Your Privacy, Our Promise
We believe your personal data deserves the same care we put into every story we help create. By joining plyx, you agree to the following:
plyx.ai is operated by the company Incremental AS ('we', 'us', 'our'). We are committed to protecting your personal data and handling it in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR). This statement constitutes our Privacy Notice and supersedes any separate privacy policy documents.
Incremental AS, Bankveien 21A, 1362 Hosle, Norway – organisation no. 930 227 672 – is the controller for the personal data collected through our website and subscription service.
- Identification data (name, email address, password hash)
- Purchase information (billing address, transaction IDs via Stripe)
- Usage data (IP address, browser metadata, pages visited)
- User‑provided images uploaded for AI image generation
- Cookie identifiers and analytics data (subject to consent)
- Account creation and authentication – Art. 6(1)(b) GDPR (contract)
- Payment processing – Art. 6(1)(b) GDPR (contract)
- Analytics and service improvement – Art. 6(1)(a) GDPR (consent)
- Marketing communications – Art. 6(1)(a) GDPR (consent)
- To generate stylised portrait images at your request using an external AI service (performance of a contract)
- Sending you your preview link when you ask for it (to carry out your request), and up to three reminders about that preview if you tick the box (your consent, which you can withdraw with one click).
We retain personal data for as long as your account is active or as needed to provide services, comply with legal obligations, or resolve disputes.
Photos you upload for a book are used only to create that book. We delete them automatically 30 days after your book is finished; copies in our backups are gone within a further 15 days. If you delete your account, your photos are deleted straight away. What stays is the book itself: the written description of the character and the illustrations made for it. Photos from orders that are never completed are deleted 30 days after upload.
We apply appropriate technical and organisational measures to safeguard personal data, including encryption in transit and at rest, access controls, regular security testing, and data minimisation.
Your personal data may be shared with trusted processors who provide essential services:
- Stripe Payments Europe, Ltd. (IE) – payment processing
- Google LLC (USA) – analytics (consent‑based)
- Meta Platforms Ireland Ltd. – advertising pixel (consent‑based)
- OpenAI (USA) generates text and images for your book. Your photo and your answers are sent to OpenAI's API for this purpose only. OpenAI does not use API data to train its models, and keeps it for up to 30 days for abuse monitoring unless the law requires longer. The transfer to the USA is covered under International Transfers below.
- Postmark (AC PM LLC, USA) sends our emails: order confirmations, your preview link and any reminders you asked for. It processes your email address and the content of those emails. The transfer to the USA is covered under International Transfers below.
All processors are bound by data‑processing agreements pursuant to Art. 28 GDPR and are required to maintain appropriate data‑protection and security measures.
Where we transfer personal data outside the EEA, we rely on adequacy decisions under Art. 45 GDPR or, for the United States, the European Commission's Standard Contractual Clauses (2021/914/EU) together with supplementary technical and organisational safeguards.
Your uploaded photos and the answers you give in the chat (OpenAI, LLC), and your email address and the emails we send you (Postmark, AC PM LLC), are transferred to the United States on the basis of the European Commission's Standard Contractual Clauses (2021/914/EU) and supplemented by risk assessments and technical safeguards such as encryption in transit.
You have the right to access, rectify, erase, restrict, or object to the processing of your personal data, and to data portability. You may also withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. To exercise any of these rights, please contact us.
You have the right to lodge a complaint with Datatilsynet (Norwegian Data Protection Authority) or your local supervisory authority.
We may update this statement from time to time. Significant changes will be communicated via email or prominent notice on the website. Last updated: 9 October 2026.
Questions, thoughts, or just want to say hello? We'd love to hear from you at [email protected].