Pixelize CRM

Privacy Policy

Last updated: September 25, 2026

Pixelize Technologies (“we”, “our”, or “us”) values your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, and protect your information when you interact with our services, including WhatsApp Business communication.

1. Information We Collect

Personal Information: Name, email address, phone number, company details.
Location Information: With your permission, we collect location data only while the app is in use to support attendance verification, client check-ins, and field-work tracking. We do not collect location in the background.
Camera & Microphone: With your consent, the app may access your camera and microphone to attach photos and record voice notes.
Messages & Communications: Information you provide while communicating with us via WhatsApp, email, or other channels.
Usage Information: Data on how you use our services, such as interactions with our website or messages.
Facebook & Instagram data (only with your consent, when you connect an account): your Facebook profile (id, name, picture, email), the Facebook Pages and linked Instagram Business accounts you choose to manage, their access tokens, and the posts, comments, and engagement metrics of those Pages/accounts.

2. How We Use Your Information

Provide and improve our services.
Communicate with you regarding inquiries, updates, and support.
Comply with legal obligations and protect our rights.
Analyze usage to improve service quality.
Provide social media management features on the Facebook Pages and Instagram accounts you connect: publish and schedule posts, read and reply to comments, and show engagement analytics — only for the accounts you authorize.
Automatically create a CRM lead from a missed, rejected, or unanswered outgoing call, so your team can follow up — only for users who explicitly enable this in Profile settings.

3. Sharing of Information

We do not sell your personal information. We may share information:

With service providers who assist us in delivering our services.
When required by law or legal process.
In connection with business transfers, mergers, or acquisitions.

4. Data Security

We take reasonable measures to protect your information from unauthorized access, disclosure, alteration, or destruction.

OAuth tokens (e.g., Google, Facebook/Instagram) are encrypted at rest using AES-256-GCM, stored only on our servers, and never shared outside the app or logged.

5. Google User Data

When you sign in with Google or connect your Google account (such as Gmail or Google Calendar), Pixelize accesses only the data needed for the features you choose to use:

What we access: Your basic Google profile (name, email address, profile picture); if you connect Gmail, permission to send emails from your connected account (we do not read, store, or delete your Gmail messages); and if you connect Google Calendar, the ability to view, create, update, and delete the events you manage from the CRM.
How we use it: Profile data is used to sign you in and create your account. Gmail access is used only to send the emails you trigger inside the CRM, such as invitations and messages to your leads and customers. Calendar access is used only to schedule and sync meetings, follow-ups, and appointments with your leads and customers, so changes you make in the CRM appear in your Google Calendar.
Storage & security: Google OAuth tokens are encrypted at rest using AES-256-GCM, are used only to perform the actions you request, and are never logged or shared outside the app.
No AI or machine-learning use: Google user data is never sent to, shared with, or processed by any AI or machine-learning service, including our own AI features, and is never used to develop, improve, or train generalized or foundational AI/ML models.
No selling or advertising: We do not sell Google user data and do not use it for advertising.
No human access: Our staff do not read your Google data unless you give explicit permission, it is needed for security reasons, or it is required by law.
Sharing: We do not share Google user data with third parties, except service providers needed to run the service or when required by law.
Revoke & delete: You can disconnect Google at any time from the app's Settings → Google account section: we revoke our access at Google and permanently delete your stored Google tokens immediately. You can also revoke access at https://myaccount.google.com/permissions, or ask us to delete your Google data by emailing contact@pixelizetech.com or deleting your account (Profile → Account & Privacy → Delete Account); we complete those requests within 30 days. We keep Google tokens only while your Google account is connected. Events you create stay in your own Google Calendar under your control.

How we protect Google user data and other sensitive data:

Encryption in transit: All traffic between your browser or device, our servers, and Google APIs uses HTTPS (TLS 1.2 or higher).
Encryption at rest: OAuth access and refresh tokens are encrypted with AES-256-GCM before they are stored, in a private production database accessed only by the backend service that calls Google APIs. The encryption key is kept in server-side configuration, separate from the database.
Least privilege: We request only the Google permissions a feature needs, and only when you choose to connect that feature.
Access control: Production systems are reachable only by authorized engineers through authenticated access, and every API request is checked against your organization membership and role-based permissions.
No secrets in logs: Tokens and message contents are never written to application logs.
Server-side only: Google tokens stay on our servers and are never sent to your browser or to any third party.

Pixelize's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

6. Your Rights

Depending on your location, you may have the right to:

Access, correct, or delete your personal information.
Withdraw consent to our processing of your information.
Object to certain processing activities.
Disconnect Facebook/Instagram anytime in the app's Integrations page, or remove the app from your Facebook settings (Settings & privacy → Settings → Business integrations). Either action, and Facebook's data-deletion request flow, permanently deletes your connected account records, Page tokens, cached posts and comments, analytics, and ad data from our systems.
Turn off Call Log access anytime in Profile → Automation → "Auto-create leads from call log", or by revoking the Call Log permission in your device's app settings. Turning it off stops further collection immediately.

To exercise these rights, contact us at: contact@pixelizetech.com

We retain your personal information only for as long as your account is active or as required to provide our services and meet legal obligations. You can permanently delete your account and associated personal data at any time from within the app (Profile → Account & Privacy → Delete Account), or by contacting us. Once deleted, your login and profile information are removed from our systems. We retain connected-account data only as long as your account remains connected and as needed to provide the service. When you disconnect or request deletion, Facebook/Instagram data is deleted promptly.

7. Third-Party Services

Our services may include links to third-party websites or services. We are not responsible for the privacy practices of third parties.

8. Updates to This Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with the effective date revised.

9. Contact Us

If you have any questions about this Privacy Policy or our practices, contact us at:

Email: contact@pixelizetech.com