Privacy and Cookie Policy

Last updated: 6th October 2026

This policy explains what personal information Poliigon collects when you use our website and the Poliigon Software, such as Polydex and our plugins (the "Service"), why we collect it, who we share it with, and the choices you have. It also lists the cookies we use.

1. Who we are

The Service is run by Poliigon Pty Ltd (ACN 601 323 166), Suite 147, 42 Manilla St, East Brisbane, QLD 4169, Australia. We are responsible for your personal information. If you have a question about this policy or your information, wherever you live, including the EU and UK, email support@poliigon.com.

2. What we collect

Information you give us

Account details: your name and email address. If you sign in with Google, we receive your name and email address from Google. We don't use passwords; we send a code to your email to log you in.
Billing details: your billing address, and your company name and VAT number if you buy as a business. These are stored by Chargebee, our billing provider, and payments are handled by our payment providers. We don't see or store your full card number.
Messages you send us, such as support chats and emails.
Images and prompts you upload, such as images for online reverse image search, and images and prompts for Create, our AI tool for generating assets.
Files you sync, if you turn on cloud sync in Polydex Pro. Polydex only uploads files from your device if you turn on cloud sync or online reverse image search.
Your email preferences, such as which newsletters you've signed up for.

Information we collect when you use the Service

What you do on the Service: pages you view, assets you download or favourite, searches, and clicks.
Device and connection details: IP address, browser, device type, operating system, language, time zone and approximate country.
Session recordings on our website: mouse movements, clicks, scrolling and page layout, so we can see where people get stuck.
Email activity: whether you opened an email from us and which links you clicked.
Referral details: the affiliate link or discount code that brought you to Poliigon.
Usage data and crash reports from the Poliigon Software, if you opt in: actions in the app, asset types, file extensions and sizes, error reports, and crash details including your operating system name and version. We remove file names and folder paths from error reports before they leave your device, but this may not catch all of them. Error reports never include file contents. You can turn this off at any time in the Software settings.

3. How we use your information

To create and run your account, and give you the assets you've paid for.
To take payments, send receipts and manage your subscription.
To answer support requests.
To send you emails about your account and, if you've signed up, our newsletters and offers. Every marketing email has an unsubscribe link.
To understand how people use the Service and improve it, including testing new features with some users before releasing them to everyone.
To find and fix errors.
To generate assets for you in Create.
To show your company's name and logo in our marketing, if you're a business customer. You can ask us to stop at any time by emailing support@poliigon.com.
To prevent fraud, abuse of our fair use limits, and automated traffic.
To pay affiliates for customers they refer.
To meet our legal and tax obligations.

4. Legal basis (for users in the EU, UK and similar regions)

We process your information because:

we need it to provide the Service you signed up for (contract);
we have a legitimate interest in running, securing and improving the Service, as long as that doesn't override your rights;
you've agreed to it, for example when you sign up for marketing emails (consent); or
the law requires it, for example keeping billing records for tax.

5. Who we share it with

We share your personal information only with the service providers below, who process it for us to run the Service.

Hosting and delivery

Amazon Web Services : hosts our servers, databases and error monitoring (Germany, United States, Singapore), and delivers files through CloudFront (worldwide).
Vercel : hosts our website (Germany, United States, Singapore).
Cloudflare : delivers our website and images, blocks automated traffic and measures site performance (worldwide).
DigitalOcean : stores and delivers asset downloads (Germany, Netherlands).
Algolia : powers search (Australia, Brazil, Europe, Hong Kong, United Arab Emirates).
Meilisearch : powers search and online reverse image search (Germany).

Payments

Chargebee : manages subscriptions and invoices (European Union).
Stripe : processes card payments (United States).
PayPal : processes PayPal payments (see PayPal's privacy policy).

Analytics and product improvement

Mixpanel : product analytics (European Union).
Microsoft Clarity : session recordings and heat maps on our website (United States).
GrowthBook : feature testing (United States).

Communication and support

Intercom : support chat and help centre (United States).
Braze : account and marketing emails (United States).
Mailgun : account emails, such as login codes (United States).

AI generation

fal : generates assets in Create from your images and prompts (United States).
Google Gemini : generates assets in Create from your images and prompts, and matches images you upload to online reverse image search (United States).
OpenAI : generates assets in Create from your images and prompts (United States).

Other

Google : Sign in with Google (United States).
First Promoter : tracks affiliate referrals (United States).
YouTube : plays videos embedded on some pages (United States).

We may also share information if the law requires it, to protect our rights, or as part of a sale or merger of our business.

6. International transfers

Your information may be processed outside your country, including in the United States. Where we transfer information out of the EU or UK, we rely on the European Commission's standard contractual clauses or another lawful basis.

7. How long we keep it

We keep your account information for as long as your account is open. When you delete your account, we delete your personal information, except billing records, which we keep. If you use cloud sync, we delete your synced files 30 days after your Polydex Pro subscription ends.

8. Your rights

Depending on where you live, you can ask us to:

give you a copy of your information;
correct information that's wrong;
delete your information;
send your information to you or another company in a common format;
stop or limit how we use your information;
stop sending you marketing emails.

You can delete your account at any time from My Account > My Details > Delete Account. For anything else, email support@poliigon.com. We'll reply within one month, and we won't charge you.

If you're not happy with how we handle a request or complaint, you can contact your local data protection authority. In Australia, that's the Office of the Australian Information Commissioner .

9. Users in the United States

Residents of California and other US states with privacy laws can ask to know, correct or delete the personal information we hold about them. We don't sell or share your personal information, as those terms are defined under California law. To make a request, email support@poliigon.com. We'll confirm we've received it within 10 business days and reply within 45 days. We'll check your identity before acting on a request, and you can ask someone else to make a request for you. We won't treat you differently for using these rights.

10. Users in Brazil

Under the LGPD you have the rights listed above, plus the right to know who we share your information with and to complain to the ANPD. Email support@poliigon.com to use them.

11. Children

You must be at least 13 years old to use the Service. If you are under 18, you may only use the Service with a parent or guardian who agrees to our terms for you. You must be 18 or older to use Create.

12. Security

We protect your information in these ways:

All traffic between you and the Service is encrypted with HTTPS.
Our databases and file storage are encrypted at rest, and our databases can't be reached from the public internet.
You log in with a one-time code sent to your email, so there's no password to steal or reuse.
You enter card details in Stripe's or PayPal's secure payment fields. They go straight to the payment provider and never reach our servers.
Cloudflare screens traffic to our website and blocks automated and malicious requests.
Our staff use a private network (VPN) to reach our internal tools.
We keep as little as we need. Our own systems hold your name and email address. Your billing address, company name and VAT number are held by Chargebee, our billing provider.

If you think someone else has accessed your account, email support@poliigon.com straight away. If a data breach is likely to cause you serious harm, we'll tell you and the relevant regulator, as the law requires.

13. Cookies and local storage

Cookies are small files a website stores in your browser. We also use local storage, which works in a similar way. We use them to keep you logged in, remember your choices, run checkout, understand how the Service is used, and track affiliate referrals.

You can block or delete cookies in your browser settings. If you block essential cookies, logging in and checkout won't work. We don't respond to Do Not Track signals from browsers.

Essential cookies (set by Poliigon)

access_token : keeps you logged in. 1 year.
i18n_redirected : remembers your language. 1 year.
checkoutSubscriptionPlanID, checkoutSubscriptionplanItemPrice : remember the plan you picked at checkout. Until you close your browser.
checkout.billing-address, checkout.business-data : remember the billing and business details you entered at checkout. Until you close your browser.
couponCode : remembers a discount code you've applied. Until you close your browser.
polydexCheckout : marks a Polydex checkout. 1 hour.
platform : remembers which plugin or app sent you to the website. Until you close your browser.
ai_texture_cohort : remembers which features are available to your account. 1 hour.
siteWideBanner : remembers that you closed a site banner. Until the banner ends.

Essential cookies (set by Cloudflare)

__cf_bm, cf_clearance, _cfuvid : tell real visitors apart from automated traffic. Up to 1 year.

Support and sign-in cookies

intercom-id-*, intercom-device-id-*, intercom-session-* : run the Intercom support chat and remember your conversations. Up to 9 months.
Google : if you use Sign in with Google, Google sets its own cookies. See Google's privacy policy.
YouTube : pages with embedded videos load YouTube, which sets its own cookies. See Google's privacy policy.

Analytics cookies

mp_*_mixpanel : Mixpanel analytics. 1 year.
_clck, _clsk, CLID, MUID : Microsoft Clarity session recordings. _clsk lasts 1 day; the others last up to 1 year.

Affiliate cookies

referrer : remembers the affiliate who referred you. 30 days.
_fprom_tid, _fprom_ref, _fprom_details : First Promoter referral tracking. They last for the referral period set in our affiliate program.

Local storage

survey_page_visit_count, survey_asset_page_visit_count, survey_previous_locale : decide when to show you a short survey.
last_category : remembers the last category you browsed.
redirectAfterLogin : returns you to the page you were on after you log in.

Mixpanel, Intercom and GrowthBook also keep data in local storage to work.

14. Changes to this policy

We may update this policy. We'll post the new version on this page and change the date at the top. We'll tell you about significant changes before they take effect. We translate this policy automatically. If a translation differs from the English version, the English version applies.

15. Contact

Poliigon Pty Ltd (ACN 601 323 166), Suite 147, 42 Manilla St, East Brisbane, QLD 4169, Australia. Email: support@poliigon.com