Privacy Policy

1. Introduction

This Privacy Policy describes how Pixelwand Studio Private Limited ("Pixelwand", "we", "us", or "our") collects, uses, and protects information in connection with the Pixelwand CRM platform and related services ("Service").

2. Information We Collect

2.1 Information You Provide Directly

When you complete a web form on our website or a website powered by Pixelwand CRM, we may collect:

• Full name
• Email address
• Phone number (mobile)
• Company name and job title
• Any additional information you voluntarily provide in the form
• Your consent to receive SMS communications and the date and time of that consent

2.2 Information Collected Automatically

When you visit our website, we automatically collect certain technical information including:

• IP address and approximate geographic location
• Browser type and version
• Device type and operating system
• Pages visited and time spent on pages
• Referring URL
• Date and time of your visit

2.3 SMS Communication Data

When you receive or send SMS messages through our platform, we collect:

• Your mobile phone number
• Message content and delivery status
• Date and time of messages sent and received
• Opt-in and opt-out records with timestamps

2.4 Google Account and Workspace Data

If you choose to connect your Google account (Gmail and/or Google Calendar), we access the following Google user data, strictly limited to the scopes you approve on the Google OAuth consent screen:

• Basic account information: your Google account name, email address, and basic profile information (non-sensitive openid, userinfo.email, and userinfo.profile scopes), used to identify which account you connected and to sign you in when you use Google sign-in.
• Gmail messages: email headers, bodies, and attachment data for the account you connect (restricted gmail.readonly scope), used to display your mail in the CRM inbox, plus permission to send only the messages you compose in the CRM ( gmail.send scope). These scopes do not allow us to change read or unread state, move messages to Trash, or permanently delete them.
• Calendar data: calendar events including titles, descriptions, times, and attendees for the calendars you select (sensitive https://www.googleapis.com/auth/calendar scope), used only for two-way sync between Google Calendar and the CRM calendar.
• OAuth tokens: access and refresh tokens issued by Google for the scopes above, stored encrypted and used only to maintain the connections you enabled.

Connecting a Google account is optional. We only request these scopes after you explicitly start the connection flow (for example, Settings → Email accounts → Connect with Google or Settings → Google Calendar → Connect account), and you can revoke access at any time as described in Section 4.

3. How We Use Your Information

We use the information we collect for the following purposes:

4. Google API Data (Gmail & Calendar Integration)

4.1 Scopes we request and why

The Google OAuth consent screen always shows the exact scopes requested. We request:

4.2 How Google data is used and stored

• Use is limited to user-enabled features. Gmail data is used only to show your mail in the CRM inbox, link it to the relevant lead or contact, and send mail you author. Calendar data is used only to sync events between the selected Google calendar and the CRM calendar.
• Synced copies live in your CRM workspace. Incoming mail synced from Gmail is stored as communication records linked to your leads; synced calendar events are stored as calendar records in your team workspace so the features work when you are offline and for audit history.
• Tokens are stored encrypted. Google OAuth access and refresh tokens are stored encrypted in our database and transmitted only over TLS to Google's servers. They are never embedded in URLs, logs, or client-side code.
• No human reads your Google data except as strictly necessary to provide support you request, comply with law, or prevent abuse, and never for advertising.

4.3 What we never do with Google data

• We never sell Google user data.
• We never share Google user data with third parties except as necessary to operate the sync (secure cloud hosting and infrastructure under contract), comply with law, or protect rights and safety as described in Section 6, never for advertising or unrelated analytics.
• We never use Google user data for advertising, ad targeting, or credit/employment/insurance eligibility decisions.
• We never train generalized AI or machine-learning models on Google user data.

Pixelwand CRM's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4.4 Revoking access and deleting Google data

• Disconnect inside the CRM at any time: for Gmail, delete or disconnect the connected email account (or use the Google disconnect option in Settings); for Google Calendar, use Disconnect in the Google Calendar settings. Disconnecting deletes the locally stored OAuth tokens for that connection and stops further syncing.
• Revoke from your Google account: visit myaccount.google.com/permissions and remove Pixelwand CRM. This immediately invalidates our access even if you do not disconnect inside the CRM first.
• Deletion on request: contact us at deependra.kumar@pixelwand.live to request deletion of synced Gmail or Calendar data and remaining tokens for your workspace. We delete the requested Google-derived data unless we must retain narrow records for legal compliance (see Section 7), in which case we tell you what was kept and why.

After revocation, previously synced copies already stored in your CRM workspace (for example, emails already linked to a lead) remain until you delete them or request deletion. We stop all new reads, sends, and syncs immediately.

5. SMS Messaging and TCPA Compliance

5.1 How We Obtain Consent

We obtain your consent to receive SMS messages through a web form on our website. The form clearly discloses:

• That you are consenting to receive SMS messages
• The types of messages you will receive
• That message and data rates may apply
• How to opt out by replying STOP
• A link to this Privacy Policy and our Terms and Conditions

5.2 Consent Records

We maintain detailed records of all consent obtained including the date, time, IP address, and exact language of the consent disclosure at the time of opt-in. These records are retained for a minimum of 4 years in compliance with TCPA requirements.

5.3 Opting Out

• Replying STOP to any SMS message you receive
• Emailing us at deependra.kumar@pixelwand.live with your phone number and opt-out request

After opting out, you will receive one final confirmation message and no further SMS messages will be sent. Opt-out requests are processed within 24 hours. We retain your opt-out record permanently to ensure we do not send you further messages.

5.4 Getting Help

Reply HELP to any SMS message or email deependra.kumar@pixelwand.live for assistance with SMS communications.

6. Sharing of Information

We do not sell, rent, or trade your personal information to third parties. We may share your information only in the following limited circumstances:

6.1 Service Providers

We share information with trusted service providers who assist in operating our platform, including:

• Twilio Inc.: SMS and voice communication delivery. Subject to Twilio's privacy policy.
• Cloud hosting providers: for secure data storage and platform infrastructure
• Analytics providers: for platform improvement and performance monitoring

All service providers are contractually required to use your information only to provide services to us and to maintain appropriate security measures. Google user data (Gmail, Calendar, and account information obtained through Google APIs) is never shared with third parties for purposes unrelated to providing the sync features you enabled, and is never used for advertising or analytics. Any use or transfer of Google user data adheres to the Google API Services User Data Policy, including the Limited Use requirements (see Section 4).

6.2 Legal Requirements

We may disclose your information if required by law, court order, or government authority, or if we believe disclosure is necessary to protect the rights, property, or safety of Pixelwand, our users, or the public.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of our business, your information may be transferred as part of that transaction. We will notify you of any such change via email or prominent notice on our website.

7. Data Retention

8. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, disclosure, alteration, or destruction. These measures include:

• AES-256 encryption for data at rest
• TLS 1.3 encryption for all data in transit
• Encrypted storage of Google OAuth access and refresh tokens, transmitted only to Google's servers over TLS (see Section 4)
• Role-based access controls limiting who can access personal data
• Regular security assessments and vulnerability scanning
• Multi-factor authentication for all systems handling personal data

While we take security seriously, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but commit to promptly notifying affected individuals in the event of a data breach.

9. Your Rights

You have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information, subject to our legal retention obligations
• Opt-out of SMS: Reply STOP to any message or email us at any time
• Revoke Google access: Disconnect Gmail or Google Calendar in Settings at any time, or revoke access at myaccount.google.com/permissions (see Section 4.4)
• Do Not Sell: We do not sell personal information. No opt-out of sale is necessary.

To exercise any of these rights, please contact us at deependra.kumar@pixelwand.live. We will respond to all requests within 30 days.

10. Cookies

Our website uses cookies and similar tracking technologies to improve your browsing experience and analyse website traffic. You can control cookie settings through your browser. Disabling cookies may affect certain features of our website.

11. Children's Privacy

Our Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately at deependra.kumar@pixelwand.live and we will delete such information promptly.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date at the top of this page and, where appropriate, by sending a notification to the email address associated with your account. Your continued use of the Service after changes are posted constitutes your acceptance of the revised Privacy Policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: deependra.kumar@pixelwand.live
• Website: https://www.pixelwand.io
• Company: Pixelwand Studio Private Limited