1. Controller
Pixel Factory. Privacy contact: privacidad@pixelfactory.gt; you can also write to us via WhatsApp at +502 3007-5046.
2. The framework we apply
Guatemala does not yet have a general personal data protection law. We apply the principles of informational self-determination recognized by the Constitutional Court (Corte de Constitucionalidad) and international standards. If you live in a country with its own law, we also apply what that law requires (section 11).
3. What data we process and why
| Where | Data | What for |
|---|---|---|
| Account | Name, email, password (stored encrypted by our authentication provider), profile photo and line of business (if you add them), language, time zone, two-step verification; if you sign in with Google, the name and email of your Google account | Create and protect your account |
| Site with your session open | Your name, profile photo and the tools you have subscribed to, which www.pixelfactory.gt requests from your account | Show them to you in the site menu. The site does not store them or send them to third parties, and analytics does not record them |
| Business and billing | Trade name, country, NIT (if you give it to us for invoicing), payment history, cash or transfer receipts you upload | Charge, invoice and reconcile payments |
| Service and invoicing | Notes on what you need, our conversations with you, your billing details (name or legal name, NIT, tax address and invoicing email) and the invoices we issue to you | Serve you, invoice you and send you your invoices |
| Card payments | Name, email, NIT and amount. Card details are received directly by our payment processor; we do not store them | Process payments and subscriptions |
| Development projects | Deliverables, approvals, change requests, tickets and attachments; the permission you give us to access your site and the log of each access | Develop your project and provide you with support |
| PixelMaker | Your site’s content and images, domain, mailboxes you create, your store’s products and orders, messages received by your site’s forms | Provide the service to you. For the data of your own customers we act as processors (section 9) |
| PixelMaker usage | The days and times you open PixelMaker, the time you spend editing, how many changes you make by type (texts, images, sections, styles and pages) and when you publish. We do not store what you type or record your screen | Support you: see how your site is progressing, offer help if you get stuck and improve PixelMaker. To help you, our team can view your site, published or in draft, read-only |
| Maker AI | The instructions and content you send to the AI, and the usage log | Generate content and measure your plan’s usage |
| Maker Analytics (if you subscribe) | Your site’s Search Console metrics, the read-only permission you give us in Google (stored encrypted), your site’s key phrases, the general visibility questions and their results | Show you how people find you on Google and in AI assistants, alert you to important changes and send you a monthly report. You can withdraw the permission at any time |
| Alianzas | Contact details (first name, last name, position and email), business details (name, address, sector, activity, Google Maps link, description, history, hours, phone, WhatsApp, site, social media, logo and images), tracking code and referrals | Verify your business and publish its listing. The contact’s personal data is not published |
| PixelMaker free trial | A code calculated with a secret key from your email address, and another from card details that our payment processor gives us (network, bank, last 4 digits and expiration date). We do not store those details in plain form | Prevent the same person, email address or card from using the free trial more than once |
| Invitations | Your email address, whether we invited you as a beta tester or as a customer, the plan we assigned to you and the date; or your email address and the site, if the owner of a PixelMaker site invites you as a collaborator | Send you the invitation and prepare your account or your access to the site. If you do not accept it, it expires and we delete it |
| Beta program | The “Beta tester” label, its end date if it has one, and the plan, billing frequency and currency we assigned to you | Give you access at no cost while it lasts and move you to that plan when it ends |
| Referral program | Your referral code; if you created your account from someone’s link, who referred you; the days you earn or that are removed, and the payment that produced them | Give you the days you earn and prevent abuse. We only show the person who referred you that they earned days, never your data or your payments |
| Security | Truncated IP address, browser (user-agent) and date and time of your acceptances; technical logs | Prevent fraud and abuse, and prove what you accepted |
| Abuse reports | If you report a site published with PixelMaker: its address, the reason, the details you write, your email address if you give it to us and a code calculated with a secret key from your IP address, which does not allow it to be recovered | Review the report, reply to you and detect mass reports |
| Contact | What you write to us via WhatsApp or email, or when booking a meeting | Reply to you |
| Analytics (only if you accept it) | Aggregate browsing (Google Analytics) and interactions and session recordings with form fields masked (Microsoft Clarity) on www.pixelfactory.gt and alianzas.pixelfactory.gt | Improve the sites |
We do not ask for health data or other sensitive data.
4. We do not sell your data
We do not sell, transfer or share your data for advertising. We only disclose it to the providers in section 5, to provide the service to you; to the Tax Administration Superintendency (Superintendencia de Administración Tributaria, SAT), to issue your electronic invoices; or when a competent authority orders it.
5. Providers that process data on our behalf
| Provider | Function | Region |
|---|---|---|
| Cloud hosting | Hosting of the account and of Alianzas | U.S. |
| Artificial intelligence gateway | Routes to the model provider the Maker AI requests and the text that is reviewed before it is published | U.S. |
| Database and authentication | Database, authentication and files | U.S. |
| Distributed network hosting | Hosting of the site and of PixelMaker sites, DNS, bot protection, media and cookieless statistics | Distributed network |
| Email delivery | Service emails | U.S. |
| Card payment processor | Card payments and subscriptions | Guatemala |
| Artificial intelligence | Artificial intelligence for Maker AI, Maker AI Pro and Maker Analytics | U.S. |
| Web search | Searching the web for Maker Analytics’ general visibility questions, without personal data | U.S. |
| AI infrastructure for review (two providers) | Run, one at a time and in order of preference, the model that reviews the text to be published on PixelMaker, without retaining it or using it to train models | U.S. |
| AI infrastructure for Maker AI (three providers) | Run the Maker AI model, one at a time and in order of preference, without retaining what you send or using it to train models | U.S. |
| AI infrastructure for Maker AI Pro (three providers) | Run the Maker AI Pro model, one at a time and in order of preference, without retaining what you send or using it to train models | U.S. |
| Image and link review | Automatically reviews the images and links to be published on PixelMaker | U.S. |
| Corporate email | Corporate email and PixelMaker mailboxes | U.S. |
| Meeting scheduling | The meetings you book with us | U.S. |
| Sign-in with Google, Google Search Console (if you connect Maker Analytics) and Google Analytics (with consent) | U.S. | |
| Microsoft | Microsoft Clarity (with consent) | U.S. |
| Messages you send us via WhatsApp | U.S. |
For invoicing, we issue electronic invoices on the SAT portal with your name, your NIT and the amount.
The updated list is in Subprocessors.
6. International transfers
Several providers are in the United States. When the law of your country requires it, we rely on the contractual safeguards those providers offer, such as standard contractual clauses.
7. How long we keep it
We keep your account while it is active. If you cancel it, we keep it for 30 days so you can export your data and then we delete it. Proof of acceptance and of payments is kept for 5 years; access and audit logs, for 2 years; and the invoices we issue to you and their copies, for the period required by tax law. Service notes (what you need and our conversations with you) are kept while you are a client and for 2 years afterwards.
The free trial codes are kept for 2 years from the start of the trial, even if you delete your account, so that the trial is not repeated. An invitation is kept until you accept it or it expires; after that we delete it. Referral program data is kept as long as your account exists, and the day entries tied to a payment, for 5 years, like proof of payments.
PixelMaker site forms are kept as long as the site exists, and you can export them before then. Maker Analytics metrics are kept for up to 16 months (the same period Search Console keeps) and AI visibility metrics for 13; if you cancel Maker Analytics, we withdraw the Google permission and delete those metrics 30 days later. For abuse reports, we keep the reporter’s email address and the code of their IP for 180 days after the report is closed. Reviews of what is published are kept as long as the site exists. The PixelMaker usage log is kept for 13 months.
8. Your rights
You can request access, rectification, erasure or objection, restrict processing, request the portability of your data and withdraw consent whenever you want. Write to privacidad@pixelfactory.gt from your account email. We reply within the period set by the applicable law; in the European Union, one month.
9. Data of our customers’ customers
When a PixelMaker customer receives messages, orders or data from its visitors on its site, that customer is the controller and Pixel Factory acts as processor, under the Data processing agreement. If you are a visitor to one of those sites, exercise your rights with the site owner. If you cannot find them, write to us and we will forward your request to them.
10. Security
We apply reasonable technical and organizational measures, among others: encrypted connections, isolation of each business’s data in the database, mandatory two-step verification for the administrator, access logging and limits against abuse.
No system is infallible. If an incident occurs that affects your data, we will notify you without undue delay. More information in Security.
11. If you live in other countries
If you live in the European Union or the United Kingdom, we process your data to perform the contract (account and services), for legitimate interest (security, fraud prevention, moderation and the PixelMaker usage log to support you, which you can object to by writing to privacidad@pixelfactory.gt), with your consent (analytics) and to comply with legal obligations (invoicing), and you can lodge a complaint with your data protection authority.
If you live in the United States, we do not sell or share your data for behavioral advertising, and we honor the Global Privacy Control signal as a rejection of analytics.
If you live in Mexico, we do not process sensitive data. The purposes in section 3 are those necessary for the service; if we add a new purpose, we will ask for your consent.
If you live in El Salvador, Costa Rica or another country with a data law, we apply their rights (including ARCO rights) through the same channel.
12. Minors
Our services are for people over 18 years of age. If you believe a minor gave us their data, write to us and we will delete it.
13. Changes
If we change this policy materially, we will notify you by email and in your account before the change applies. If a purpose changes, we will ask for your consent.
14. Contact
In Guatemala, the Spanish version of this document prevails.
Last updated: October 23, 2026.