Clixa AI
Open Clixa →
01 Overview
Clixa AI (“Clixa”, “we”, “us”) operates clixa.app, an AI workspace for creating YouTube thumbnails and related assets (the “Service”). This Privacy Policy describes how we handle personal data when you visit our site, create an account, and use the Service. It applies alongside our Terms of Service.
02 Information we collect
Account & profile
You sign in with Google. When you do, we receive basic profile information from your Google account — your email address, name, profile picture, a Google account identifier, and whether your email is verified. We store these to create and secure your account. We do not receive your Google password. (Legacy or administrator accounts may use a password, which is always stored as a salted hash — never in plain text.)
Content you create
To provide the Service, we store the content you make and the inputs you give us: prompts and descriptions, reference images you upload, generated thumbnails and images, titles and other text results, saved visual “characters”/personas, your conversations and project history, and your settings.
Usage, device & log data
We collect first-party product analytics about how the Service is used — for example events such as page views and actions, an anonymous device identifier, a session identifier, the page URL and referrer, your browser and operating system, approximate access times, and your IP address. We use this to keep the Service working, secure, and to improve it.
Billing
Payments are processed by Paddle (see How we share information). Paddle collects your name, billing address, tax/VAT ID where relevant, and payment instrument details. Clixa receives only a customer reference, your subscription/plan and transaction status, and non-sensitive summary data — we never store your full card number, CVV, or bank details.
Connected platforms (YouTube)
Clixa’s Optimize feature uses YouTube API Services. If you connect a YouTube channel, then — with your authorisation — we access your channel information and video data (titles, descriptions, tags, thumbnails, and basic statistics) so you can review and optimise your videos, and, only when you choose to, we update a video’s title, description, tags, or thumbnail on your behalf. We store the connected channel’s information and the OAuth access and refresh tokens needed for these features (refresh tokens are encrypted at rest); we never receive or store your Google password.
By connecting a channel you also agree to the YouTube Terms of Service, and Google’s handling of your information is described in the Google Privacy Policy. You can disconnect your channel at any time in Clixa settings, and you can revoke Clixa’s access to your Google account at any time via Google security settings. When you disconnect or revoke access we delete the stored tokens, and cached channel and video data is removed in line with the retention periods below.
Communications & referrals
If you contact support or opt in to marketing email, we keep those communications and your consent choice. If you arrive through a referral or affiliate link, we record the referral code to attribute your signup.
03 How we use information
- To provide, maintain, and secure the Service and your account.
- To generate your thumbnails, titles, and other results.
- To power the Optimize feature on a connected YouTube channel — reading your video data so you can review it, and updating a video’s title, description, tags, or thumbnail when you ask us to.
- To process payments, manage subscriptions and credits, and prevent fraud and abuse.
- To provide customer support and respond to your requests.
- To understand and improve how the Service is used and to develop new features.
- To send you service and account messages, and — only if you opt in — marketing email, which you can unsubscribe from at any time via the link in those emails or in your settings.
- To comply with legal obligations and enforce our Terms.
Where the GDPR or similar laws apply, we rely on these legal bases: performance of our contract with you, your consent (for example marketing email), our legitimate interests (such as securing and improving the Service), and compliance with legal obligations.
04 AI processing & training
When you generate something, your prompt and any reference images are sent to the AI infrastructure that powers Clixa’s SRX models so your result can be produced. This processing happens to deliver the feature you requested.
07 Data retention
We keep your account and content for as long as your account is active so you can use the Service. When you delete content, it is removed from the active Service; when you delete your account, we delete or anonymise your personal data within 30 days, and residual copies in encrypted backups are purged within 90 days.
We may retain certain records for longer where we are legally required to (for example, transaction and tax records kept by us or Paddle), or where necessary to resolve disputes, prevent fraud, and enforce our agreements — and only for as long as needed for those purposes.
08 Your rights & choices
Depending on where you live, you may have the right to:
- access a copy of the personal data we hold about you;
- correct inaccurate or incomplete data;
- delete your data (you can also delete your account in settings);
- receive your data in a portable format;
- object to or restrict certain processing; and
- withdraw consent at any time (for example, unsubscribe from marketing email).
To exercise any of these, email support@clixa.app — we may need to verify your identity first. If you are in the European Economic Area or the UK, you also have the right to lodge a complaint with your local data-protection authority. If you are a California resident, we do not sell or “share” your personal information as those terms are defined under the CCPA/CPRA, and you may exercise the access and deletion rights above without discrimination.
09 International transfers
Clixa and our providers operate globally, so your information may be processed in countries other than your own — including the United States. Where required, we rely on appropriate safeguards (such as the European Commission’s Standard Contractual Clauses) to protect your data when it is transferred internationally.
10 Security
We use industry-standard measures to protect your data, including encryption in transit (HTTPS), encryption of sensitive tokens at rest, hashed credentials, and access controls. No method of transmission or storage is completely secure, but we work to protect your information and will notify you and the relevant authorities of a breach where required by law — without undue delay, and, where required, within 72 hours of becoming aware — together with the steps we are taking.
11 Children
The Service is not intended for anyone under 18 (or the age of majority in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will delete it promptly.
12 Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated version here and update the “Last updated” date, and for material changes we will take reasonable steps to notify you.
13 Contact
For any privacy question or request, email support@clixa.app.