Last updated: 9 August 2026
To run Mypixia we rely on a small number of specialist service providers — for hosting, payments, email, delivery and similar functions. Where they process personal data on our behalf they act as our processors: each is bound by a written data processing agreement that limits them to our documented instructions, requires appropriate security measures, and prohibits them from using the data for their own purposes.
The categories below set out what kinds of provider are involved and what each kind handles. If you need to know the specific companies, see requesting the detailed list.
| Category | What it does for us | Types of personal data involved |
|---|---|---|
| Cloud hosting & storage | Runs the Mypixia platform and stores its data, including design and product images | Account, order and design data |
| Payment processing | Takes payment, prevents fraud, issues refunds, and verifies sellers for payouts | Payment and transaction data; for sellers, identity and bank details |
| Authentication | Signs you in and manages sessions, including social sign-in where you choose it | Email address, authentication identifiers, sign-in metadata |
| AI image generation | Produces the output when you use the optional AI design features | The prompt and the image you supply to the feature |
| Email delivery | Sends order confirmations and password resets, and campaign email where you have consented | Name, email address, order references |
| Shipping & logistics | Delivers your order and issues prepaid return labels | Name, delivery address, phone number, order reference |
| Analytics | Measures how the site is used — only where you have consented | Pseudonymous usage data, truncated IP address |
Mypixia is based in the United States and our providers are largely located there. Where personal data originating in the EEA, the UK or Switzerland is transferred outside those regions, the transfer is covered by an appropriate safeguard — the European Commission's Standard Contractual Clauses (with the UK Addendum or the Swiss equivalent as applicable), an adequacy decision, or the EU–US Data Privacy Framework where the recipient is certified. Section 6 of our Privacy Policy has the detail.
We publish categories here rather than a full vendor inventory. The named list — each provider, its role, its location and the transfer safeguard relied on — is available on request:
Email: [email protected]
You can also use our privacy request form. We respond within
one month (EEA/UK) or 45 days (US state privacy laws). We may ask you to verify your
identity before responding.
Sellers on the marketplace are not our sub-processors. When a seller receives your order details in order to make and ship your item, they act as an independent controller of that data and are responsible for their own compliance. Their obligations to you are set out in the Mypixia merchant terms and their own privacy notice.
We update this page when these categories change, and we notify merchants under a data processing agreement before a new sub-processor begins processing personal data.