Privacy Policy

This policy explains what information PixelClaw (“we”, “us”) collects when you use our website, the PixelClaw app and the blogs we host, what we do with it, and the choices you have.

1. Information We Collect

When you create an account, we collect your email address and a password, which is stored only in hashed form. When you use the Service, we collect the content you create (posts, pages, images and settings), the teammates you invite, and usage data such as pages visited and features used, including the events we need to count credits and apply plan limits. Our servers also log technical data such as IP address and browser type.

If you subscribe to a paid plan, our payment processor handles your payment information. We never store credit card numbers. If you connect your own AI provider key, we store it encrypted. If you connect Google Search Console, we receive search performance data for the sites you authorize.

2. Readers of Our Customers' Blogs

Our customers publish blogs with PixelClaw, on addresses we host or on their own sites. When you subscribe to or comment on one of those blogs, we process information on that customer's behalf: the email address you give (confirmed by a link we email you), the text of your comment, and a scrambled form of your IP address, which is stored to limit abuse. The owner of the blog decides how that information is used, so please contact them first with any request. Every newsletter email includes a link to unsubscribe.

We also count how often posts are read. When you view a post on a blog we host, we record which post was viewed, its address on the blog and when. We do not record your IP address, your browser or device, or any identifier, and we set no cookie for this. To stop one visitor inflating the count, a scrambled form of the IP address is held in memory for up to one minute and is never saved. These counts are kept with the blog's analytics until the blog is deleted. When a customer shows posts on their own site instead, that site may report views to us, including the address of the page and any details the customer chooses to send.

3. How We Use Your Information

We use your information to provide and improve the Service, publish your blog, send transactional emails (confirmations, password resets and important notices), process payments, prevent abuse, and analyze aggregate usage trends. We do not sell your personal data, and we do not use advertising trackers.

4. Super Intelligence Features and Your Content

When you use super intelligence features such as research, outlines, drafts, rewrites or one-click fixes, the relevant content and instructions are sent to an AI provider to generate a response. That is either a provider we hold an account with, or the provider whose key you connected, in which case the request runs on your account under that provider's terms. Research requests also read public web pages through a web-reading service.

We do not use your content to train AI models. AI providers handle the content they receive under their own terms and privacy policies. Do not include confidential or sensitive personal information in AI requests unless you are comfortable with it being processed this way. See our AI Disclaimer for the limits of AI output.

5. Data Storage & Security

Your data is stored in a managed database with encryption at rest and in transit. Each blog's content is kept separate from every other blog by access rules in the database. Sign-in sessions are managed with session cookies, and we use rate limiting and security headers to protect the Service. No system is perfectly secure, so we cannot guarantee absolute security.

6. Third-Party Services

We use service providers of the following kinds, and share information with them only as needed to run PixelClaw:

• Database, sign-in and file storage: holds your account, your content and your uploads.
• Payment processing: handles card payments and billing for paid plans.
• Application hosting: runs the PixelClaw application.
• Network delivery and security: delivers the site, protects it from abuse and manages domains.
• Email delivery: sends account emails, and the emails our customers send to their subscribers.
• AI model providers: process AI requests, when you use AI features.
• Web-reading service: reads public web pages for research.
• Search analytics: supplies search performance data, when you connect an account.

The current list of these providers, with what each one does, where it works and the safeguard that covers data from the EU and UK, is on our sub-processors page. We add a provider there and tell workspace owners at least 30 days before it handles personal data. Ask us at [email protected] if you have a question about any of them.

We may also disclose information when the law requires it, to protect our rights or the safety of others, or as part of a merger or sale of the business, in which case this policy continues to apply to it.

7. Cookies

We use essential cookies for sign-in session management and to protect sign-in and password reset. Our network and security provider may set cookies it needs to deliver the site safely. We do not use advertising or tracking cookies. On pixelclaw.ai a consent banner shows what is set and lets you change your choice at any time; it keeps your choice in your browser so it does not have to ask again. Blogs our customers publish with PixelClaw carry no banner because they set no such cookies.

8. Data Retention

We keep your information while your account is open. When you close your account or ask us to delete your data, we delete it, except for records we must keep for legal, tax or security reasons.

9. Your Rights

You can see and change most of your information in the app. You can request to access, correct, export or delete your personal data at any time by contacting us, or through the privacy request form on pixelclaw.ai. Account holders can download everything we keep about them from their Account page. Depending on where you live, you may have further rights, such as objecting to certain uses or complaining to your data protection authority.

10. International Transfers

Our database is in the United States, and we and our providers may process information in countries other than the one you live in. For information from the EU, EEA, UK and Switzerland we rely on the EU-US Data Privacy Framework where a provider is certified under it, and on the European Commission's Standard Contractual Clauses otherwise. Our sub-processors page says which applies to each provider and where your data is stored.

11. Children

The Service is not directed to children under 16, and we do not knowingly collect their information.

12. Changes to This Policy

If we change this policy we will update this page and the date at the top. If a change is significant, we will tell you by email or in the app before it takes effect.

13. Contact

For privacy-related questions, contact us at [email protected]. See also our Terms of Service.