Privacy Policy

1.Scope & Who We Are

Pixul LLC is the controller of personal information collected through the Service. This Policy describes practices for users worldwide and is supplemented by jurisdiction-specific disclosures for California, other U.S. states, and the EU/UK/EEA in the sections below.

This Policy does not apply to information you submit directly to third parties (for example, payment information you enter on Stripe’s checkout, or interactions with third-party websites you reach through links on the Board). Those third parties have their own privacy practices.

2.Information We Collect

We collect personal information directly from you, automatically when you use the Service, and from third parties (like our payment processor). The categories below describe what we collect, not necessarily every individual data point.

2.1 Information You Provide

Account information: email address, password (stored only as a hash), handle, display name, and any avatar or profile content you add.
Sweepstakes-eligibility information: at signup we collect your full name, your U.S. state of residence, and your phone number. These three fields are used only to (a) confirm your eligibility for any sweepstakes whose Official Rules limit entry to specific states, and (b) contact you for prize fulfillment if you are selected as a winner. They are not displayed on your public profile, are not shared with other users, and are not used for marketing or analytics. Access is limited to Pixul LLC personnel administering sweepstakes and to the service providers in Section 6 strictly as needed to store, back up, or transmit the data.
Block content: images you upload for your claimed Blocks, titles, captions, outbound URLs, color choices, and any community or creator association you select.
Subscription / billing metadata: the tier(s) you subscribe to, your billing cycle, and a payment-processor token plus billing metadata returned to us by Stripe (such as the last four digits of your card, card brand, billing country, and ZIP). Full payment card numbers and CVCs are collected and stored by Stripe, not by us.
Creator application information: if you apply to the Creator Program, the information you submit on the application form (platform, handle, audience size, links, notes).
Communications: the contents and metadata of emails or messages you send us, including support requests and reports about other users.
Sweepstakes / promotion entries: information you provide when entering a sweepstakes by paid or alternate means of entry (AMOE), including, for AMOE entries, what the Official Rules require.

2.2 Information Collected Automatically

Device & connection data: IP address, approximate location derived from IP, user agent, browser, operating system, language, screen size, timezone, and referring/exit URLs.
Usage data: pages and Board areas viewed, Blocks interacted with, clicks, scrolls, zoom level, claim flow events, search queries within the Service, and timestamps of these events.
Cookies & similar technologies: session and authentication identifiers, security tokens, preference cookies, and analytics cookies. See Section 7.
Logs: server logs of requests, error reports, performance metrics, and security-relevant events (such as failed logins).

2.3 Information from Third Parties

Payment processor (Stripe): billing status, subscription state, payment method metadata (not card number), risk signals, dispute notifications, and refund / chargeback events.
Email delivery provider: delivery, bounce, complaint, and open/click metadata for transactional and (where applicable) marketing email.
Referral data: if you arrived through a referral link, the handle of the referring creator and the referral mechanic’s metadata.
Fraud / abuse signals: reports from other users, third parties, or automated systems indicating potential violations of our Terms.

2.4 Sensitive Personal Information

We do not seek and try not to collect “sensitive personal information” as defined under California law and similar U.S. state laws (such as Social Security numbers, precise geolocation, health data, biometric data, or genetic data). If you voluntarily include sensitive data in an image, caption, or support message, we use that data only to provide the Service and respond to your request.

3.How We Use Information

We use the information described above to:

Provide, operate, render, and maintain the Service, including displaying Blocks on the Board, processing claims, syncing community state, and running sweepstakes mechanics.
Process subscriptions and payments, calculate prorations, manage renewals, and handle billing disputes and refunds.
Authenticate you, secure your account, prevent fraud and abuse, enforce rate limits, detect bots and scrapers, and otherwise protect the Service and our users.
Send you transactional communications (account verification, billing receipts, sweepstakes notices, security alerts, support replies, and other notices about your use of the Service).
Send you marketing or promotional communications where you have opted in or where permitted by applicable law. You can opt out at any time.
Moderate User Content under the rules in our Terms of Service, including reviewing reports and applying takedown, blur, downrank, or suspension actions.
Improve, test, and develop the Service: usage analysis, A/B testing, debugging, capacity planning, and feature research.
Personalize aspects of the Service (such as your default views, your territory map, or relevant communities), where doing so does not amount to profiling for legal-effect decisions.
Comply with legal obligations (tax, accounting, sweepstakes recordkeeping, responses to lawful requests, dispute resolution, and enforcement of our Terms).
Conduct corporate transactions such as a merger, acquisition, reorganization, or asset sale, including due diligence.

We do not use personal information to make decisions that produce legal or similarly significant effects about you without human review.

4.Legal Bases for Processing

Where the General Data Protection Regulation, the UK GDPR, or analogous laws apply, we process personal information on the following legal bases:

Performance of a contract — to provide the Service you have requested (including operating your account, processing payments, and delivering subscribed features).
Legitimate interests — to keep the Service secure, prevent fraud and abuse, improve and develop the Service, conduct analytics, and run the kind of communications most users expect from a service like ours. We balance these interests against your rights and freedoms.
Consent — for activities that require it under applicable law, such as certain marketing communications and non-essential cookies. You can withdraw consent at any time.
Legal obligation — to comply with applicable law, legal process, and government requests, and to meet our tax, accounting, and recordkeeping duties.

We do not sell personal information for money.

We disclose personal information only in the following circumstances:

Other users / public information. Your handle, display name, avatar, the Blocks you own, the images and captions you publish on those Blocks, the communities you join, your public profile page, and any leaderboard or social-network attributes of your activity are visible to other users and the public. Do not put information on a Block that you do not want to be public.
Service providers. Vendors we use to operate the Service process personal information on our behalf under contractual data-protection obligations. See Section 6.
Creators & communities you join. If you join a community, the creator of that community sees that you are a member and may see aggregate statistics about their community. We do not share your email address, billing data, or other private account data with creators.
Legal compliance & safety. We may disclose information when we believe in good faith that disclosure is required by law, legal process, or government request, or is necessary to enforce our Terms, protect the rights, property, or safety of Pixul, our users, or the public, or investigate fraud or other wrongdoing.
Business transfers. In connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of our business, personal information may be transferred to the acquiring or successor entity, subject to a privacy notice consistent with this Policy or to which we have obtained your consent if required.
With your consent or at your direction. We may share information for any purpose with your consent or where you direct us to.
Aggregated or de-identified data. We may share data that has been aggregated or de-identified so that it does not reasonably identify any individual (for example, total users, total claims, average revenue per block) for any business purpose.

6.Service Providers & Sub-Processors

We use the following categories of service providers (current as of the effective date; the specific vendors may change as our stack evolves):

Payments & subscription billing: Stripe, Inc.
Database, authentication, & file storage: Supabase, Inc.
Application hosting & edge network: Vercel, Inc. and Cloudflare, Inc.
Transactional email: Resend.
Error monitoring, observability, & analytics: performance monitoring and error-tracking providers used to maintain reliability.
Customer support: tools that route and store support correspondence.
Fraud prevention & abuse detection: tools that screen accounts, payments, and content for risk signals.

We choose service providers with reasonable security and privacy practices and contractually require them to process personal information only for the purposes we direct, consistent with this Policy.

7.Cookies & Tracking Technologies

We and our service providers use cookies, localStorage, sessionStorage, and similar technologies (collectively, “Cookies”) to operate the Service and to understand how it is used. We categorize Cookies as:

Strictly necessary: required to deliver the Service you requested (authentication, session management, security, fraud prevention, load balancing, CSRF protection). These cannot be disabled without breaking the Service.
Functional / preference: remember your settings, your default views, and other small preferences.
Analytics / performance: measure how users interact with the Service so we can improve it (pages viewed, performance metrics, error rates).
Advertising / cross-context behavioral: we do not currently set advertising or cross-context behavioral cookies. If this changes, we will update this Policy and provide an opt-out mechanism where required.

Most browsers let you control or block Cookies through browser settings. Blocking strictly-necessary Cookies will prevent you from logging in or using authenticated features. We honor opt-out preference signals where required by applicable law (see Section 18).

8.Analytics, Logs, & Telemetry

We use analytics and observability tooling to understand how the Service is used, diagnose errors, and measure performance. Analytics data is typically collected on a pseudonymous basis (associated with an anonymous identifier or hashed identifier rather than a direct identifier).

We log server requests, errors, and key application events. Logs are retained for a reasonable period (typically 30 to 180 days, depending on the log type and provider) for security, debugging, and capacity planning purposes.

9.Email & Other Communications

We send transactional emails relating to your account, your subscription, your sweepstakes participation, security events, and our legal notices. You cannot opt out of strictly transactional and legal emails while you have an active account, but you can close your account at any time.

Where we send marketing or promotional emails, we do so consistent with applicable law (CAN-SPAM, CASL, GDPR, etc.). Every marketing email contains an unsubscribe link, and you can also opt out by emailing founder@pixul.live. Opting out of marketing does not affect transactional or legal messages.

10.Data Retention

We retain personal information for as long as it is needed to provide the Service, comply with our legal obligations, resolve disputes, enforce our agreements, and protect against fraud and abuse. Specific retention practices:

Account data: kept while your account is active and for a reasonable period afterward to handle disputes, support requests, and routine backup cycles.
Subscription / billing records: retained for the period required by applicable tax, accounting, and consumer-protection law (typically several years).
Sweepstakes entry records: retained for the period required by applicable sweepstakes recordkeeping and prize-claim resolution rules.
User Content displayed publicly: retained while your subscription is active; remains in our systems for a reasonable backup window after deletion or subscription end.
Server logs: retained for security and operational purposes for the periods described in Section 8.
Communications: support correspondence and emails are retained as long as reasonably necessary to provide support and document our interactions.

When personal information is no longer needed, we delete it, anonymize it, or store it in archival form. Some information may persist in backups for a limited period before being overwritten.

11.Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, and destruction. Examples include encryption of data in transit (TLS), encryption of stored data at the database and storage layer through our infrastructure providers, password hashing, scoped access controls, audit logging, and security monitoring.

No system is completely secure. We cannot guarantee that personal information will never be accessed by unauthorized parties, and you use the Service at your own risk. You are responsible for keeping your account credentials secret and notifying us promptly of any suspected unauthorized access to your account.

12.International Data Transfers

The Service is operated from the United States, and our service providers are primarily located in the United States. If you access the Service from outside the United States, your personal information will be transferred to, processed in, and stored in the United States and potentially other countries where our service providers operate, which may have data-protection laws different from those in your jurisdiction.

Where required by law, we rely on appropriate safeguards for cross-border transfers, such as the Standard Contractual Clauses approved by the European Commission and the UK International Data Transfer Addendum.

13.Children's Privacy

The Service is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at founder@pixul.live and we will take steps to delete that information and terminate the account.

The Service also requires users to be at least 18 years of age (or the age of majority in your jurisdiction) to maintain an account, subscribe, or enter any sweepstakes, as described in our Terms of Service.

14.Your Rights & Choices

Regardless of where you live, you can exercise the following choices about your information:

Update your profile. Edit your account and profile information through your account settings.
Cancel your subscription. Cancel through your account settings or by emailing founder@pixul.live.
Close your account. Email founder@pixul.live from your account email to request deletion.
Opt out of marketing. Use the unsubscribe link in any marketing email or email us directly.
Cookies. Use your browser’s controls to manage Cookies. See Section 7.

Residents of certain jurisdictions have additional rights described in the next several sections. To exercise those rights, email founder@pixul.live with the subject line “Privacy Request” and tell us what right you wish to exercise. We may need to verify your identity before fulfilling certain requests; verification usually involves matching information you provide with information in our records and may require you to log in to your account. We will respond within the timeframes required by applicable law.

15.California Residents (CCPA / CPRA)

This section provides additional disclosures for California residents under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (the “CCPA”).

15.1 Notice at Collection

At or before collecting personal information, we provide notice of the categories collected and the purposes of collection. The categories of personal information we have collected about California residents in the preceding twelve (12) months are summarized below using the categories from Cal. Civ. Code § 1798.140:

Identifiers: name, email address, account handle, IP address, account ID.
Customer records (Cal. Civ. Code § 1798.80(e)): billing address (limited), payment method metadata returned by Stripe.
Commercial information: subscription tier, transactions, purchase history, and sweepstakes entries.
Internet / network activity: browsing within the Service, interactions with the Board, device and connection information.
Geolocation data: approximate (city-level) location inferred from IP address. We do not collect precise geolocation data.
Audio / visual / similar: images you upload to claimed Blocks or as your avatar.
Professional or employment information: only as you voluntarily provide it (for example, in a Creator Program application).
Inferences: limited inferences drawn from the above (for example, your favorite tier or whether you are a returning user).
Sensitive personal information: account login credentials.

15.2 Sources of Personal Information

We collect the information described in Section 2 directly from you, automatically through your use of the Service, and from our service providers and other third parties (such as our payment processor and our email delivery provider).

15.3 Business or Commercial Purposes

We collect and use personal information for the business and commercial purposes described in Section 3, including providing the Service, processing payments, securing the Service, communicating with you, complying with law, and improving the Service.

15.4 Disclosures of Personal Information

In the preceding twelve (12) months we have disclosed each category listed in Section 15.1 to the categories of recipients listed in Section 5 (service providers, other users where you have made content public, law enforcement / government requests, and parties to corporate transactions).

15.5 No Sale of Personal Information

We do not sell personal information for money. We do not knowingly “sell” or “share” personal information for cross-context behavioral advertising as those terms are defined under the CCPA. We do not have actual knowledge of selling or sharing the personal information of any consumer under 16 years of age.

15.6 Your CCPA Rights

California residents have the right to:

Know what personal information we have collected, the categories of sources, the business or commercial purposes for collection, and the categories of recipients with whom we have shared it.
Access the specific pieces of personal information we have collected about you.
Delete personal information we have collected from you, subject to legal exceptions.
Correct inaccurate personal information.
Opt out of sale or sharing of personal information. Because we do not sell or share personal information as defined under the CCPA, opting out has no operative effect today; if our practices change, we will provide a clear opt-out mechanism.
Limit use of sensitive personal information. Because we do not use sensitive personal information for purposes that trigger this right (such as inferring characteristics about you), the limit has no operative effect today.
Non-discrimination. We will not discriminate against you for exercising any CCPA right.

15.7 How to Submit a Request

Email founder@pixul.live with the subject line “California Privacy Request” and describe the right you wish to exercise. We will verify your identity in a manner consistent with the CCPA before responding. You may authorize an agent to act on your behalf by providing written, signed authorization; we will verify both your identity and the agent’s authority.

15.8 California “Shine the Light” (Cal. Civ. Code § 1798.83)

California residents who have an established business relationship with Pixul may request information about the personal information we have shared with third parties for their own direct marketing purposes during the prior calendar year. We do not currently share personal information for this purpose. Requests can be sent to founder@pixul.live.

15.9 Statutory Complaint Notice (Cal. Civ. Code § 1789.3)

California residents may direct complaints regarding the Service to Pixul LLC at founder@pixul.live, or to the Complaint Assistance Unit of the Division of Consumer Services of the California Department of Consumer Affairs in writing at 1625 North Market Blvd., Suite N 112, Sacramento, CA 95834, or by telephone at (800) 952-5210.

16.Other U.S. State Privacy Rights

Residents of certain other U.S. states, including Colorado, Connecticut, Delaware, Indiana, Iowa, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia, have rights similar to those described above for California residents, including some or all of the rights to access, correct, delete, obtain a copy of, and opt out of certain processing of personal information. Some of these laws also require opt-in consent for processing of sensitive personal information and provide a right to appeal a denied request.

To exercise rights available to you under your state’s law, email founder@pixul.live with the subject line “State Privacy Request” and identify your state of residence. We will respond within the timeframes required by applicable law. If we deny your request, you may appeal by replying to our response with the basis for your appeal.

17.EU / UK / EEA Residents (GDPR)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, the General Data Protection Regulation, the UK GDPR, and the Swiss Federal Act on Data Protection (as applicable) give you the following rights with respect to personal data we hold about you:

The right of access — obtain a copy of your personal data.
The right to rectification — correct inaccurate or incomplete personal data.
The right to erasure (“right to be forgotten”), in certain circumstances.
The right to restrict processing, in certain circumstances.
The right to object to processing based on legitimate interests and to direct marketing.
The right to data portability for data processed on the basis of consent or contract.
The right to withdraw consent at any time where processing is based on consent.
The right to lodge a complaint with your local data protection supervisory authority. We would appreciate the opportunity to address your concerns first by contacting founder@pixul.live.

For information about the legal bases on which we process your personal data, see Section 4. For information about international transfers and the safeguards we use, see Section 12.

18.Do Not Track & Global Privacy Control

Some browsers transmit “Do Not Track” (DNT) signals. There is no industry consensus on how to respond to DNT signals, and we do not currently respond to DNT signals.

Where required by applicable law, we honor the Global Privacy Control (GPC) signal as a valid opt-out of “sale” or “sharing” of personal information for purposes of the CCPA and similar state laws. Because we do not currently sell or share personal information as defined under those laws, the GPC signal has no additional operative effect today; if our practices change, GPC signals will be treated as opt-outs without further action required from you.

19.Third-Party Sites & Links

The Service contains links to third-party websites (such as outbound links on user Blocks, links to creators’ channels, and links to non-profits) and embedded content from third parties. Those third-party sites have their own privacy practices. We are not responsible for the content or privacy practices of any third-party site or service, and your use of them is governed by their privacy notices, not this one.

20.Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last Updated” date at the top of this page. If we make material changes, we will provide additional notice by posting a notice on the Service or emailing the address associated with your account. Your continued use of the Service after the effective date constitutes your acceptance of the updated Policy.

21.Contact

Questions, requests, or complaints about this Privacy Policy or our privacy practices? Contact us:

Pixul LLC
Attn: Privacy
2108 N St N
Sacramento, CA 95816
Email: founder@pixul.live

← Back to Board