This Privacy Policy explains what information Pixelesq, Inc. (“Pixelesq,” “we,” “us,” or “our”) collects about you, how we use and share it, and your rights and choices.

1. Introduction

We are committed to protecting your privacy and being transparent about our practices.

Pixelesq, Inc. provides an AI-powered platform and related services (including our website and products such as Magic Create, Magic Scale, and Magic Migrate) (collectively, the “Services”). This Privacy Policy describes how we collect, use, disclose, and protect personal information in the course of operating our Services. It also explains the choices you have and how you can exercise your rights regarding your personal information.

By using our Services, you agree to the collection and use of information as described in this Privacy Policy. If you do not agree, please do not use the Services.

2. Scope

In short: This Privacy Policy applies to all personal information we handle through your use of our Services. It does not cover third-party services that we do not control.

This Privacy Policy applies to personal information that we collect and process when you use our Services, which include our websites, web and mobile applications, application programming interfaces (APIs), and other online services we own or operate. It covers information collected when you create an account, use our products (including AI features), visit our website, or otherwise interact with us.

This Policy does not apply to any third-party websites, products, or services that you may access through our Services or to people that we do not manage. For example, if our Services contain links to other sites or you integrate third-party tools, those third parties’ privacy practices will govern any information you provide to them. We encourage you to review the privacy policies of any third-party services you use.

3. Information We Collect

In short: We collect information that you provide to us (e.g. account details, content you submit), information collected automatically (e.g. device and usage data), and information from third parties (e.g. if you log in via another service). The exact data collected depends on how you interact with our Services.

3.1 Information You Provide to Us

• Account and Contact Information: When you register or use our Services, we collect personal information such as your name, email address, phone number, mailing address, company name, job title, and any other information you provide. For example, when you create a Pixelesq account, we ask for your name and email. If you contact us for support or sign up for newsletters, you may provide contact information and the content of your communications.

• Profile and Content: You may also provide information when using the Services, such as a profile photo, bio, or other optional profile details. If you use our AI features or other tools, you might upload or input files, text, images, designs, or other data (“User Content”). For example, using Magic Create or Magic Scale may involve you uploading images or text for processing. We will collect whatever information you choose to provide in these contexts. User Content can include personal information if you include it in the content (for instance, names or faces in an image, or personal data within a document).

• Payment Information: If you make a purchase or subscribe to a paid plan, we (through our third-party payment processor) collect payment-related information. This may include your payment card number, expiration date, billing address, and other financial details. Important: We use Stripe, a third-party payment processor, to handle payment transactions. We do not receive or store your full credit card number or sensitive payment details; Stripe processes your payment information securely on our behalf. We may receive limited information related to your payment, such as a confirmation that you paid and the last four digits of your card, as needed for records and billing.

• Communications with Us: If you email us, fill out a form, or otherwise send us communications, we collect the information you provide. This includes feedback, survey responses, requests for support, or information you provide when participating in any interactive features (such as sending chat messages or comments, if applicable). We may also collect your preferences (for example, your preference to receive newsletters or marketing communications).

• Job Applicants: (If applicable) If you apply for a job with Pixelesq, we will collect the information you submit in your application (such as your resume, contact details, employment history, etc.). This Privacy Policy primarily covers our services for users; a separate privacy notice may apply to candidates and employees.

3.2 Information Collected Automatically

• Usage Data and Device Information: When you use our Services, we automatically collect certain information about your device and how you interact with our platform. This includes:

  • Technical Identifiers: like your IP address, unique device ID, cookie identifiers, and browser type.

  • Device and Network Information: such as your device’s operating system, mobile network, and hardware model.

  • Activity Data: details about how you use our Services, e.g., the pages or screens you visit, features you use (including which AI tools you engage with), the time and date of your visits, the referring page that led you to our site, and your interactions (such as clicks, scrolls, and mouse movements).

  • Log and Diagnostic Data: Our servers log information when you use the Services (known as log files), which can include the request date and time, feature use, app errors or crash reports, and other system diagnostics to help us troubleshoot and improve our Services.

We (and service providers acting on our behalf) use cookies and similar tracking technologies (such as web beacons and device identifiers) to collect and analyze some of this information. Cookies are small data files stored on your browser or device. They help us recognize you, remember your preferences, and understand usage of our Services. You can control or disable cookies through your browser settings; however, note that some parts of our Service might not function properly without cookies.

3.3 Information from Third Parties

We may obtain information about you from other sources in the following situations:

• Third-Party Integrations: If you choose to connect our Services to a third-party account (for example, if we allow “Sign in with Google” or integrate with a third-party service), we will receive certain information from that third party, such as your name and email from your Google profile. We only receive information that you authorize the third party to share with us.

• Service Providers and Partners: We may receive information from vendors and partners who help us with various aspects of our business. For example, analytics providers may give us aggregated insights, or marketing partners might provide us with your contact information if you gave consent to be referred to our Services.

• Other Users: If our Services include collaborative features, other users of our Services might provide information about you. For instance, if another user invites you to our platform or shares content with you through our Services, we may collect your email or other contact details from that user to facilitate the collaboration.

• Publicly Available Sources: We might also collect information that is publicly available. For example, we could collect public professional profile information (such as your LinkedIn profile information) for marketing and outreach purposes, or if you mention our product on a public platform.

We will treat any information gathered from third parties according to this Privacy Policy, plus any additional restrictions imposed by the source of the data.

4. How We Use Your Information

In short: We use personal information to operate and improve our Services, to communicate with you, to serve and secure our platform (including via AI features), to process payments, for marketing (with your consent), and to comply with legal obligations. We only process personal data when we have a valid legal reason to do so (such as fulfilling a contract, pursuing legitimate interests, or with your consent).

We use the personal information we collect for the following purposes:

• To Provide and Maintain the Services: We use your information to create and manage your account, authenticate you when you log in, and deliver the features of our platform. For example, we use account and User Content information so you can create designs or use our Magic Create, Magic Scale, and Magic Migrate tools. When you use an AI feature, we process your Input (defined as the data or content you submit) to generate the Output (the result produced by the AI) and return it to you. Your information is used to ensure the Services function as intended.

• To Personalize and Improve the Services: We analyze how users interact with our Services to understand what is working and what can be improved. Usage Data and device information help us troubleshoot issues, optimize user experience, and develop new features. For instance, understanding which features are most used helps us focus development efforts. We may also use your information to customize your experience, such as remembering your preferences or settings.

• To Communicate with You: We use contact information (like your email or phone number) to send you service-related communications. This includes confirmations, billing receipts, technical notices, updates, security alerts, and administrative messages. We may also respond to your inquiries or support requests. If you subscribe to our newsletter or marketing emails, we will use your information to send you promotional content about new features, products, or offers, but you can opt out of marketing communications at any time (see Your Choices below).

• For Payments and Transactions: We use personal information to process payments and collect fees. For example, we use payment and contact details to charge for paid subscriptions or purchases and to detect and prevent fraudulent transactions.

• To Enable AI Features: When you use our AI Features (like Magic Create or other AI-powered tools), we use your Input data to generate Outputs. We may also temporarily store your Input and Output as necessary to provide the service or to enhance these features (for example, to debug issues or improve the quality of results). By default, we do not use your User Content to train or improve our AI models without your permission. (See Your Choices below for how you can control this.) Our use of AI is designed to operate on your behalf and under your control.

• Security and Fraud Prevention: We process certain information to maintain the security of our Services and users. For example, we may use device and usage information to detect, investigate, and prevent fraudulent transactions, spam, abuse, security incidents, and other harmful activities. If we detect threats or unauthorized access, we might use and share relevant information to mitigate the issue.

• Compliance with Law: We may use your information as required to comply with applicable laws, regulations, legal processes, or governmental requests. For example, we might retain and disclose certain data to fulfill our financial, tax, or reporting obligations, or respond to lawful requests by public authorities.

• To Enforce Our Rights: We may use data to enforce our Terms of Service and other legal terms, to investigate potential violations, and to protect our rights and the rights of our users or others. This can include using information to resolve disputes, collect debts, or defend ourselves in legal proceedings.

• With Your Consent: If we ever process your personal information for a purpose that requires consent, we will ask for your consent at that time. For instance, if we want to use your testimonial or have you participate in a new use of data, we would obtain your consent. You have the right to withdraw your consent at any time, as described below.

Legal Bases for Processing (for users in the EU/UK and similar jurisdictions)

For those in the European Economic Area, United Kingdom, and other regions with data protection laws, we only use your personal information when we have a valid “legal basis” to do so. The legal bases on which we rely include:

• Performance of a Contract: We need to process your data to provide the Services you requested – for example, using your information to set up your account, process payments, or generate AI outputs at your request. This applies when we have a contractual obligation to you (such as our Terms of Service).

• Legitimate Interests: We process data for our legitimate interests (or those of a third party) in running our business and improving our Services, except where those interests are overridden by your data protection rights. For example, it’s in our legitimate interest to analyze usage of our platform to improve functionality and security, and to send you service announcements. We always consider and balance any potential impact on you and your rights before processing for our legitimate interests.

• Consent: In some cases, we rely on your consent. For instance, we will obtain your consent to send marketing emails where required by law, or to use certain cookies and tracking technologies. When consent is our legal basis, you can withdraw it any time (which will not affect processing already occurred).

• Legal Obligation: We have to process certain information to comply with legal obligations, such as maintaining records for tax and accounting purposes or responding to valid legal requests (e.g., subpoenas or court orders).

• Protecting Vital Interests: Though unlikely, we may process personal data if necessary to protect someone’s life or safety (vital interests), or for a task carried out in the public interest, but these bases are rarely applicable in the context of our Services.

If you have questions about the legal bases or want more detail on how we balance interests, you can contact us at the email provided in the Contact section below.

5. How We Share or Disclose Information

In short: We do not sell your personal information. We share information in limited situations, primarily to operate our Services and as required by law. This includes sharing with service providers who perform tasks for us (under strict obligations), with your direction or consent (e.g., when using integrations or making content public), and if necessary for business transfers, legal compliance, or protecting rights.

We may disclose (share) personal information to the following types of recipients and for the following reasons:

• Service Providers (Processors): We use trusted third-party companies to help us operate and improve our Services – for example, cloud hosting providers, data analytics services, email delivery services, customer support tools, and payment processors like Stripe. These service providers act on our behalf and are contractually obligated to use your information only to provide services to us (not for their own purposes) and to protect it. They can only access personal data as needed to perform their functions and must keep it confidential and secure.

• Business Partners and Integrations: If you connect our Service to third-party services (for instance, if an integration allows you to export a design to another platform, or you ask us to share data with another app), we will share information with those parties at your direction. Similarly, if we offer co-sponsored events or promotions, we might share registration info with the partner, but we will do so only as allowed and with notice to you.

• Other Users and the Public: Content that you choose to make public or share: If the Services enable you to share User Content or collaborate with others (for example, sharing a design or an AI-generated output with a team or making a project public), those individuals or the public will be able to see the information you include. We will display your username or other profile info next to content you publish or share, as applicable. We do not make your private content public unless you direct us to do so.

• Affiliates: Pixelesq, Inc. is presently a single corporate entity. If we in the future have subsidiaries, parent company, or affiliates under common ownership, we may share your information within that corporate family, in which case we will ensure that those entities honor this Privacy Policy.

• Legal and Compliance: We may disclose your information if we believe in good faith that such disclosure is necessary to (a) comply with any applicable law, regulation, legal process, or government request (such as a court order or subpoena); (b) enforce our Terms of Service or other agreements; (c) protect the rights, property, or safety of Pixelesq, our users, or the public (for example, to report suspected illegal activity or address fraud/security issues); or (d) defend against legal claims or exercise our legal rights.

• Business Transfers: If Pixelesq is involved in a merger, acquisition, financing due diligence, reorganization, bankruptcy, receivership, sale of company assets, or transition of service to another provider, your information may be disclosed or transferred as part of that transaction. We would ensure that any successor entity honors the commitments in this Privacy Policy or provides you notice and opportunity to opt-out of the transfer of your personal information.

• With Your Consent: We may share your personal information for other purposes if you consent to it. For instance, if you consent to our posting of a user testimonial with your name, or if you opt in to share data with a third-party service not otherwise described here, we will share accordingly. You have the right to withdraw such consent at any time.

No Sale of Personal Information: We do not sell your personal data to third parties for money. We also do not share your personal data with third parties for cross-context behavioral advertising purposes without your authorization. (See also “California Privacy Notice” below for more information on how we handle these concepts under California law.)

6. International Data Transfers

In short: We are a U.S.-based company, and your data may be transferred to and stored in the United States or other countries. When we transfer personal information from regions with data protection laws (like the EU, UK, etc.) to another country, we use legal safeguards (such as Standard Contractual Clauses or Data Privacy Framework certification) to protect your information.

Pixelesq, Inc. is headquartered in the United States. If you are located outside the U.S., your personal information will likely be transferred to and processed in the United States or other jurisdictions where our service providers are located. These countries may have data protection laws that are different from (and in some cases less protective than) the laws of your country.

However, when we transfer personal information internationally, we take steps to ensure that appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable laws. For example:

• If you are in the European Economic Area (EEA), United Kingdom, or Switzerland, we rely on approved transfer mechanisms such as the European Commission’s Standard Contractual Clauses (SCCs) to transfer your data to the U.S. and other countries. These contractual clauses obligate the recipient to protect personal data according to EU standards.

• Pixelesq may also participate in frameworks like the EU-U.S. Data Privacy Framework and the Swiss-U.S. Data Privacy Framework once applicable, to ensure lawful and secure transfer of personal information from those regions to the U.S.

• We will comply with applicable legal requirements providing adequate protection for the transfer of personal data, and we’ll monitor developments and implement new measures as needed if legal standards for international data transfer evolve.

You can contact us for more information about the safeguards we have in place for cross-border transfers of personal data.

7. Your Choices

In short: You have choices about your data. For example, you can opt out of marketing emails and control certain privacy settings in your account (such as whether your content is used to improve our AI). You can also adjust cookie preferences in your browser.

• Account Information: You can access, correct, or update much of your basic account information by logging into your Pixelesq account and editing your profile or settings. Please keep your information up to date. If you need assistance changing or correcting information that you cannot modify yourself, you may contact us at our support email.

• Opt-Out of Marketing Communications: If you no longer want to receive promotional or newsletter emails from us, you can opt out at any time by clicking the “unsubscribe” link in those emails or by adjusting your email preferences in your account settings (if available). Note that you will still receive transactional or service-related emails (such as account notifications, password resets, security alerts, and billing info) even if you opt out of marketing messages, as those are necessary for us to provide our Services.

• AI Model Training (Content Use) Settings: We provide you with a choice regarding whether your User Content is used to improve our AI models. By default, we do not use your content for model training or improvements. In your account settings, you may find a toggle or option to “Allow my content to be used to improve AI” (or similar wording). If you choose to opt in and enable that setting, you are giving us permission to use your Input, Outputs, and User Content to further train, test, and enhance our AI algorithms and features. You can change this setting at any time. If you opt in and later opt out, we will stop using new data from your account for training, and you can contact us if you wish to request deletion of any previously provided content from our training sets. (Note: we never use personal information from opt-out accounts to train third-party models, and any training use is strictly to improve our own Services as described.)

• Cookies & Tracking: As noted earlier, you can control or disable cookies through your web browser’s settings. You can also use browser extensions or device settings to block or alert you about tracking technologies. Keep in mind that disabling certain cookies might affect the functionality of our site. For information on specific cookies and choices (like an opt-out for interest-based advertising cookies), you may refer to our Cookie Notice (if available) or contact us.

• Do Not Track: “Do Not Track” (DNT) is a setting in some web browsers that you can enable to signal your preference regarding tracking by advertisers and other third-parties. Currently, there is no consistent industry standard for DNT signals, and our Services do not respond to DNT browser settings. We treat the data of all users in accordance with this Privacy Policy and will update our practices if an official standard for DNT is established.

• Declining to Provide Information: You have the choice not to provide certain personal information. However, please note that if you choose not to provide information that is necessary to provide a feature of the Service (for example, not providing an email for account creation, or not providing content for the AI to process), you may not be able to use that feature or the Service at all.

8. Your Privacy Rights

In short: Depending on where you live, you may have rights to access, correct, or delete your personal data, or to get a copy, or to restrict or object to certain processing, and to withdraw consent. Pixelesq respects these rights and provides tools or processes for you to exercise them. These rights may vary depending on your location, but we extend key privacy rights to all users where feasible.

Depending on your jurisdiction (for example, if you are in the EU, UK, California, or certain other U.S. states), you may have some or all of the following rights regarding your personal information:

• Access and Portability: You have the right to request confirmation whether we are processing personal information about you, and to obtain a copy of the personal information we hold about you. For data portability, you can request an electronic copy of the information you have provided to us in a structured, commonly used, machine-readable format, and you can ask us to transmit that information to another service provider where technically feasible.

• Correction (Rectification): You have the right to request that we correct or update any inaccurate or incomplete personal information we hold about you. Where possible, we provide self-service tools (like account profile editing) so you can correct much of your information. For any details you cannot change, contact us to request correction.

• Deletion (Erasure): You have the right to request that we delete your personal information, subject to certain exceptions. This includes the ability to delete your entire account (which will remove your profile information and content from our active systems). Do note that if you request deletion of information that is essential to the Services (e.g., information needed to maintain your account), you may need to cancel your account to fulfill this request. We will honor deletion requests to the extent required by law, but we might retain some information if necessary for legal obligations or our legitimate interests (see Data Retention below).

• Restriction of Processing: You have the right to ask that we limit the processing of your personal information in certain circumstances – for instance, if you contest the accuracy of the data or object to us processing it, we will review your request and inform you how the restriction might impact your use of the Services.

• Objection to Processing: You may have the right to object to our processing of your personal information when such processing is based on our legitimate interests or for direct marketing purposes. For example, you can request that we stop processing your data for certain analytics or personalization purposes based on our legitimate interest. If you object to direct marketing, we will stop sending you marketing communications (as described above).

• Withdraw Consent: If we are processing your personal information based on your consent, you have the right to withdraw that consent at any time. For example, you can withdraw your consent to receive marketing emails or to use of your data for AI training (if you had opted in). Withdrawal of consent will not affect the lawfulness of any processing done before you withdrew, and it may take a short time to fully implement.

• Appeal: In certain regions (for instance, some U.S. states like Colorado or Virginia), if we deny your request related to these rights, you may have the right to appeal our decision. We will inform you of how to appeal if you request a right and are dissatisfied with our response, when required by law.

To exercise any of your rights above, please contact us at the email or physical address listed in the Contact Us section of this Policy. We may need to verify your identity (for example, by confirming access to your email address or asking for additional information) before fulfilling your request, to protect your security and ensure we don’t disclose data to the wrong person. Only you or an authorized agent acting on your behalf may make a request related to your personal information. If you use an authorized agent, we may require proof of that authorization.

We will respond to your request within the time frame required by law (for example, typically within 30-45 days). If we need more time, we will inform you of the reason and extension period. There may be situations where we cannot fulfill a request, such as if disclosure would adversely affect the rights of others or if you request deletion of information that we are legally required to keep. But we will explain any denial or limitation of a request.

Finally, if you have an unresolved concern, you may have the right to lodge a complaint with a data protection authority or regulator. For EU/UK individuals, this would be your local Supervisory Authority or the lead authority in the country of our EU representative. For example, in the UK you can contact the Information Commissioner’s Office (ICO). In California, you can contact the California Attorney General’s office. We would, however, appreciate the chance to address your concerns first, so we invite you to contact us with any complaint.

9. Supplemental Notice for California Residents

In short: If you are a California resident, California law (CCPA/CPRA) provides you with specific rights regarding your personal information. This section outlines the categories of personal information we collect, the purposes for which we use it, the categories of third parties with whom we share it, and your rights to access, delete, or opt-out of certain uses of your information. We do not sell your personal information.

This supplemental notice applies solely to individuals who reside in California. It describes how we collect, use, and share “personal information” of California consumers (as defined under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, together referred to here as “CCPA”).

Categories of Personal Information Collected: In the past 12 months, we have collected the following categories of personal information about California consumers:

• Identifiers: Such as name, email address, mailing address, phone number, account username, and IP address.

• Personal Information under California Customer Records law (Cal. Civ. Code § 1798.80(e)): This includes some information that overlaps with the above, like name, contact information, and payment card numbers (though full payment details are processed by our payment processor as noted).

• Protected Classifications: (Only if voluntarily provided by the user) For example, if you optionally provide information that reveals characteristics of protected classifications under California or federal law, such as age, gender, or race (we do not specifically ask for this except maybe age for eligibility).

• Commercial Information: Records of products or services purchased or considered, such as subscription plan selections, transaction history, and related payment information (like subscription tier, purchase date, etc.).

• Internet or Other Electronic Network Activity: As described earlier, we gather information about how you interact with our website and apps, including browsing history on our site, search history within our app, and usage data, cookies, and interactions with our emails.

• Geolocation Data: General location information inferred from your IP address (e.g., city or region). We do not precisely track your GPS location, but we may know your general location to tailor content (such as language or regional pricing).

• Audio, Electronic, Visual, or Similar Information: If you participate in a support call, webinar, or if you voluntarily use a feature that involves audio or video (for example, an audio input feature in an AI tool, or you upload images), we might process that audio or visual information. We do not monitor or record audio/visual content without notice. Calls to customer support may be recorded with notice for training and quality purposes.

• Professional or Employment-related Information: If you provide your employer or company name, job title, or industry when signing up or using our business features, or if you are using an enterprise account provided by your employer, we may have that information. Also, if you apply for a job with us, we collect employment background info (though that is covered by a separate privacy notice).

• Inferences: We may draw inferences from your usage of the Services to create a profile reflecting your preferences, characteristics, or behavior on our platform (e.g., inferring what features you might be interested in based on your usage). We do not create profiles about you for use in providing targeted advertising without your consent, but we do use data to personalize your experience and develop our services.

Sources of Personal Information: We collect these categories of personal information from the sources described in Section 3 above. In summary, we collect information directly from you (e.g., when you sign up or input content), automatically through your use of our Services (e.g., via cookies and logs), and from third parties or integrations you connect.

Business or Commercial Purposes for Collection: We collect and use the above personal information for the business and commercial purposes described in Section 4 of this Policy. Those purposes include providing the Services, supporting internal operations, improving and developing products, communicating with you, customizing content, security and fraud prevention, and legal compliance.

Disclosure of Personal Information: In the last 12 months, we have disclosed the following categories of personal information for our business or operational purposes, with the categories of recipients indicated in parentheses:

• Identifiers – disclosed to service providers (like cloud hosting, email service, payment processor) and, if you choose, to other users (e.g., when you share content).

• Customer Records Information – disclosed to our payment processor (Stripe) and other service providers as needed for services (e.g., our mailing/shipping partner if we ever ship something to you).

• Commercial Information – disclosed to service providers (e.g., our billing and analytics providers).

• Internet/Network Activity – disclosed to analytics and security service providers that help us troubleshoot and improve our Services.

• Geolocation Data – disclosed to service providers (e.g., content delivery networks that use location to route you to nearest server).

• Audio/Visual Data – if any, disclosed to service providers that facilitate those communications (e.g., teleconference providers or AI processing services for audio input).

• Professional Information – if provided, disclosed to service providers (like a CRM tool or if we verify employment for eligibility of a business plan).

• Inferences – used internally for our own analysis; not routinely disclosed externally except in aggregated form or to service providers assisting with analytics.

We disclose personal information to “service providers” and “contractors” (as defined by CCPA) pursuant to written contracts that prohibit them from retaining, using, or disclosing the personal information for any purpose other than the specific purpose of performing services on our behalf.

Sale or Sharing of Personal Information: Pixelesq does not sell personal information (as “sell” is defined under CCPA, meaning sharing it with third parties for money). We also do not share personal information for cross-context behavioral advertising in the sense of providing it to third-party ad networks to target you on other sites. We may use third-party analytics cookies on our site that could be considered a “sharing” of identifiers and internet activity for advertising or analytics – however, at present our use of cookies is limited to functional and analytic purposes. We do not currently engage in cross-context behavioral advertising targeting California residents. If that changes, we will update this policy and provide a “Do Not Sell or Share” mechanism.

Because we do not sell or share personal information of California residents (and certainly do not have actual knowledge of selling or sharing personal information of minors under 16), the opt-out rights for sale/sharing are not applicable except in the context of analytics cookies which you can manage via your browser or future cookie preference tools we may provide.

California Privacy Rights: If you are a California resident, you have the rights outlined in Section 8 (“Your Privacy Rights”), including the right to know what personal information we have collected about you, to access it, to request deletion (subject to exceptions), to correct inaccurate personal information, to opt out of sales/sharing (as noted, not applicable because we do not sell/share except as described), and to limit use of sensitive personal information (also generally not applicable, as we only use sensitive info like payment or account login for necessary purposes). You also have the right not to receive discriminatory treatment for exercising any of these rights.

To exercise your California rights, you (or an authorized agent acting on your behalf) can send us a request as described in Your Privacy Rights section or via the Contact details below. We will verify and respond as required by CCPA.

Sensitive Personal Information: Under California law, certain data elements are considered “sensitive personal information” (SPI), such as account log-in with password, payment card information, precise geolocation, racial or ethnic origin, health information, etc. We do not use or disclose sensitive personal information for purposes that California residents have a right to limit. Specifically, we only use sensitive data that we collect (e.g., a login password, payment card info via Stripe, or any demographic info you choose to give us) for providing the Services you requested, preventing fraud, ensuring security, or other purposes that are deemed “expected” by the consumer and not for inferring characteristics about you or showing ads. Because our use of SPI is limited to those necessary purposes, the CCPA right to limit use of SPI is not applicable to our practices.

For more details on our privacy practices, California residents may refer to the full Privacy Policy above. If you have questions or concerns about our handling of your personal information or this California notice, please contact us.

10. Notice for Nevada Residents

In short: Nevada law allows customers to opt out of certain types of personal data sales. We don’t sell your data, but Nevada residents can still contact us to formally request to opt out of any future sale.

If you are a Nevada resident, you have the right to direct us not to sell certain personal information (as defined under Nevada law) to third parties. We do not currently sell personal information as defined in Nevada law. If that ever changes, we will update this Policy. If you still wish to ensure we have noted your preference, you (or your authorized representative) may email us at hello@pixelesq.com with the subject line “Nevada Do Not Sell Request” and include your name and account email. We will make sure to record your preference and not sell your personal data.

11. Children’s Privacy

In short: Our Services are not intended for children under 13 (or under 16 in certain regions). We do not knowingly collect personal information from children without parental consent. If you believe we have inadvertently collected a child’s data, let us know so we can delete it.

Pixelesq’s Services are designed for business and general audience use and are not directed to children. You must be old enough to consent to the processing of your personal data in your country (which is typically at least 13 years old, and in many jurisdictions like California and most of Europe, at least 16 years old) to use our Services. We do not knowingly solicit or collect personal information from children under 13 (or under the applicable age threshold if higher in your region) without legally valid parental consent. If a child under 13 (or applicable age) has provided us with personal information, we will take steps to delete such information as soon as possible.

Parents or guardians: If you become aware that your child has provided us with personal information without your consent, please contact us at hello@pixelesq.com. We will promptly remove the information and terminate the child’s account if one exists.

12. Data Security

In short: We use strong security measures to protect your data and keep it secure. However, no system is 100% secure, so we cannot guarantee absolute security. We also need your help: keep your credentials safe and notify us of any suspected unauthorized access.

We implement reasonable and appropriate technical and organizational security measures to safeguard personal information against loss, theft, misuse, unauthorized access, disclosure, alteration, and destruction. These measures include encryption of data in transit (e.g., using HTTPS for our website) and at rest, regular security audits, access controls limiting which of our employees can access personal data, and security training for our staff. We also utilize firewalls, intrusion detection systems, and anonymization/pseudonymization techniques where suitable.

Despite our efforts, no security measure or method of data transmission over the Internet can be guaranteed to be perfectly secure. We cannot warrant the absolute security of any information you send to us or store on our servers, so you use our Services at your own risk. In the event of a data breach that affects your personal information, we will act promptly to mitigate the harm and notify you and/or the appropriate authorities as required by law.

To further protect yourself, please choose a strong password for your Pixelesq account and do not share it. Also, be sure to secure access to your devices and application to prevent unauthorized use. If you believe your account or personal information is at risk (for example, if you suspect that your account has been compromised), please contact us immediately.

13. Data Retention

In short: We keep your personal information only as long as needed for the purposes it was collected, or as required by law. We then either delete it or anonymize it. How long we keep data depends on the type of data and our legal obligations.

We retain personal information for as long as reasonably necessary to fulfill the purposes for which it was collected, as described in this Policy, or for such longer period as may be required or permitted by law. The precise retention periods depend on the nature of the information and why it is needed. For example:

• We keep your account profile information and content while you maintain an account with us, since it’s needed to operate your account. If you delete your account or request deletion, we will initiate deletion of that information from our active systems, unless we need to keep it for legal reasons.

• We may retain certain transaction records, communications, and other information for accounting, auditing, and legal compliance purposes (typically 7 years for financial records in the US, for instance).

• Logs and analytics data are generally retained for a shorter period unless used for security analysis or Service improvement.

• If you applied for a job, we may retain your application as long as allowed by law or internal policy (unless you ask us to delete it sooner, in jurisdictions where that is required).

When we have no ongoing legitimate business need or legal obligation to retain your personal information, we will either delete it or anonymize/de-identify it (so that it can no longer be associated with you). If deletion (or anonymization) is not immediately feasible (for example, because your data is stored in secure backups), we will isolate and secure it and schedule it for deletion as soon as possible.

Please note that if you request deletion of your data, we will also delete your account because we need certain information to provide and maintain your account. Once deleted, your account and data generally cannot be recovered (this includes your User Content stored on the Services), so please back up any content you wish to keep before requesting account deletion.

14. Third-Party Websites and Services

In short: If you follow links to other websites or services, those are outside our control. Read their privacy policies; we’re not responsible for them.

The Services may, from time to time, contain links to other websites, products, or services that are not operated by Pixelesq (for example, a link to an external resource, or integration with a third-party tool that you choose to enable). If you click on a third-party link or enable a third-party integration, you will be directed to that third party’s environment. The fact that we link to or integrate with a third party’s service is not an endorsement or representation that we own or control that service, and this Privacy Policy does not apply to any personal information collected by third parties.

Third-party services have their own privacy policies (and terms of use), which we strongly suggest you review. We have no control over and assume no responsibility for the content, privacy policies, or practices of any linked third-party websites or services. If you have any concerns about how those third parties treat your data, you should contact them directly.

15. Changes to this Privacy Policy

In short: We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. If we make material changes, we will notify you (for example, via email or a notice on our site) as required by law. The effective date at the top indicates when the latest changes were made.

Pixelesq may modify or update this Privacy Policy periodically. If we make any material changes, we will provide prominent notice, such as by emailing you at the email address we have on file or by posting a notice on our website or in the app prior to the change becoming effective. We indicate the effective date of the current policy at the top of the policy.

Any changes will be effective when they are posted, unless a later effective date is specified. Your continued use of the Services after any changes come into effect constitutes acceptance of the revised Privacy Policy. If you do not agree with a change, you should stop using the Services and can request that we delete your personal information.

We encourage you to review this Privacy Policy periodically to stay informed about our data practices and how we are protecting your information.

16. Contact Us

In short: If you have questions or want to exercise your rights, please reach out to us. We’re here to help.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, you can contact us using the details below. We will do our best to address your inquiry promptly.

Pixelesq, Inc.

2261 Market Street, STE 22811

San Francisco, CA 94114, USA

Email: hello@pixelesq.com

Phone: +1-650-668-5759

For privacy-specific inquiries or requests (such as data access or deletion requests), please include “Privacy Request” in the subject line of your email, and provide enough information for us to verify your identity.

If you are located in the European Economic Area or United Kingdom and have questions regarding your data, you may also reach out to us at the above contact. (As a growing company, we may appoint an EU or UK representative or Data Protection Officer in the future, and will update this Policy accordingly with their contact information if so.)

We value your privacy and will respond as soon as reasonably possible to address your concerns or fulfill your requests.