Privacy Policy
Your photos, patterns and personal information at MotifPix.
Version 1.0 · Effective November 12, 2026
MotifPix is available at motifpix.com. Paid subscriptions are not yet available for purchase. The separate preview at test.motifpix.com uses test payments only.
MotifPix turns photos and lettering into cross-stitch patterns. This policy explains what information reaches our service, why we use it and how you can exercise your privacy rights. It applies to the MotifPix website and application, including the preview at test.motifpix.com.
1. Who to contact
MotifPix is responsible for the personal information it uses to operate the service. Send privacy questions, access requests or deletion requests to support@motifpix.com. The same address handles customer support and security reports.
2. Information we collect
- Account information: your name, email address, password hash, email-verification status and account settings. We do not store your password in plain text. The current product uses email and password rather than social sign-in.
- Session and security information: session identifiers, IP address, browser information, authentication events and request or error logs used to keep accounts secure and diagnose failures.
- Saved patterns: when you save a project, we receive its title, stitch grid, thread palette, dimensions and editing settings. We store project ownership and creation or update timestamps.
- Exports: generating a PDF sends the pattern and paper settings to our server. We store the completed PDF, its title, export status and usage records so you can download it again and we can apply your plan's export allowance.
- Billing information: customer, transaction and subscription identifiers, plan, billing period, payment or refund status and associated account information. Waffo Pancake collects payment details in its hosted checkout. We do not receive or store full card numbers or card security codes.
- Support correspondence: your contact details and the messages or attachments you choose to send us. Please do not email payment card details or unrelated sensitive information.
Your original photo stays in your browser during conversion. Selecting a photo for the editor does not upload that original to our conversion server. Saving or exporting sends the resulting stitch pattern, which can still reveal the subject of the original photo. Treat a pattern based on a private photo as private information too.
If you separately upload a profile image or send an attachment to support, that file is transmitted for that purpose. We do not request precise location, biometric identification or sensitive personal information to create patterns.
3. Why we use information
Where data-protection law requires a legal basis, we use the following bases:
| Purpose | Information used | Legal basis |
|---|---|---|
| Create accounts, save projects and deliver PDFs | Account, pattern and export records | Performance of our contract with you |
| Activate Plus and administer billing | Account, transaction and subscription records | Contract performance; legal obligations for required records |
| Answer support requests | Contact details and correspondence | Contract performance or our legitimate interest in resolving issues |
| Send verification, password-reset and essential service messages | Email and account status | Contract performance or our legitimate interest in account security |
| Prevent abuse and investigate failures | Session, request and error records | Our legitimate interest in keeping the service reliable and secure |
| Respond to lawful requests and maintain required records | Information needed for the specific obligation | Compliance with a legal obligation |
| Send optional marketing, if introduced | Email and communication preferences | Your consent where required |
We do not use your photos or saved patterns to train AI models. The current photo and lettering tools do not send content to a third-party generative AI service. We do not use your data for decisions that produce legal or similarly significant effects through automated profiling.
4. Cookies and browser storage
Essential cookies maintain authentication and session security. Browser storage also keeps interface preferences and temporary editor drafts. You can remove this storage through your browser, but doing so can sign you out or remove unsaved work. Save a project before clearing local data.
The current configuration does not enable Google Analytics, Microsoft Clarity, Plausible, Umami or advertising pixels. If we introduce non-essential tracking, we will update this notice and obtain consent where required before using it. Waffo's hosted checkout and portal have their own storage practices. See our Cookie Policy for the current site behavior.
5. Who receives information
We do not sell your personal information or share it for cross-context behavioral advertising. We disclose information only as needed for these purposes:
- Cloudflare: website hosting, database, private object storage and transactional email. This includes account records, saved stitch data, PDFs and email delivery information. See Cloudflare's privacy policy.
- Waffo Pancake: hosted checkout, subscription management, payment verification and refunds. We send the account and purchase information needed to create and reconcile a checkout. Payment card data is handled by Waffo Pancake and its payment partners, not stored on MotifPix servers. Review the payment privacy notice linked in checkout before entering payment information.
- Support services: the email service used to receive and respond to messages receives the correspondence you send. Incoming support email is routed through Cloudflare Email Routing to our support mailbox service.
- Legal or safety disclosures: information necessary to comply with a valid legal demand, protect rights or investigate fraud, subject to applicable law.
- Business transfers: if the service changes ownership, information may transfer with it under appropriate safeguards. We will notify you of material changes affecting your information.
- Your instructions: when you ask us to share information or give permission for a specific purpose.
We do not publish saved projects in a public gallery. A PDF you download and share yourself is outside our control.
6. Security
We use HTTPS for service connections, hashed passwords, authenticated access to private files and ownership checks for saved projects and exports. These measures reduce risk but cannot guarantee that every incident will be prevented.
Report suspected exposure to support@motifpix.com. We will investigate, limit further exposure and provide notifications required by applicable law. Where GDPR requires notice to a supervisory authority, its 72-hour deadline applies after awareness of a reportable breach; affected people will be informed without undue delay when required. This is not a promise that all incidents will be resolved within 72 hours.
7. How long information is kept
The following schedule governs retention. Deletion requests are reviewed and carried out through support; do not assume that canceling a subscription triggers automatic deletion.
| Information | Retention and deletion |
|---|---|
| Account and profile information | While the account remains open; remove or anonymize within 30 days of a verified deletion request, except records required by law |
| Saved projects and completed PDFs | While your account remains open; remove requested cloud content within 30 days of a verified deletion request |
| Transaction and refund records | Up to 7 years after the transaction, subject to the actual statutory period applicable to the operator and payment provider |
| Support correspondence | Up to 2 years after the request is closed, unless needed for an unresolved dispute |
| Security and diagnostic logs | Up to 12 months; retain incident-specific evidence longer only where needed for an active investigation or legal obligation |
| Residual backup copies | Remove or expire within 90 days after removal from active systems, except copies subject to a legal preservation obligation |
Deleting a project in My patterns removes its saved project record and file; previously generated PDFs are stored separately. Ask us to delete those exports as well if that is your intention. Copies already downloaded to your device are yours to remove.
Canceling Plus does not delete your account, patterns or completed exports. We keep these available under the free plan. Account deletion is a separate request. If we must retain particular records for legal reasons, we will limit their use to that reason and explain the exception when permitted.
8. Your rights and how to exercise them
Depending on your location and applicable law, you can request information about our practices, access or a copy of your data, correction, deletion, restriction of processing, a portable copy, or an objection to processing based on legitimate interests. You may withdraw consent for consent-based processing at any time without affecting earlier lawful processing.
Email support@motifpix.com, preferably from your account email, and describe your request. We may need proportionate verification to protect your account; do not send identity documents unless we explain why they are necessary. Our response target is 30 calendar days. Applicable statutory deadlines take precedence, and we will explain any permitted extension.
California residents may also request disclosure of the categories, sources, purposes and recipients of personal information and exercise applicable correction, deletion and portability rights. We do not discriminate against you for exercising privacy rights. We do not sell or share personal information for targeted advertising. Where applicable, authorized agents may submit requests with proof of authority.
You may complain to the data-protection authority where you live or work, or where an alleged violation occurred. Contacting us first is optional and does not restrict that right.
9. Email preferences
The current product does not enable a marketing newsletter or automatic marketing enrollment. Verification, password resets, billing and material service notices are operational messages. If optional marketing is introduced, it will include an unsubscribe method and any legally required opt-in. Unsubscribing from marketing does not stop essential account messages.
10. International transfers
Cloudflare uses global infrastructure, and payment or support providers may process information outside your country. We do not promise storage in a particular country. Contact us for the locations and transfer arrangements applicable to your information.
Where a transfer requires additional safeguards, we will use the mechanism required for that transfer, such as an applicable adequacy decision or standard contractual clauses with any necessary supplementary measures. Contact us for details of safeguards applicable to your information. We assess the applicable safeguards for each transfer rather than treating this policy as a substitute for a required agreement.
11. Age requirement
MotifPix is intended for people aged 18 or older. We do not knowingly collect information from children under 18. If a child has provided personal information, contact us so we can investigate and arrange deletion where appropriate.
12. Other websites
Links and hosted payment pages can lead to services operated by others. Their notices govern information they collect for their own purposes. This does not remove our responsibility for information we disclose to them.
13. Changes to this policy
We will update the version and date when this policy changes. For a material change, our notice period is at least 15 days through the application or your registered email, unless an urgent security or legal requirement needs earlier action. We will explain such an exception. Where a new use requires consent, publishing an update or your continued use alone will not replace that consent.
14. Contact
For privacy, account deletion, billing or security assistance, email support@motifpix.com. Please identify the request type in the subject line. Our Terms of Service explain subscription cancellation, refunds and acceptable use.