Who we are. The Gemixx Design Studio (app.gemixx.com) is operated by Gemixx USA LLC and Gemixx Exports Private Limited ("Gemixx", "we"). Questions or requests about your personal information: security@gemixx.com.
Who this covers. People who use the Studio, usually employees of our business customers such as retail design, buying and sourcing teams, and people who open a share or selection link. Use of the Studio is also governed by our Terms of Service.
| Category | Examples | Source |
|---|---|---|
| Account | Name, work email, profile photo and sign-in identity (Google sign-in or email, through our sign-in provider Clerk) | You or your Google account |
| Profile | Role and team, asked once for some customer organisations | You |
| Usage and security | Sign-in sessions with IP address and device type (for example "Chrome on Windows"); pages and products opened; beads viewed; designs created, saved or deleted; renders and HD photos; downloads, prints, shares, selections and tech packs, with timestamps. Images shown to you carry an invisible code that links them to your account | Automatically |
| Your content | Designs and versions, collections, design requests, selections and inquiries, messages to Gemixx, and feedback (with an optional screenshot and recent activity in the Studio, attached to help us fix problems) | You |
| Voice and assistant | When you use Bea (design by talking), your speech clip and conversation are sent to our AI providers to be processed. We do not store the audio or the conversation, only that the assistant was used and the names of designs it proposed or you built | You |
| Terms acceptance | Version accepted, time, IP address and browser | Automatically |
| Unsaved work | A temporary copy kept in your own browser so you don't lose work | Your device |
We don't use advertising cookies or trackers. Cookies are used for sign-in and security only.
We do not sell or rent personal information, and we do not share it for cross-context behavioural advertising. We do not use your content to train AI models.
Activity history: 18 months. Audit and security logs: up to 24 months. Web server logs: 12 months. Designs: while your account is active. Terms acceptance records: for the life of the account plus 6 years. Feedback: as long as needed to address it. Deleted data may remain in our encrypted backups for up to 30 days (daily backups) or 12 months (monthly backups) before it is overwritten.
All traffic is encrypted (HTTPS). Backups are encrypted, access to designs and administration is controlled by role on our servers, administrative actions are recorded in a tamper-evident log, and we monitor the service and keep an incident response plan. No system is perfectly secure; if we learn of a breach affecting your personal information we will notify you and your organisation as the law requires.
We are based in the United States and India, and our providers mainly process data in the United States. Where the law requires, for example for data from the EU or UK, we use appropriate safeguards such as Standard Contractual Clauses.
Depending on where you live (for example under the GDPR or UK GDPR, the California Consumer Privacy Act, or India's Digital Personal Data Protection Act), you may have rights to access, correct, delete or get a copy of your personal data, to object to or restrict certain processing, and to appeal our decision. Email security@gemixx.com. We'll verify the request through your account email and respond within 30 days, or sooner if the law requires. Because the Studio is provided to your employer, we may coordinate with your organisation. We won't discriminate against you for exercising your rights, and you can also contact your local data protection authority. California residents may use an authorised agent. For India, our grievance contact is the same address.
For design content your organisation provides, Gemixx generally acts on your organisation's behalf; for account, security and Terms records, Gemixx decides how the data is used.
Bea and HD photos are optional: if you don't use them, nothing is sent to those AI providers. Text you type is screened for content safety.
The Studio is for business users aged 18 and over.
We'll post updates on this page with a new effective date and, for material changes, notify account holders.