Privacy Policy

Last updated: July 10, 2026

This Privacy Policy describes the information that Rafal Lix (the "Operator", "we", "us") collects through the RaphaelX website and the tools made available on it (the "Service"), the purposes for which that information is used, and the terms on which it is disclosed. It forms part of, and is to be read with, the Terms of Service, and capitalized terms used here carry the meanings given there.

1. Scope and Acceptance

1.1This Policy applies to the Service and to everything done through an Account. By creating an Account or using the Service you accept this Policy. If you do not accept it, you must not use the Service.

1.2The Operator may amend this Policy at any time. The version published at this address, bearing the date shown above, is the version in force, and your continued use of the Service after an amendment constitutes acceptance of it.

2. Information Collected

2.1Information you provide. The Operator collects the email address and password supplied on registration, or, where you sign in through a third-party identity provider, the basic account details you elect to release, being your email address, name and profile image. Passwords are handled by an authentication provider and are not visible to the Operator in readable form.

2.2Submissions. The Operator collects and stores the images, prompts, settings and any reference image you supply to the Service.

2.3Payment records. Payments are processed by a third-party payment provider. Your payment card number is supplied directly to that provider and does not reach the Operator. The Operator retains only the record of what was purchased, when and for which Account.

2.4Results and Account activity. The Operator stores the Results generated for you together with the settings used to generate them, and records your Credit balance, plan status, purchase history and referral activity.

2.5Technical records. The Operator records standard technical information, including internet protocol address, browser and device type and times of access, for the purposes of security, diagnosis and the prevention of abuse.

2.6The Operator does not employ advertising trackers, social media pixels or third-party analytics scripts, and does not acquire information about you from data brokers.

3. Use of Information

3.1Information is used to operate the Service and produce the Results you request, to process payments and administer plans and Credits, to maintain the security and integrity of the Service and prevent abuse, to respond to your requests for support, to enforce the Terms of Service, and to comply with legal, tax and accounting obligations.

3.2Material is not used to train models made available to other users or to third parties, is not published, and is not used in marketing without your prior permission.

4. Images You Supply

4.1Certain features operate upon an image you supply. Such images are used solely to produce the Results you request within the Service.

4.2The Operator does not use those images to identify any person, does not create or contribute to any facial recognition database, and does not sell, license or otherwise make them available to any person for that or any other purpose. A reference image remains associated with your Account until you replace or delete it.

5. Disclosure

5.1Service providers. The Operator discloses information to the providers engaged to supply hosting, storage, processing and payment handling, in each case limited to what that provider requires in order to perform its function and subject to terms that prohibit its use for the provider's own purposes.

5.2Legal and protective disclosure. The Operator discloses information where required by law, in response to an order of a court or a valid request of a governmental or law enforcement authority, and where the Operator considers disclosure necessary to enforce the Terms of Service, to investigate a suspected contravention of them, or to protect the rights, property or safety of the Operator, of a user or of any other person. This includes disclosure under Section 8.3 of the Terms of Service.

5.3Business transfer. Where the Service is the subject of a merger, acquisition, reorganization or sale of assets, information may be transferred as part of that transaction.

5.4The Operator does not sell personal information and does not disclose it to any person for advertising purposes.

6. Cookies and Browser Storage

6.1The Service uses only such cookies and browser storage as are strictly necessary to maintain your session and the operation of the Service, being your authentication token, the settings you choose, and, where you reached the Service through a partner's link, the code identifying that partner.

6.2In addition, when you begin a purchase, our payment provider sets two cookies of its own, which it uses to detect fraudulent use of payment cards. Those cookies are set at the point you start paying and not before, and the Operator does not read them.

6.3The Service uses no advertising cookies, no third-party analytics, and nothing that tracks you across other websites.

7. Retention

7.1Account data is retained for so long as the Account subsists. Submissions and Results are retained until deleted by you or until the Account is deleted, subject to Section 11 of the Terms of Service. Payment records are retained for the period required by tax, accounting and anti-fraud rules. Technical records are retained for the short period required for security and diagnosis.

7.2Deleted data may persist in encrypted backups for up to thirty (30) days before permanent removal.

7.3The Operator may retain information for longer where retention is necessary to resolve a dispute, to enforce the Terms of Service, or to comply with a legal obligation.

8. Security

8.1Traffic to the Service is encrypted in transit. Access to production data is restricted and authenticated. Payment card data is handled exclusively by the payment provider under the card industry's security standards.

8.2The Operator applies reasonable technical and organizational measures to protect the information it holds. No method of transmission or storage is entirely secure, no warranty of security is given, and you use the Service on that basis.

9. Location of Processing

9.1Information may be stored and processed in the United States and in any other territory in which the Operator's service providers operate. By using the Service you consent to that storage and processing.

10. Managing Your Account

10.1You may amend your Account details, delete individual Results, and delete the Account together with the data associated with it, in each case from within the Service under Settings. Deletion of an Account is permanent and cannot be reversed.

11. Notices

11.1Any question or request concerning this Policy should be sent to legal@raphaelx.com. Account holders may alternatively use the Support screen within the Service, under Settings, where the response appears on the same screen.