Privacy Policy — Pixodash

01 / About this policy

This policy describes how Pixodash handles information through our public website, invited-beta dashboard, connected provider integrations, and support communications. It does not replace the privacy policies of providers you connect to Pixodash.

Questions about this policy or your information can be sent to info@pixodash.com.

02 / Information we handle

Account information: your email address and account records. Passwords are stored as Argon2 hashes, not as readable passwords.
Provider credentials: tokens or other credentials needed to access the accounts you connect. Stored provider tokens are encrypted.
Connected business data: imported orders, products, financial records, and business metrics available through your authorised provider connections. Depending on the integration, this can include customer and product display fields contained in those records.
Contact and support information: the name, email address, topic, and message you submit through our contact form, along with information you send in support correspondence.
Network and security information: information such as IP addresses, request details, browser or device information, and authentication or security events needed to operate the service and protect it from abuse.

Only connect accounts you are authorised to use. Avoid sending passwords, provider tokens, or unnecessary sensitive information in contact messages.

03 / How we use information

We use information to provide your account and dashboard, authenticate access, connect and synchronise provider data, calculate and display business metrics, answer enquiries, and provide support. We also use relevant information to maintain service reliability, investigate errors, prevent abuse, protect accounts, and meet applicable legal obligations.

We do not sell your personal information or connected business data.

04 / Services and sharing

Operating Pixodash involves other services. Information is handled by these services as needed for their role:

Connected providers: authorisation and API requests are exchanged with the services you choose to connect, subject to their permissions, terms, and privacy policies.
Optional AI analysis: when you connect OpenAI or Anthropic for analysis and request a briefing or answer, we send bounded dashboard aggregates and your question to the selected provider. Customer/order records, product names, source names and credentials are excluded from the analysis context; your typed question is sent as entered, so do not include secrets or personal details. AI connections are separate from usage-reporting integrations. The selected provider processes requests under its own policies and account terms.
VPS hosting: our hosting infrastructure runs the website, application, databases, and operational backups.
Cloudflare Turnstile: the contact form uses Turnstile to help distinguish legitimate submissions from automated abuse. Cloudflare processes network, browser, and challenge-related information for this purpose. See Cloudflare’s Privacy Policy.
SMTP2GO: contact-form messages are delivered through SMTP2GO, which processes message content and delivery information. See SMTP2GO’s Privacy Policy.

Information may also be disclosed where required by applicable law or where necessary to address fraud, security incidents, or legal claims. Third-party services may process information in countries other than your own; their policies describe their practices.

05 / Cookies and browser storage

The application uses browser session cookies to support sign-in and authenticated access. Browser storage is also used for demo state and preferences. The marketing website stores your animation preference in sessionStorage so that pausing animations can carry across pages during the same browser-tab session.

No advertising trackers are currently installed. Turnstile on the contact form performs its own security-related processing as described above.

You can manage cookies and site storage through your browser. Blocking or clearing them may sign you out, reset preferences, or prevent parts of the service from working.

06 / Retention and deletion

Different types of information have different retention needs. The dashboard’s display window is not a promise that all underlying data is erased at the same time.

Display metrics and business records: these use a 60-day retention window.
Financial lineage: refunds and eligible sale records are pruned after 400 days. A sale linked to a retained refund can remain longer so the refund keeps its reporting context. Customer and product display fields on sales older than 60 days are removed during scheduled pruning.
Accounts and provider credentials: account information supports your account while it remains active. Disconnecting a provider removes its stored credentials, but previously imported historical records remain until account deletion or scheduled pruning.
AI connections: API keys, subscription tokens and pending authorisation secrets are encrypted. Disconnecting AI removes local credentials and pending logins; account deletion also removes AI connection state. Revoke the provider grant separately where available. Pending login states expire after ten minutes and are pruned when new login flows start. PixoDash does not persist generated answers or questions; provider-side retention and existing backup retention still apply.
Backups: deleted information may remain in local backups until those backups expire under the seven-day local rotation. Deletion from active storage does not instantly erase an existing backup copy.
Email and support correspondence: messages are retained as needed to handle support, maintain relevant correspondence, and meet legal obligations. They do not follow the dashboard’s 60-day retention window.

Operational and security information is retained according to its purpose and applicable legal needs. Contact us if you need clarification about a particular record or deletion request.

07 / Your controls and rights

You can disconnect a provider from your account to remove its stored credentials and stop that connection from synchronising. Disconnecting is not the same as deleting previously imported data.

You can delete your account using the account-deletion control, which requires password confirmation. Account deletion removes the account and associated data from active storage, subject to the retention qualifications above, including backup rotation and separately retained support correspondence.

Depending on the law that applies to you, you may have rights to access, correct, delete, or receive a copy of personal information, or to object to or restrict certain processing. These rights can have conditions and exceptions. Send requests to info@pixodash.com; we may need to verify your identity and authority before acting. You may also have the right to complain to an appropriate privacy regulator.

08 / Security

Our safeguards include hashed account passwords, encrypted stored provider tokens, authenticated access, and controls against abusive requests. No online service, storage system, or transmission method can be guaranteed completely secure. If you suspect unauthorised access, contact us promptly and revoke affected credentials with the provider where appropriate.

09 / Updates and contact

We may update this policy as the service or our information-handling practices change. The date above identifies the latest version. Where applicable law requires additional notice, we will provide it.

For privacy questions or requests, email info@pixodash.com or use our contact page. Our Terms describe the conditions for using Pixodash.