OneClickRemix is a Chrome extension and web service that helps print-on-demand sellers create new product designs: it analyses an image you provide, proposes a creative prompt, generates image variants, upscales the chosen design, drafts store listing text, and — if you connect a print-on-demand partner — can create a product in your store. This policy explains what data we collect, why, how long we keep it, and your rights.
1. Who we are
OneClickRemix is a SaaS product operated by Print Your Travel, a micro-entreprise based in France. For the purposes of the GDPR, Print Your Travel acts as the data controller for personal data collected through oneclickremix.com and the OneClickRemix Chrome extension.
Privacy enquiries: privacy@oneclickremix.com
2. What data we collect
2.1 Chrome extension — your remix inputs
To run a remix, you provide the starting image yourself. The extension does not read your browsing history, other browser tabs, or marketplace listing pages.
- Starting image — a PNG, JPG, or WebP file from your device (upload, drag-and-drop, or clipboard), or a direct link to such a file. Product and listing page URLs are not accepted. If you provide an image URL, we fetch that file to process your remix.
- Optional context — product type, creative prompt, niche and style choices, and any listing title or tags you enter manually.
- Generated outputs — design analysis, image variants, upscaled image, and drafted listing text produced during your session.
- Your responsibility — you control the creative prompt, product and style choices, and which variant or listing you publish. You are responsible for ensuring that generated designs and listing text do not infringe on anyone's rights or trademarks before you publish or sell them (see our Terms of Service).
Starting images and generated content are sent to the OneClickRemix backend (a secure proxy) so we can call the AI and print services that perform the work. API keys for those services belong to OneClickRemix and are never stored in the extension.
2.2 Website, account, and waitlist
If you create an account on oneclickremix.com, sign in with Google or email and password, or join our waitlist, we collect and store:
- Email address — to log you in, send transactional emails, and operate your account.
- Password — if you sign up with email, stored as a secure one-way hash via Supabase Auth. We never see or store your raw password.
- Account identifier — a Supabase Auth user ID linked to your profile.
- Subscription and remix-credit status — plan name, credit balance, and usage limits (if you have a paid plan or trial credits).
- Usage events — a log of remix sessions and related actions (for example remix start, image generation, quality checks) to enforce quotas and improve the product. These records do not include your uploaded images.
- Waitlist data — email, signup date, and — if you unsubscribe — the date you opted out.
We do not sell this information.
2.3 Connected services
If you choose to connect a print-on-demand (POD) partner:
- your POD provider API key, store ID, and product template settings are stored encrypted on our servers (Supabase),
- when you create a POD product, your upscaled design image is sent to that provider’s API on your behalf, and
- you can disconnect a POD partner at any time from your account page, which deletes your stored POD credentials.
2.4 Billing
We do not collect or store your card details. All payment data is handled directly by Stripe, Inc., who are PCI-DSS Level 1 certified. We receive only a Stripe Customer ID, subscription status, and billing event metadata needed to operate your plan.
3. Legal basis for processing (GDPR)
We process your personal data under the following legal bases:
- Contract performance (Article 6(1)(b)) — processing your email, account, subscription, token balance, and POD partner connection is necessary to provide the service you signed up for.
- Legitimate interests (Article 6(1)(f)) — we log usage events and collect optional product feedback to operate quotas, prevent abuse, and improve OneClickRemix. This does not override your rights.
- Consent (Article 6(1)(a)) — where processing is based on consent, you may withdraw it at any time; for example, you may withdraw consent for non-essential cookies (see Cookie Policy).
4. How we use your data
We use your data exclusively to:
- provide and operate the OneClickRemix extension and website,
- authenticate your account and maintain your session,
- process your subscription payments via Stripe,
- enforce token balances and usage limits,
- send transactional emails (account confirmation, welcome, subscription updates, payment receipts, quota notifications, POD setup reminders, waitlist updates),
- create print-on-demand products when you request it,
- collect optional end-of-remix feedback, and
- respond to support and privacy requests.
We do not use your data for advertising. We do not sell your data to any third party. We do not profile you for automated decision-making.
Waitlist unsubscribe: waitlist emails include a link to opt out. You can also email privacy@oneclickremix.com to be removed from the waitlist.
5. Third-party processors
We share data only with the following trusted processors, each bound by their own data protection agreements:
- Supabase (supabase.com) — stores account data, subscription status, usage events, POD configuration (encrypted), and feedback. Servers are hosted in the United States.
- OpenAI (openai.com) — receives uploaded images and text context for design analysis, creative prompts, listing text, and some image generation. OpenAI does not use API inputs to train its models by default. See OpenAI’s privacy policy for details.
- Replicate (replicate.com) — receives the selected design image for upscaling to print resolution.
- fal.ai (fal.ai) — receives image-generation prompts and reference images. fal.ai may route requests to underlying image models as part of our multi-model pipeline.
- Google (Gemini API) (ai.google.dev) — receives image-generation prompts and reference images for variant generation.
- Print-on-demand partners — when you connect a POD provider, we send your API credentials (stored encrypted on our side) and design images to that provider when you create a product.
- Stripe (stripe.com) — processes all payments. Stripe stores your billing information.
- Resend (resend.com) — sends transactional emails on our behalf.
- Vercel (vercel.com) — hosts the OneClickRemix website and API. Vercel may process IP addresses in server logs.
- Google (sign-in) — if you choose “Continue with Google”, Google processes your sign-in according to its own privacy policy. We receive your email address and account identifier from Supabase Auth.
We do not use advertising networks, data brokers, or third-party tracking pixels. We do not use Google Analytics.
We may add or replace image models over time without changing the categories of processors listed above.
6. Local storage on your device
6.1 Chrome extension
During a remix in the Chrome extension, intermediate results are kept in
chrome.storage.local — a private storage area on your own
computer — so the flow can survive if the browser pauses the extension.
This includes the current step, generated image variants, the upscaled
image reference, and drafted listing text. By default, this local remix
state is retained for up to 48 hours of inactivity.
You can delete this local remix content at any time by removing the current design in the studio (the “×” button).
6.2 Web remix studio
When you use the remix studio at oneclickremix.com/remix-studio, remix progress is stored locally in your browser on your own device so you can recover your work after an accidental close or refresh. By default, this local remix state is retained for up to 48 hours of inactivity.
You can delete this local remix content at any time by removing the current design in the studio (the “×” button). We do not persist uploaded images on our servers after processing completes.
- Generated images are held as temporary data (or as a short-lived provider URL for the upscaled version) so you can preview and download them.
- These artifacts are automatically cleared when you start a new remix. They are not sent anywhere except to the processing services described above.
7. Chrome extension permissions
storage/unlimitedStorage— keep remix state and results on your device.sidePanel— show the OneClickRemix panel in Chrome.scripting/tabs— communicate with the OneClickRemix website when you connect your account or manage a print-on-demand partner.downloads— let you save generated designs.
8. What we do not do
- We do not sell, rent, or trade your data to anyone.
- We do not use your data for advertising or profiling.
- We do not track your browsing activity across websites.
- We do not scrape marketplace listing pages or monitor the shops and sites you visit.
9. Data retention
- Remix artifacts (device) — kept locally on your device for up to 48 hours of inactivity; also cleared when you remove the current design in the studio (the “×” button).
- Account data (email, hashed password, profile) — retained until you delete your account from your account page or by email.
- Account deletion — personal data is removed within 30 days; Stripe billing records may be retained as required by law.
- Usage events and feedback — retained while your account is active; deleted when your account is deleted.
- POD provider information — retained until you disconnect your print-on-demand provider or delete your account.
- Waitlist email — retained until you unsubscribe or request deletion.
- Stripe billing records — retained as required by applicable financial regulations (typically up to 6 years), managed by Stripe.
- Server logs (Vercel) — retained for up to 30 days.
- AI provider processing — content sent to OpenAI, Replicate, and other generation providers is retained only as long as needed to return your result, subject to each provider’s own retention policy.
When you delete your account (from your account page or by email), personal data held by us is permanently removed within 30 days, except where we must retain certain billing records for legal compliance.
10. Your rights under the GDPR
As a user in the European Union (or EEA), you have the following rights:
- Right of access — request a copy of the data we hold about you.
- Right to rectification — ask us to correct inaccurate data.
- Right to erasure — request deletion of your account and associated data.
- Right to restriction — ask us to limit how we process your data.
- Right to data portability — request your account data in a machine-readable format.
- Right to object — object to processing based on legitimate interests.
- Right to withdraw consent — where processing is based on consent, withdraw it at any time.
To exercise any of these rights, email privacy@oneclickremix.com. We will respond within 30 days.
If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority. In France, this is the CNIL (cnil.fr).
11. Cookies
We use cookies only for essential authentication on the website (session cookies set by Supabase Auth to keep you logged in). We do not use analytics or advertising cookies. For full details, see our Cookie Policy.
12. International data transfers
Some of our third-party processors (Supabase, OpenAI, Stripe, Vercel, Google, Replicate, and fal.ai) operate in the United States or outside the EU. These transfers are covered by appropriate safeguards — including Standard Contractual Clauses approved under EU law — so your data receives adequate protection regardless of where it is processed.
13. Children
OneClickRemix is a tool for online sellers and is not directed at children under 16. We do not knowingly collect personal data from anyone under 16. If you believe we have inadvertently collected data from a minor, contact us at privacy@oneclickremix.com and we will delete it.
14. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make significant changes, we will notify you by email or by displaying a prominent notice on the website. The “Last updated” date at the top of this page indicates when the policy was last revised. Continued use of OneClickRemix after any changes constitutes your acceptance of the updated policy.
15. Contact
Questions about this policy or your data? Contact us at privacy@oneclickremix.com. We aim to respond to all enquiries within 5 business days.