01 Information we receive
We receive the details you submit, such as your name, email, business or brokerage, chosen service, project message and scope information, review rating and text, optional order reference, and genuine-experience confirmation. Project questionnaires can contain content, images, branding, and project instructions. Stripe provides transaction-related information needed for fulfillment and records, such as payment status, receipt details, and customer details.
02 How we use information
We use information to respond to inquiries, scope and deliver work, manage payments and support, moderate and verify reviews, prevent abuse, maintain records, and meet applicable obligations. We do not sell your personal information. Do not submit passwords, full payment-card details, or sensitive personal information through the website’s public forms.
03 Public reviews and private fields
Approved reviews may display your display name, optional business name, service, rating, optional title, review body, date, manual Verified Customer badge, and Pixelalty’s response. Review email addresses, order references, and private moderation records are not returned by the public review API. Reviews initially enter a private moderation queue. We welcome positive and negative genuine feedback. Contact us if you need help correcting or removing information.
04 Service providers and payments
Supabase provides the review/inquiry database and administrator authentication. Stripe processes payments and card information on its checkout. Tally hosts the supplied post-payment website questionnaires. The static website is designed for GitHub Pages or another static host, which may process technical request logs. Instagram is an optional separate contact channel. Providers process information according to their own terms and privacy policies. The Pixelalty website does not collect raw card numbers.
05 Website storage and technical data
This site ships without advertising trackers, analytics scripts, or nonessential cookies. Public pages may contact Supabase to load reviews or send forms. We use temporary session storage for submission cooldowns. The administrator’s authentication session uses tab-scoped session storage; it is not used for visitor advertising. Hosting, payment, form, and authentication providers may process IP addresses, browser information, and security logs. The database uses a hash of the submitted email for basic submission rate limits. External sites may use their own cookies and storage.
06 Project production and sharing
Authorized project information and assets may be processed with development, design, hosting, and AI-assisted production tools as needed for the agreed service. Access should be limited to what the project requires. Do not provide confidential or regulated data without first agreeing on an appropriate handling method. We may disclose information when legally required or reasonably needed to protect rights and address abuse. We do not publish your project as a case study without permission.
07 Retention
We retain inquiries and project correspondence while needed to respond, provide service, resolve disputes, and maintain applicable business records. Transaction records may be retained for tax and accounting obligations. Approved reviews can remain visible until removed or no longer useful; hidden and pending reviews are retained only while reasonably needed for moderation or records. Submission rate-limit hashes are cleaned after seven days during subsequent submissions. Information may remain in provider backups until their retention cycles expire. Contact us to request review of stored information.
08 Security
We use access controls, database row-level security, limited public review fields, and mandatory two-factor authentication for administrator data access in the supplied implementation. No system is 100% secure. Stripe controls its payment-security environment. Keep your accounts and communications secure and avoid sending sensitive data through ordinary forms.
09 Your choices and requests
You can choose what optional information to provide. To ask about access, correction, removal, or another privacy right available under applicable law, use our contact page or message @pixelalty on Instagram. We may need to verify the request to protect your information. Some information may be retained when needed for legal obligations, disputes, or legitimate records.
10 Location, age, and updates
Providers may process data in locations other than your own. This site is intended for business customers and is not directed to children under 13. If you believe a child has supplied personal information, contact us. This notice reflects the supplied website and is updated when material practices change. Third-party pages have their own policies.