It forms part of the Terms of service and applies when Pixel Factory processes personal data on behalf of a customer.
1. Parties and roles
You, the customer, are the controller: you decide what data you collect and why. Pixel Factory is the processor: it processes the data only to provide the service to you.
2. Subject matter
Hosting and serving your PixelMaker site and your store, receiving your site’s forms, managing the mailboxes you create, processing content with the AI when you use it, accessing your site with your permission in development projects, and counting your site’s visits without cookies.
3. Data and data subjects
The data subjects are visitors to your site and your customers. The data is what your site collects, such as name, contact details, messages, orders and delivery address. You must not collect sensitive data without a legal basis and without informing the data subjects. To count visits we use technical data from each visit (the page, where it comes from, the approximate country and city, the type of device and the language) and we summarize it by day without storing the IP address.
4. Duration
For as long as the service lasts, plus the 30 days for export after cancellation.
5. Our obligations
We process the data only according to your instructions, which are these terms and the settings you choose in your account. We maintain confidentiality: only those who need it to provide the service have access. We apply the security measures in the annex.
We use only the subprocessors on the public list. We give 30 days’ notice before adding a new one; if you object on reasonable grounds, you can cancel without penalty.
We help you respond to data subjects’ requests; if one reaches us, we forward it to you. We notify you of a security breach affecting your data within a maximum of 48 hours from when we become aware of it, with what happened, the data affected and the measures taken.
On termination, we allow you to export the data for 30 days and then we delete it; if you ask, we confirm the deletion to you in writing. We also give you the reasonable information you need to demonstrate compliance with this agreement.
6. Your obligations
You must have a legal basis for the data you collect and publish on your site your identification details and your own privacy policy. You must also comply with the laws of your country that apply to you; for example, registration with PRODHAB in Costa Rica, if your database is commercial, or the data protection officer in El Salvador.
7. International transfers
The data is hosted in the United States and on our hosting provider’s distributed network. When the law requires it, we rely on each provider’s contractual safeguards.
8. Liability
We are liable for breach of our obligations under this agreement, subject to the limit in the Terms of service. That limit does not apply in cases of willful misconduct or gross negligence.
Annex: security measures
We use encrypted connections and isolate each business’s data in the database. Two-step verification is mandatory for the Pixel Factory administrator. Pixel Factory’s access to customer sites is recorded in an append-only log, visible to the customer. We apply rate limits against abuse, bot protection on public forms and a prior review of published content. Published sites do not set Pixel Factory cookies.
Last updated: October 21, 2026.