Privacy notice
Last updated 26 September 2026
This notice explains what personal data Prompt&Pixel collects, why, who else handles it, and what you can ask us to do with it. It is written to be read, not skimmed past, so it is short.
Who we are
Prompt&Pixel is the trading name of Muhammad Sufiyan Tai, a sole proprietor based in Karachi, Pakistan. We are the controller of the personal data described here.
Contact for anything in this notice: tai@promptandpixel.co
What we collect
| When | What |
|---|---|
| You send a brief | Your name, email, Instagram handle (if you give it), the package you pick, your brief, and any files you upload. |
| You use a free creatives page we sent you | The email address you confirm and the photos you select or upload. |
| We contact your business | Your business's website address, the business contact email published on it, product photos publicly shown on that site, and whether you replied or opened the page we made for you. |
| You browse this site | Server logs (IP address, browser type, pages requested, time), and, if you allow it, Google Analytics data (pages viewed, rough location, device type). |
We do not collect payment card details on this site. Payments are made through a secure payment link from a payment provider, under that provider's own privacy terms.
Why we use it, and on what basis
- To answer your brief and deliver your work: because you asked us to (taking steps towards, and performing, a contract).
- To contact businesses about our service: our legitimate interest in offering a relevant service to businesses at their published business address. Every email says how to opt out, and one reply is enough.
- To see which pages help (Google Analytics): your consent where the law requires it, including the UK, the EEA and Switzerland. Elsewhere, our legitimate interest in improving the site.
- To keep the site secure and working (server logs): our legitimate interest in running a safe service.
Who else handles it
We use a small number of service providers, only for the purposes above:
- Server hosting provider: runs this website and our tools.
- Zoho: our email.
- Google: Google Analytics (with consent where required) and Google Sheets, where we keep our list of businesses contacted and briefs received.
- Telegram: internal notifications to us when a brief arrives, including the files you attach.
- AI model providers (reached through OpenRouter; currently including Google and Anthropic): to generate your images and to help draft text. Your product photos and brief are sent to them for that purpose only.
We never sell personal data, and we never share it for advertising.
These providers may process data outside your country, including in the United States and the EU, under their own safeguards (such as standard contractual clauses).
How long we keep it
- Briefs, files and project emails: for the project, then up to 12 months so we can support repeat orders, unless you ask us to delete them sooner.
- Business outreach records: up to 24 months. If you opt out, we keep only your address on a do-not-contact list, so we never email you again.
- Server logs: about two weeks.
- Google Analytics data: up to 14 months.
Your rights
You can ask us to show you the data we hold about you, correct it, delete it, stop using it, or send it to you in a portable form. You can object to our business emails at any time: reply "stop" to any of them, or write to tai@promptandpixel.co. You can withdraw analytics consent at any time using the button below.
We reply within one month. If you are unhappy with our answer, you can complain to your data protection authority. In the UK that is the Information Commissioner's Office (ico.org.uk).
Cookies
This site uses Google Analytics cookies (named _ga and _ga_…) only if you accept them where consent is required. We also store your choice itself in your browser (pnp_consent), so we do not ask again. Nothing else is stored for tracking.
Changes
If we change this notice, we will update the date at the top. Significant changes will be highlighted on this page.