PREXI STUDIOS LTDA. / PRIVACY POLICY
Last updated: April 2026
Prexi Studios Ltda., Rua da Boavista 82, 1200-068 Lisbon, Portugal, is the data controller for personal data collected through prexi.art.
Browse users (no account): We collect anonymized usage analytics via Vercel Analytics. No cookies are set for tracking purposes. No personal data is collected.
Account users: We collect your name, email address, and payment information (processed by Stripe – we never store card numbers). We also store your generated prompt collections and usage history.
Contact form: We collect the name, email, and message content you submit. This data is stored for up to 12 months and used only to respond to your inquiry.
We use your data to: operate the service, process payments, respond to support requests, send transactional emails (password reset, billing receipts), and improve the library. We do not sell personal data to third parties. We do not send marketing emails without explicit consent.
Contract performance (Art. 6.1.b): processing necessary to provide the service you signed up for. Legitimate interests (Art. 6.1.f): anonymized analytics to improve the product. Consent (Art. 6.1.a): for any optional marketing communications (which we do not currently send).
Vercel (hosting, analytics) – USA/EU, Standard Contractual Clauses. Stripe (payment processing) – USA/EU, SCC. Resend (transactional email) – USA, SCC. Black Forest Labs, Midjourney, Google, Stability AI (model APIs for preview generation) – see their respective privacy policies.
Account data: retained for the duration of the subscription plus 90 days after cancellation. Contact form submissions: 12 months. Analytics: anonymized, no retention limit. Billing records: 7 years (Portuguese tax law requirement).
You have the right to: access your personal data, correct inaccurate data, request erasure ("right to be forgotten"), object to processing, data portability, and withdraw consent. To exercise these rights, use our contact form. We will respond within 30 days.
Prexi sets minimal cookies required for session management and payment processing. We do not use advertising cookies or third-party tracking. See our Cookie Policy for details.
Some of our processors are based in the USA. Transfers are covered by Standard Contractual Clauses approved by the European Commission (GDPR Article 46.2.c).
If you believe we have handled your data unlawfully, you have the right to lodge a complaint with the Portuguese data protection authority: CNPD (Comissao Nacional de Protecao de Dados), cnpd.pt.
Privacy questions: use our contact form.