1. Who we are
Pixlcart is an e-commerce software-as-a-service product of Zenpixl. We provide storefront hosting, order and inventory management, customer CRM, multi-carrier shipping integrations, payment tracking, and analytics for merchants worldwide.
For privacy questions, contact info@zenpixl.com. For product support, contact info@zenpixl.com. You can also reach us at info@zenpixl.com or +1 (800) 555-0199.
2. Scope and our role
This policy covers personal data processed through the Pixlcart marketing website, signup and onboarding, merchant accounts, staff logins, and the hosted stores we operate for merchants.
Under applicable data privacy regulations, we act in two roles:
- Data controller (or business) for merchant and staff account data, identity-verification documents, billing records, website visitor data, and support communications.
- Data processor or service provider (processing on the merchant’s instructions) for store customer data that a merchant collects through their Pixlcart storefront — such as customer names, email addresses, delivery addresses, and order history. In that case the merchant is the data controller for their customers.
3. Information we collect
We collect only what we need to operate Pixlcart, verify merchants, process subscriptions, and support your store.
Merchant account and identity
- Full name, shop name, email address, phone number, password (stored in hashed form), bio, and optional custom domain.
- Profile picture and identity document uploaded at registration (for example a passport, driver's license, or government ID) used to verify the merchant account.
- Staff names, roles, and login credentials if you invite team members.
Business and store operations
- Products, variants, categories, stock levels, warehouses, coupons, invoices, and order records.
- Shipping and carrier booking details (including USPS, UPS, FedEx, DHL, and connected couriers), including pickup and tracking information.
- Storefront design, custom pages, and domain configuration.
Store customer data (on behalf of merchants)
- Customer name, phone, delivery address, order contents, payment status, and purchase history stored in the merchant’s CRM.
- SMS and email notification records related to order confirmation, shipping, and delivery, where the merchant enables those alerts.
Payments, technical, and communications data
- Subscription plan, billing period, payment method type (such as credit card, Apple Pay, or PayPal), transaction reference, and payment status. We do not store full payment card numbers, CVVs, or bank credentials.
- IP address, device and browser type, approximate location derived from IP, logs, and cookies needed to run and secure the site.
- Messages you send via the contact form, WhatsApp, email, or live chat.
4. How we use information
We use personal data to provide and improve Pixlcart, not to sell it.
- Create and verify merchant accounts, including identity checks required to reduce fraud.
- Host your storefront, process orders, manage inventory, generate invoices, and automate shipping fulfillment.
- Collect subscription fees and keep billing records.
- Provide support, onboarding, and service notices.
- Send operational messages (order, shipping, and account alerts) and, where you opt in, product updates such as the newsletter.
- Monitor security, prevent abuse, and debug the platform.
- Comply with applicable legal obligations, including tax, accounting, cybersecurity, and data-protection duties.
- Produce aggregated, non-identifying usage insights to improve the product.
5. Payment processing
Pixlcart is not a bank or payment gateway. Subscription payments and store checkout payments are processed by independent third-party providers, including Stripe, PayPal, and major credit card networks.
When you pay a subscription, those providers receive the payment details they need to complete the transaction. We receive confirmation of success or failure, a transaction reference, amount, and method. We use that information to activate or renew your plan and to keep accounting records.
When a store customer pays a merchant through Stripe, PayPal, or another connected gateway, the payment is processed by that provider under its own terms and privacy policy. Settlement of customer funds is between the merchant, the customer, and the payment provider. Pixlcart records payment status for order management and reporting only.
We do not store card PAN data, CVVs, or banking passwords. Payment providers may retain transaction data as required by applicable financial regulations and their licenses.
6. Legal bases for processing
We process personal data on one or more of the following legal bases under applicable data protection laws:
- Consent — for example identity-document upload, newsletter signup, optional analytics cookies, and marketing messages.
- Performance of a contract — to create your store, host it, bill your plan, and deliver the features you subscribe to.
- Legal obligation — tax and accounting records, cybersecurity incident handling, and lawful requests from competent government authorities.
- Legitimate interests that do not override your rights — securing the platform, preventing fraud, and improving reliability.
- Merchant instructions — when we process store customer data as the merchant’s service provider.
8. How long we keep data
We keep personal data only as long as needed for the purposes in this policy, including legal retention duties.
- Merchant account and store data: for the life of the account and a limited period after closure so we can complete export requests, resolve disputes, and meet accounting obligations.
- Identity documents: for verification and for as long as applicable law or fraud-prevention needs reasonably require, then securely deleted or anonymized.
- Billing and transaction records: typically at least six to seven years, or longer if a tax, audit, or legal hold applies.
- Support and live-chat records: for as long as needed to resolve issues and improve support quality.
- Backups: for a limited rolling period, after which they are overwritten.
- Store customer data: until the merchant deletes it, the account is closed and the retention window ends, or the merchant instructs us to delete it — subject to legal holds.
9. Your data-protection rights
Subject to applicable data protection laws and any lawful exceptions, you may:
- Request access to the personal data we hold about you.
- Ask us to correct inaccurate or incomplete data.
- Request erasure where the data is no longer needed, consent is withdrawn, or processing is unlawful.
- Withdraw consent where processing is based on consent (this does not affect processing already completed).
- Object to or request restriction of certain processing.
- Request a copy of your data in a commonly used, machine-readable format (see Data export).
- Lodge a complaint with your relevant national or state data protection authority.
Store customers should first contact the merchant whose store they used. If you are a merchant’s customer and cannot resolve the request with the merchant, you may contact info@zenpixl.com and we will assist within our role as service provider.
10. Data export rights
Merchants may request an export of their Pixlcart business data at any time, and should do so before account closure.
On a verified request to info@zenpixl.com or info@zenpixl.com, we will provide a copy of products, categories, inventory, orders, invoices, coupons, and store customer records in a commonly used machine-readable format such as CSV or JSON, typically within 30 days.
Identity documents, hashed passwords, payment-provider secrets, and security logs are not included in a standard export. We may withhold data that would adversely affect the rights of others or that we must retain only in a restricted form under law.
After termination, export remains available on request for 30 days unless a longer period is required by law or agreed in writing.
11. Security
We use administrative, technical, and organisational measures appropriate to the sensitivity of the data we handle — including merchant identity documents, customer contact details, and order records.
- Encryption in transit (HTTPS) and hashed storage of account passwords.
- Role-based access so merchant staff see only what their role allows, and Zenpixl staff access production data only as needed for support and operations.
- Hosting, updates, and infrastructure managed as part of the Pixlcart service so merchants do not run their own servers.
- Monitoring for unauthorised access, abuse, and service disruption.
No method of transmission or storage is perfectly secure. If we become aware of a personal data breach requiring notification under applicable law, we will inform affected merchants and, where required, supervisory authorities without undue delay.
13. Where data is processed
Pixlcart is built to serve merchants globally. We process and store personal data in secure cloud facilities following international security and data protection standards.
We use industry-standard infrastructure and reputable global service providers (for example for hosting, analytics, email, and live chat). Where data is transferred internationally, we ensure appropriate contractual safeguards and compliance with applicable cross-border data transfer regulations. Core merchant and customer databases are treated as confidential operational data and are never sold or licensed to third parties.
14. Account termination and deletion
You may request account closure at any time by contacting info@zenpixl.com. We may also suspend or close an account as described in the Terms of Service (for example non-payment, verification failure, or unlawful use).
Before or within 30 days after closure, you may request a data export. After that window we disable the storefront and delete or anonymise personal data that we no longer need, except records we must keep for billing, tax, dispute resolution, fraud prevention, or other legal duties.
Store customer personal data processed for you is deleted or anonymised with the merchant account unless a legal hold applies or you have asked us to transfer it to you via export.
15. Children
Pixlcart is a business service. It is not directed at children under 18. We do not knowingly collect personal data from children. If you believe we have, contact info@zenpixl.com and we will delete it.
16. Changes to this policy
We may update this Privacy Policy to reflect product, legal, or operational changes. The effective date at the top of this page will change when we do. For material changes, we will notify merchants by email or an in-product notice where reasonably practicable. Continued use of Pixlcart after the updated policy takes effect constitutes acceptance of the revised policy.
17. How to contact us
To exercise your rights, request an export, or ask a privacy question:
- Privacy: info@zenpixl.com
- Support: info@zenpixl.com
- General: info@zenpixl.com
- Phone / WhatsApp: +1 (800) 555-0199
- Website: pixlcart.com
- Company: Zenpixl (https://zenpixl.com/)
Please include the email and shop name on the account so we can verify the request. We may need additional information to confirm your identity before releasing or deleting data.
