Privacy Policy
This policy explains what information Pixl Site collects, why we collect it, where it lives, and the choices you have. We built the platform to need as little personal data as possible, and this document reflects that.
The short version
- Our analytics are cookieless and aggregate-only. We never build visitor profiles, never track people across sites, and never sell data.
- Content you or your visitors submit belongs to you. We host and process it on your behalf.
- Everything is stored on enterprise cloud infrastructure in the United States, encrypted in transit and at rest.
- You can request access, correction, export, or deletion of your data at any time.
01Who we are
Pixl Site is an AI-powered website platform for live events, operated by Pixl Events in the United States. We design, build, host, and manage websites for venues, festivals, and event businesses. This policy covers the pixlsite.ai website, the Pixl Site platform (including Pixl Studio and Pixl CMS), and the websites we host for our clients.
02The three ways you might interact with us
What we collect depends on who you are. There are three situations, and your rights differ slightly in each:
- You visit pixlsite.ai. We are the data controller. We collect the minimal analytics described below, and anything you choose to send us through our invitation form.
- You are part of a client team using Pixl CMS to manage a site. We are the data controller for your account information (name, email, and a securely hashed password).
- You visit a website we host for a client. The client is the data controller and we are the data processor. We host and process information on the client's behalf and on their instructions. Requests about your data on a client site should go to that business first; we support them in fulfilling every request.
03What we collect
Information you give us
- Invitation requests: the details you submit on pixlsite.ai, such as your name, email, company, and what you are building.
- Account details: name, email, and password (stored only as a secure cryptographic hash) for CMS team members.
- Form submissions on client sites: whatever a visitor chooses to submit, stored for the client who owns that site.
- Correspondence: emails you send us.
Information collected automatically
- Aggregate analytics as described in the next section. This is intentionally the smallest useful amount of data.
- Operational logs kept briefly by our infrastructure for security, debugging, and abuse prevention.
We do not collect payment card details on our platform. Ticket purchases on client sites are completed on the systems of the client's ticketing provider, under that provider's own privacy policy.
04Analytics, by design
We built our own analytics rather than installing a third-party tracker, specifically so we could make these promises:
- No cookies are used for analytics on published sites. There is no consent banner because there is nothing to consent to.
- Aggregate only. We store daily totals: page views, visits, referrers, countries, device types. We do not store a browsing history for any individual.
- No fingerprinting, no cross-site tracking. Unique visitors are estimated with a salted identifier that rotates every day and is discarded within days. It cannot be linked back to a person, and it cannot follow anyone from one site to another.
- Never sold, never shared for advertising. Analytics exist so site owners can understand their own traffic. That is their only purpose.
05How we use information
- To provide, operate, and secure the platform and the sites we host.
- To respond to invitation requests and support inquiries.
- To deliver form submissions and notifications to the clients who own them.
- To understand aggregate usage and improve the product.
- To meet legal obligations and prevent abuse.
We do not use your content or your visitors' personal information to train AI models, and we do not permit our AI service providers to do so with data processed through our platform.
06Where your data lives
Pixl Site runs on enterprise cloud infrastructure located in the United States:
- Hosting and delivery: Vercel's global edge network, so pages are served fast and reliably worldwide while origin data remains in the US.
- Databases: managed, encrypted PostgreSQL with per-site isolation. Every client site has its own database rather than sharing one.
- Media storage: Amazon Web Services (S3), encrypted at rest.
All traffic between visitors and our sites is encrypted with TLS, and certificates are provisioned and renewed automatically.
07Service providers
We use a small number of carefully chosen providers to run the platform. Each one processes only what its role requires:
| Provider | Role |
|---|---|
| Vercel | Hosting, edge delivery, and compute |
| Amazon Web Services | Media and file storage |
| Neon | Managed PostgreSQL databases |
| Anthropic | AI processing for site building and editing |
| Resend | Transactional email delivery |
Client sites may additionally connect to third-party services the client chooses, such as ticketing platforms or social media feeds. Those integrations operate under the client's agreements with those providers.
We never sell personal information, and we do not share it with data brokers or advertising networks.
08How long we keep things
| Data | Retention |
|---|---|
| Aggregate analytics | Up to 400 days of daily totals |
| Visitor estimation identifiers | Deleted within 3 days, rotated daily |
| Form submissions | Until the site owner deletes them or the site is closed |
| Site content and media | For the life of the site, plus a short recovery window after closure |
| Account records | For the life of the account |
| Operational logs | Days to weeks, per infrastructure provider defaults |
Version history of site content is retained so mistakes can be undone; it is removed when the associated site is permanently deleted.
09Security
- Encryption in transit (TLS) everywhere, and encryption at rest for databases and media storage.
- Per-site database isolation, so one client's data is structurally separated from another's.
- Passwords stored only as salted cryptographic hashes. We cannot read them.
- Role-based access inside the CMS, and continuous uptime monitoring with automatic alerting.
No system is perfectly secure, but if we ever become aware of a breach affecting your personal information, we will notify affected parties promptly and transparently.
10Your rights and choices
Wherever you are located, we extend the same baseline of rights:
- Access and export: ask us what we hold about you and receive a copy in a portable format.
- Correction: fix inaccurate information.
- Deletion: ask us to delete your personal information, subject to legal retention requirements.
- Objection: object to a specific use of your information.
If you are in a jurisdiction with specific privacy laws such as the GDPR or the CCPA, these rights apply as defined there, and we honor them. To exercise any right, email info@pixlevents.com. For data on a client's website, contact that business first; we assist them with every verified request.
11Cookies
We use almost none:
| Cookie | Where | Purpose |
|---|---|---|
| Session cookie | Pixl CMS only | Keeps team members signed in |
| Preference cookie | Pixl CMS only | Remembers which site you last managed |
Published websites we host do not set analytics or advertising cookies. If a client embeds a third-party service that sets its own cookies, that service's policy applies.
12Children
Pixl Site is a business platform and is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will delete it.
13Changes to this policy
When we change this policy, we will update the effective date at the top of this page. For material changes, we will notify clients directly. Continued use of the platform after a change takes effect means the updated policy applies.
Questions?
Pixl Site is a product of Pixl Events, our corporate umbrella company.
For more information about this policy and how we handle data, reach out to us directly at info@pixlevents.com. A real person reads every message.