
- restrict or object to how we use your data
- give you your data in a portable format
Email us at contact@dev-nex.com from the address on your account. We'll reply within one month. Some data, such as billing records, may need to be kept even after a deletion request, for the legal reasons above.
If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ico.org.uk). We'd appreciate the chance to sort it out with you first.
Cookies
We only use cookies that are needed to keep you signed in. See our Cookie Policy.
Security
Data is encrypted in transit, access to account and billing data is restricted by database rules so each person sees only their own records, and staff access is limited and logged.
Children
Pixnex isn't aimed at children under 13, and you must be 18 or over to buy a paid plan. If you think a child has given us personal data, contact us and we'll delete it.
Changes to this policy
If we make significant changes we'll update the date at the top and, where appropriate, tell account holders by email before the change takes effect.