Privacy Policy

1. Introduction

PixPlat ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our digital menu platform and services.

By using PixPlat, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, password, company name, phone number
• Profile Information: Restaurant details, business information, preferences
• Menu Content: Dishes, images, descriptions, prices you upload
• Payment Information: Billing details (processed securely by third-party payment processors)
• Communication Data: Messages you send us through contact forms or support channels

2.2 Information from Google OAuth

When you sign in with Google, we collect:

• Email address: To create and manage your account
• Name: To personalize your experience
• Profile photo: For your account avatar (optional)
• Google User ID: To authenticate your account securely

We only request the minimum permissions necessary. We do NOT access your Google Drive, Gmail, or other Google services beyond basic profile information.

2.3 Automatically Collected Information

• Usage Data: Pages visited, features used, time spent, interactions
• Device Information: Browser type, operating system, device type, IP address
• Analytics Data: Menu views, QR code scans, customer feedback data
• Cookies: See our Cookie Policy for details

3. How We Use Your Information

We use your information to:

• Provide, maintain, and improve our services
• Create and manage your account
• Process payments and subscriptions
• Generate and host your digital menus
• Provide customer support and respond to inquiries
• Send important service updates and notifications
• Analyze usage patterns to improve user experience
• Detect and prevent fraud or unauthorized access
• Comply with legal obligations
• Send marketing communications (with your consent)

4. How We Share Your Information

We do NOT sell your personal information. We may share your information with:

• Service Providers: Cloud hosting (Vercel, AWS), database providers (Neon, Supabase), payment processors (Stripe)
• Analytics Partners: To understand usage patterns (anonymized data)
• Google: When you use Google OAuth, for authentication purposes only
• Legal Requirements: When required by law, court order, or government request
• Business Transfers: In connection with mergers, acquisitions, or asset sales

All third-party providers are contractually obligated to protect your data and use it only for specified purposes.

5. Data Security

We implement industry-standard security measures to protect your information:

• Encrypted data transmission (SSL/TLS)
• Secure password hashing (bcrypt)
• Regular security audits and updates
• Access controls and authentication
• Secure cloud infrastructure
• Regular backups and disaster recovery

However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

6. Your Rights (GDPR & CCPA)

You have the right to:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and data (see Data Deletion page)
• Portability: Export your data in a machine-readable format
• Restriction: Limit how we process your data
• Object: Object to certain types of processing
• Withdraw Consent: Revoke consent for marketing communications
• Opt-out: Unsubscribe from marketing emails

To exercise these rights, contact us at: privacy@pixplat.com

7. Data Retention

We retain your information for as long as your account is active or as needed to provide services. After account deletion, we may retain certain information for:

• Legal compliance (e.g., tax records, transaction history)
• Fraud prevention and security
• Resolving disputes
• Enforcing our agreements

Anonymized analytics data may be retained indefinitely for service improvement.

8. Cookies and Tracking

We use cookies and similar technologies to enhance your experience. For detailed information, see our Cookie Policy.

9. Third-Party Services

Our platform integrates with:

• Google OAuth: For authentication (governed by Google's Privacy Policy)
• Stripe: For payment processing (governed by Stripe's Privacy Policy)
• Vercel/AWS: For hosting and infrastructure
• Neon/Supabase: For database services

These services have their own privacy policies. We recommend reviewing them.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for international transfers, including Standard Contractual Clauses (SCCs) and Privacy Shield frameworks where applicable.

11. Children's Privacy

Our service is not intended for users under 18 years of age. We do not knowingly collect information from children. If you believe a child has provided us with personal information, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or a prominent notice on our website. Your continued use of PixPlat after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us: