Privacy Policy
Workroom by Everypixel
This Privacy Policy explains how Everypixel Labs Inc. (“Everypixel”, “we”, “us”, “our”) processes personal data of visitors and users of the website https://workroom.everypixel.com and https://app.everypixel.com (the “Site”).
Effective starting: October 14, 2026
Scope
This Privacy Policy applies to all visitors and users of the Service, including those who subscribe to the waitlist or participate in demo/testing features.
What This Privacy Policy Covers
This Privacy Policy applies to the website https://workroom.everypixel.com, https://app.everypixel.com and to all products, features, content, and services made available through this website (collectively, the “Services”), which are owned and operated by Everypixel and its affiliates.
We collect certain information about you which enables us to do business with you and improve our services. Your privacy is very important to us. And in order to protect it we have adopted this Privacy Policy which applies to any and all personal information you submit to us in connection with your access to and/or use of our website.
If you do not agree to abide by this Privacy Policy, please do not access or use our Site or interact with any other aspect of our business.
What Information We Collect About You
We shall collect information about you that you provide to us while using our Services, and when other third parties provide it to us, as further described below.
Information That You Provide To Us
We shall collect information about you when you input it into the Services or otherwise provide it directly to us.
Device and Connection Information
We process technical information such as IP address, browser, operating system, device type, screen resolution, browser language, and time zone through our analytics and error-monitoring tools, including Google Analytics 4 and Sentry. Sentry also processes request headers and error information. Google Analytics provides approximate country and city information derived from IP addresses; this does not mean that we receive or store raw IP addresses in Google Analytics reports. We do not collect precise device geolocation.
Account and Profile Information
We collect your email address, first and last name, username, user ID, avatar, and registration date. We also collect the answers you provide during onboarding, such as your occupation, industry, role, goals, and how you heard about us.
For authentication, we process your password hash when you use email and password login, your login method, your Google account ID if you sign in with Google, session information, and dates of your latest logins. Registration creates your Workroom account and gives you access to the generation tools and to the content license associated with your plan.
Information You Provide Through Our Support Channels
The Service also includes our customer support, where you may choose to submit information regarding any problems you may experience while using our Service.
Payment Information
When you purchase a subscription or credits, we process your plan, subscription status, renewal and cancellation dates, purchase amounts, currency, discounts and promotional codes, and credit refunds for failed generations. We also collect cancellation or checkout feedback when you provide it.
Payments are processed by Stripe. Our records include transaction and Stripe customer IDs, payment status and method, error codes, payment risk assessment, 3-D Secure results, card brand, issuing-bank country, and whether the card is debit or credit. We do not store your full card number, CVC, card expiry date, or last four digits in our product database. Billing names, addresses, company details, and tax numbers, if collected during checkout, are processed by Stripe rather than stored in our product database.
Your Use of the Services
We collect information about pages viewed, clicks, features used, activity times and session duration, errors, registration and checkout steps, and views and downloads of generated results. We also process referral sources, UTM parameters, campaign information, Google Click IDs, and other advertising click identifiers used to determine referral sources.
We process uploaded images, video and audio, filenames and metadata, prompts, conversations with our chat agent, selected AI models, generation settings, request history, generated outputs, reactions to results, and credit usage.
Character Models and Voice Cloning
When you use character creation, we process uploaded photographs of faces to train a character model. When you use voice cloning, we process uploaded voice samples to create a cloned voice. These materials and associated models are personal data where they relate to an identifiable individual. The processing and any applicable requirements depend on the feature and how the data is used.
Session Replay
We use Sentry Session Replay to record aspects of interactions with the Service, including clicks, navigation, and device information, to diagnose errors and understand usability issues.
About Cookies
We use cookies and browser storage, including localStorage, for sessions and interface preferences, and use Google Analytics 4 and Google Tag Manager in connection with analytics and measurement. Google Tag Manager manages tags; the tags it deploys may use cookies or similar technologies.
Our wr_attr cookie on the .everypixel.com domain stores referral-source information for 90 days. Browser controls allow you to manage or delete cookies and other stored data. Disabling storage used for authentication or essential functions may affect the operation of the Service.
Third Parties
We receive information from service providers in connection with your use of the Service, such as account information from Google when you choose Google sign-in, payment information from Stripe, and analytics, delivery, and engagement information from the providers described in this Policy.
How We Use Information We Collect
We use the information we collect to operate, improve, and provide the services offered on this website. The exact way we use your information depends on how you interact with the site and the preferences you choose.
To Provide the Services and Personalize Your Experience
We use information about you to provide the Services to you, including to process transactions with you, authenticate you when you log in, provide customer support, and operate and maintain the Services.
For Research and Development Purposes
We use collective learning about users’ behaviour on our Services and direct feedback to troubleshoot and to identify trends, usage, activity patterns, and aspects of the Services to integrate and to improve the Services.
For Communication Purposes
We use your contact information to send transactional and service communications, including account-related messages, subscription notifications, responses to your requests, technical notices, security alerts, and administrative messages. We use ZeptoMail for transactional and service emails.
Email Marketing
With your consent, Everypixel Labs Inc. uses your email address to send marketing emails about Workroom, including product news, new features, and special offers. Subscribing is optional. You can create an account and use the Services without subscribing. Accepting our Terms of Use or acknowledging this Privacy Policy does not, by itself, subscribe you to marketing emails.
We use Zoho Campaigns to manage subscriptions and send marketing emails. It processes your email address, subscription and unsubscribe information, and delivery and engagement information, including opens and link clicks where tracking is enabled. We use this information to evaluate and improve our communications.
You can withdraw your consent at any time through the unsubscribe link in any marketing email or by contacting workroom@everypixel.com. Withdrawal does not affect the lawfulness of processing based on consent before withdrawal. Unsubscribing from marketing does not stop essential transactional or service messages, such as password resets and security or subscription notices.
Customer Support
We use your information to resolve any technical issues you encounter, to respond to your requests for assistance, to analyze crash information, and to maintain and improve the Services.
To Protect Our Interests And Legal Rights
We shall disclose the information to the extent required by law including legal claims, compliance, regulatory, and audit, or otherwise we believe required to protect our legal rights, interests and the interest of third parties.
Your Consent
We use information about you where you have given us consent to do so for a specific purpose not listed above.
Legal Basis for Processing Information (for EEA Users)
If you are an individual in the European Economic Area (EEA), we shall collect and process information about you only where we have legal basis for such actions under applicable EU laws.
How We Share Information We Collect
We create collaboration tools to facilitate your work and we wish them to aid you as best as possible. This implies sharing information through the Services with certain third parties. We are not in the business of selling information about you to advertisers or other third parties.
Sharing Information with Third Parties
We don’t share your personal information with any unrelated third parties. But we may use third parties to outsource one or more aspects of our business.
Sharing Information with Affiliated Companies
We share information we collect with affiliated companies and, in some cases, with prospective affiliates.
Service Providers
We work with providers for hosting, storage, maintenance, payments, analytics, error monitoring, AI processing, contact management, and communications. These include:
- Google Analytics 4 and Google Tag Manager for analytics and tag management.
- Sentry for error monitoring and Session Replay.
- Stripe for payment processing and payment risk assessment.
- Zoho Bigin for storing and managing contact records in our CRM.
- Zoho Campaigns for marketing email delivery, subscription preferences, and delivery and engagement information.
- ZeptoMail for transactional and service email delivery.
- fal.ai and other external AI providers used to fulfil generation requests.
Prompts and uploaded content are sent to external AI providers as needed to process generation requests. Email and CRM providers process contact information and, as relevant to their functions, message content, subscription preferences, and delivery or engagement information.
Links to Third Party Sites
The Services may include links to third party websites or services. Third parties may have different privacy policies. If you submit any information to any of third party websites, your information is governed by their privacy policies.
Enforcement of Our Rights
In exceptional circumstances, we may disclose information about you to a third party if such disclosure deems reasonable, appropriate or necessary.
How We Store and Secure Information We Collect
Data Security
Whenever you submit an order to Everypixel, you can do so over a secure (i.e. encrypted) connection to ensure the entire security of your personal information.
How Long We Keep Information
How long we keep the personal information we collect depends on the type of information. After such time, we will either delete or anonymize your information.
Account Information
We retain your account information for as long as your account is active and a reasonable period thereafter in case you decide to re-activate the Services.
Marketing Information
We retain marketing preferences and related records for as long as needed to manage your subscription and respect your choices. After you unsubscribe, we retain the information necessary to record and honour that request and prevent further marketing emails unless you subscribe again. Other marketing records are retained according to their purpose and applicable legal requirements.
Access to Your Information
We keep your personal data only for as long as we need to. This depends on why it was collected, or if we have a continuing legal basis to do so.
Access and Update Your Information
Our Services enable you to access and update certain personal information within the Services. You can update your profile information within your profile settings.
Deactivate Your Account
If you no longer wish to use our Services, you or your administrator may be able to deactivate your account.
Request Us To Stop Using Your Information
In some cases, you may ask us to stop accessing, storing, using or otherwise processing your information if you believe we don’t have the appropriate rights to do so.
Social Features
You may connect your Google account to sign in to the Service. We process the account information needed for this authentication. This sign-in option does not itself connect your account to social publishing services.
Opt Out of Communications
You can unsubscribe from marketing emails at any time using the unsubscribe link in each marketing email or by contacting workroom@everypixel.com. Your marketing preferences are separate from essential transactional and service communications. You may continue to receive messages necessary to operate your account, provide requested services, or meet legal obligations.
How We Transfer Information We Collect Internationally
We collect and store information in multiple countries and may transfer your data between these locations as needed to operate the Service. Whenever we transfer or process information across borders, we apply appropriate safeguards to ensure that your data remains protected.
How We Protect Your Personal Information
Whenever you submit an order to Everypixel, you can do so over a secure (i.e. encrypted) connection to ensure that your personal information is not at risk.
CHILDREN'S PRIVACY
Workroom is not directed to children under 16, and we do not knowingly collect Personal Information from children under 16 without the legally required parental consent.
If we learn that we have collected Personal Information from a child under 16 without the required parental consent, we will take reasonable steps to delete that information as required by applicable law.
If we become aware that a person below the applicable minimum age has created an account or submitted Personal Information in violation of these requirements, we may suspend or terminate the account and delete the associated Personal Information, subject to applicable legal obligations.
We do not knowingly use children's Personal Information for targeted advertising or other purposes prohibited by applicable children's privacy laws.
Parents or legal guardians who believe that a child has provided Personal Information to Workroom may contact us using the information in the "Contact Us" section so that we can review the request and take appropriate action.
Nothing in this section limits any additional rights or protections provided to minors under applicable state, federal, or international privacy laws.
EEA, UK AND GDPR PRIVACY RIGHTS
If you are located in the European Economic Area (EEA), the United Kingdom, or another jurisdiction where applicable data protection laws provide similar rights, additional protections may apply to the processing of your Personal Information.
Where the GDPR applies, we process Personal Information on one or more of the following legal bases, depending on the purpose of processing:
- Performance of a contract: where processing is necessary to provide Workroom, maintain your account, process transactions, or provide features you have requested.
- Legitimate interests: where processing is necessary for purposes such as maintaining and securing our services, preventing fraud and abuse, troubleshooting, improving service reliability, and protecting our legal rights, provided that these interests are not overridden by your rights and freedoms.
- Consent: where we ask for your consent, including where required for certain cookies, analytics, marketing communications, or other optional processing. You may withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
- Legal obligations: where processing is necessary for us to comply with applicable laws or legal requirements.
Where required by applicable law, we will provide additional information about the specific legal basis applicable to a particular processing activity.
You may have the right to access, correct, delete, restrict, or object to the processing of your Personal Information, as well as the right to data portability and the right to withdraw consent where processing is based on consent. You may also have the right to lodge a complaint with your local data protection supervisory authority.
International Data Transfers
Because Workroom is operated internationally, your Personal Information may be processed or stored in countries outside the EEA, the United Kingdom, or your country of residence.
Where required by applicable law, we use appropriate safeguards for international transfers, which may include an adequacy decision, the EU-U.S. Data Privacy Framework where applicable, the European Commission's Standard Contractual Clauses, the UK International Data Transfer Agreement or Addendum, or another legally recognized transfer mechanism.
Where appropriate, additional safeguards may be implemented to protect Personal Information transferred internationally.
EU Representative
Where required by Article 27 of the GDPR, Everypixel Labs Inc. will designate a representative in the European Union and provide the representative's contact details in this Privacy Policy.
CALIFORNIA PRIVACY RIGHTS
If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the "CCPA"), may provide you with additional rights regarding your Personal Information.
Subject to applicable exceptions and limitations, California residents may have the right to:
- know what categories and specific pieces of Personal Information we collect, use, disclose, or otherwise process;
- request deletion of Personal Information;
- request correction of inaccurate Personal Information;
- opt out of the sale or sharing of Personal Information, where applicable;
- limit certain uses and disclosures of Sensitive Personal Information;
- receive equal treatment when exercising privacy rights.
We do not sell Personal Information for monetary consideration.
Where applicable, we will honor legally recognized opt-out signals, including Global Privacy Control (GPC), in accordance with applicable law.
California residents may submit privacy requests using the contact information provided in the "Contact Us" section of this Privacy Policy. We may take reasonable steps to verify your identity before completing certain requests.
FACE, VOICE AND BIOMETRIC DATA
Certain Workroom features allow you to upload photographs, images, video, or voice recordings and use them to create AI-generated characters, voice models, or other personalized content.
Depending on how the information is processed and the applicable law, photographs, facial information, voice recordings, voiceprints, facial geometry, or derived representations may constitute biometric information or biometric identifiers.
We process this information only for the purposes described when you use the relevant Workroom feature, such as creating or operating a character model, voice model, or other personalized AI feature.
We do not use face or voice information to identify you as a person unless we expressly inform you that a particular feature performs identification and the applicable legal requirements are satisfied.
Where required by applicable law, we will obtain the required consent or other authorization before collecting or processing biometric information.
We do not sell biometric information.
We do not disclose biometric information to third parties except where necessary to provide the requested feature, comply with law, protect our rights or users, or as otherwise described in this Privacy Policy.
Where third-party service providers process face, voice, or other biometric information on our behalf, we require them to process such information only for authorized purposes and subject to appropriate contractual and security requirements.
We retain biometric information only for as long as reasonably necessary to provide the feature for which it was collected, comply with legal obligations, resolve disputes, enforce agreements, or otherwise fulfill the purposes described in this Privacy Policy.
Where applicable law requires a specific retention and destruction schedule for biometric information, we will comply with those requirements.
You may request deletion of eligible face, voice, or biometric information through the deletion mechanisms described in this Privacy Policy, subject to applicable legal exceptions.
Illinois Biometric Privacy
For Illinois residents, certain information generated from or derived from facial geometry or voice characteristics may constitute a "biometric identifier" under the Illinois Biometric Information Privacy Act (BIPA).
Where BIPA applies, we will provide the notices required by law and obtain the required written release before collecting, capturing, purchasing, receiving, or otherwise obtaining biometric identifiers or biometric information.
We will maintain and make available a publicly accessible policy governing the retention and destruction of biometric information as required by applicable law.
Texas and Other U.S. Biometric Laws
Where applicable U.S. state biometric privacy laws impose additional notice, consent, disclosure, retention, security, or deletion requirements, we will comply with those requirements to the extent they apply to our processing activities.
Changes to our Privacy Policy
We may change the terms of this Privacy Policy at any time. We will post any revised privacy policy on this page and, if the changes are significant, we will post a notice on the Services homepages, login screens, or inform you via an email notification.
Contact Us
If you have any questions regarding this Privacy Policy, please contact us at: workroom@everypixel.com.
Everypixel Labs Inc. registered at 4364 252nd Pl NE, Issaquah, WA, 98029, USA. Phone (415) 230-2360