Privacy Policy

This Privacy Policy explains how Nextsense Solution FZC LLC ("PixlBridge", "we", "us"), with its registered address at CWS-2V-195841, 26th Floor, Amber Gem Tower, Ajman, United Arab Emirates, collects, uses, shares and retains personal data when you use the PixlBridge website (pixlbridge.com), the PixlBridge application (app.pixlbridge.com and api.pixlbridge.com), the tracked redirect service (go.pixlbridge.com), the PixlBridge Shopify app and the PixlBridge web pixel (together, the "Service").

PixlBridge acts in two roles. For the people who create accounts and use the dashboard ("Customers"), we are the data controller. For data about our Customers' shoppers that we process in order to provide the Service (clicks on tracked links, events from Shopify stores, purchase data from Amazon Attribution), we act as a data processor on the Customer's documented instructions; the Customer is the controller. Our Data Processing Addendum governs that processing.

1. Data we collect

1.1 Account and workspace data (controller)

• Name, email address, password (stored as a bcrypt hash), email verification status, timezone and currency preferences.
• Workspace name and logo, team memberships and roles, invitations you send (invitee email and role).
• Subscription plan, billing status and Stripe customer and subscription identifiers. Payment card details are collected and stored by Stripe, not by us.
• Support correspondence and, if you use the booking link, the details you provide to the scheduling provider.
• Technical logs: IP address, user agent, timestamps and request paths for security, rate limiting and debugging.

1.2 Provider connection data (processor for advertising data; controller for credentials)

• Meta: an OAuth access token obtained through Facebook Login for Business, the ad account, business and Pixel/dataset identifiers you select, and campaign, ad set, ad, creative names and spend metrics retrieved from the Marketing API.
• Amazon: Login with Amazon access and refresh tokens, advertising profile and Amazon Attribution advertiser identifiers, attribution tags created for your links, and aggregated Attribution report metrics (clicks, detail page views, add-to-carts, purchases, sales) per tag.
• Shopify: an offline access token for each connected store, the shop domain and shop information, webhook subscription identifiers and web pixel identifiers.

All tokens are encrypted at rest with AES-256-GCM.

1.3 Shopper data processed on behalf of Customers (processor)

• Click data when a shopper opens a tracked link: link code, timestamp, the fbclid Meta appends to the URL, a first-party _fbp cookie value, device and browser type, a normalised IP address and a hashed IP address, user agent, and the destination.
• Shopify storefront events from the PixlBridge web pixel: event type and id, page URL, product or variant identifiers, cart value and currency, the _fbp and _fbc cookie values, user agent, and a hashed customer id for logged-in customers.
• Shopify order and checkout data from webhooks: order id and number, checkout token, totals, currency, line item identifiers and quantities, browser IP and user agent, landing page URL, and customer email, phone, first and last name, city, state, postal code and country. Personal fields are normalised and SHA-256 hashed at ingest; raw values are not stored or logged.
• Amazon purchase data is received only as aggregates per attribution tag. Amazon does not share buyer identities with us.

1.4 Website visitors and sign-up (controller)

pixlbridge.com and the app's sign-up and sign-in pages (app.pixlbridge.com/signup and /login) use Google Analytics and Google Ads to see how the website is used and which of our ads, including YouTube ads, bring sign-ups and paying customers. They follow your choice in our cookie banner, with Google Consent Mode v2:

• In the EEA, the United Kingdom and Switzerland, no Google cookies are stored and no ad click identifier is kept before you click Accept. When your browser's time zone is in Europe, our pages don't load the Google tag at all until then.
• Elsewhere, Google measurement runs unless you click Decline.
• After Decline, our pages no longer load the Google tag and remove Google's cookies from our domain. You can change your choice at any time with Cookie settings at the bottom of pixlbridge.com and on the app's sign-up and sign-in pages.
• The signed-in dashboard loads no Google tags.

What is collected: the pages you view and how you arrived (campaign tags such as utm_source and utm_campaign, the page you landed on and the site you came from), ad click identifiers (gclid, gbraid, wbraid), clicks on "Start free", and sign-up and conversion events (an account was created, connected its first store, made its first payment and its amount), with the device, browser and approximate location information Google derives from your connection. If you accepted, a SHA-256 hash of your email address is sent to Google Ads when you sign up (enhanced conversions), so the sign-up can be matched to your ad click; your email itself is not sent.

When you sign up we keep the campaign tags, landing page and referring site with your account, and the ad click identifier only if you accepted. When that account later connects its first store or starts a paid subscription, we tell Google Ads with the ad click identifier, the time and, for a payment, the amount (never your name or email), so we can measure our ads.

None of this touches your stores' data: the PixlBridge web pixel and the shopper data we process for you (1.3) are unchanged, are not used for our own advertising and don't depend on this banner.

1.5 Emails we send you (controller)

• Account and billing emails: email verification, password resets, invitations, and trial and payment notices. You get these for as long as you have an account.
• Setup tips and summaries: a few emails that help you set up PixlBridge (for example when no store is connected yet), tell you when your first sale reached Meta, and summarise your numbers. You can switch them off in Settings → Profile → Emails or with the unsubscribe link in each one.
• News and offers: only if you said yes, at sign-up or in Settings. You can withdraw that at any time with the unsubscribe link or in Settings.

For these emails we keep your choices and when you made them, a log of the emails we sent you, and the delivery events our email provider reports: delivered, bounced, marked as spam, and, where it reports them, opened or clicked. When an email bounces or is marked as spam, we stop sending setup tips, summaries and news to that address. Replies to our emails go to our support address.

1.6 Free tools (controller)

Our free tools at pixlbridge.com/tools, such as the Meta Pixel & CAPI checker, work without an account. When you use one:

• The store address you check and the result. Our server in Germany opens that store's public home page, as a visitor in Europe would, and we keep the address you typed and what the check found there (whether the store runs on Shopify, its Meta Pixel IDs, its other trackers and their IDs, server-side apps and its cookie banner), not the page itself. We keep them for 90 days: to show you the result, to answer a new check of the same store within 30 minutes without opening it again, to email you the report if you ask, and to count how the tools are used.
• A one-way hash of your IP address, made with a secret key, with each check and each report you ask for: to limit how often the tools can be used and to stop abuse. We don't store your IP address itself.
• Your email address, if you ask for the report by email, with the store you checked and when you asked. We use it to send you that report. We keep it to respect your news choice and, if you later create a PixlBridge account with the same address, to link your request to that account.
• Your news choice. If you tick "Also send me Meta ads tips and PixlBridge news", we keep that choice and when you made it, until you unsubscribe. Every email has an unsubscribe link. If you create an account with the same address, a yes carries over to the account's news setting (1.5).
• The report email is sent by Resend (4).

Google Analytics (1.4) records that a check ran and its outcome, for example whether a Meta Pixel was found, and whether you asked for the report by email. It never receives the store address or your email address.

1.7 AI Ad Creator (processor)

The AI Ad Creator, included in paid plans, makes ad images and videos from the products in a Customer's connected Shopify store, when the Customer asks for them. For each request:

• What we send to Google (Gemini API). To make images: the product photo you chose from your Shopify store, the product's title, product type and vendor, and the note you typed, if any, with the style and format you picked. To make a video: the image you approved, the same product details and your note. Google sends back the images and videos it made.
• What we keep. The images and videos it makes, stored privately in Cloudflare R2 object storage and shown to you in PixlBridge only through short-lived signed links; and, in our database, the details of each request (the product, the photo used, the style, format and note, and the instructions sent to Google) and whether you approved or rejected the result.
• Product photos usually show only the product. If a photo you choose shows a person, it is sent and kept like any other photo. The AI is told never to add people's faces.
• What Google keeps. Image requests are sent with Google's "don't store" option. Video requests can't use it, so Google keeps each one (the approved image and the instructions sent with it) for the log retention period set in our Google AI Studio account, 55 days by default. We delete the finished video at Google as soon as we have stored our own copy. Google processes all of this as our sub-processor under its terms for the paid Gemini API, which don't allow Google to use it to improve its products.
• We don't use your photos, notes, images or videos to train AI models, and other Customers never see them.

1.8 Businesses we contact (controller)

We sometimes write to Shopify businesses that advertise on Facebook and Instagram, to offer a free check of their store and free AI ads. For that we use only what the business publishes itself:

• the store's address and name, what our Meta Pixel check finds on its public home page (as in 1.6), and one product's photo and title from its public product list;
• a contact email address the business lists on its own website;
• two ad images our AI Ad Creator makes from that product photo (with Google's Gemini API, as in 1.7), stored privately and shown on a free report page that only the link in our email opens.

A person on our team writes each email from their own mailbox, and we write at most a few times. Each email says how to opt out: reply "no", or press "Don't contact me again" on the report page. After that we keep only the store's address and that email address, so we never contact the business again. You can also ask us to delete everything about your store at any time (7). If the business later connects that store to PixlBridge, we mark it in our list and note on its account that it came from our email, so we don't write to it as a stranger and can tell how it found us.

2. How we use data

• To provide the Service: authenticate you, run your workspace, create tracked links and attribution tags, record clicks, receive Shopify events, match purchases to clicks and send conversion events to Meta on your behalf.
• To send hashed customer identifiers, click identifiers and purchase details to the Meta Conversions API for the Meta dataset you selected, so that Meta can attribute and optimise your advertising. This is done on your instruction and for your benefit as the advertiser.
• To produce reports for you (spend, clicks, conversions, ROAS by campaign, ad, creative, period and product).
• To bill you through Stripe and to send email through Resend: account and billing notices (verification, password reset, invitations, trial and payment notices), scheduled reports and alerts you set up, setup tips and summaries, and news and offers if you asked for them (1.5).
• To secure the Service: rate limiting, abuse prevention, audit logging of administrative actions, debugging.
• To measure our own website and advertising with Google Analytics and Google Ads (including YouTube ads), as described in 1.4.
• To run our free tools: check the store address you enter, show you the result and email it to you if you ask, keep the tools free of abuse and, if you said yes, send you Meta ads tips and PixlBridge news (1.6).
• To make ad images and videos with the AI Ad Creator when you ask for them, and keep them for you until you delete them (1.7).
• To offer Shopify businesses a free check of their store and free AI ads, and to respect their wish not to be contacted (1.8).
• To comply with law and enforce our Terms.

We do not sell personal data, do not use Customer or shopper data to build profiles across Customers, and do not use your stores' shopper data for our own advertising. For our own advertising we use only the website and sign-up data described in 1.4.

3. Legal bases (EEA, UK and Switzerland)

• Contract: providing the Service to Customers, and emailing you a free-tool report you asked for (1.6).
• Legitimate interests: security, fraud prevention, service improvement, communicating with Customers about the Service (including the setup tips and summaries in 1.5, which you can switch off), knowing which of our campaigns bring customers (the campaign tags, landing page and referring site kept with a new account), and running our free tools and keeping them free of abuse (the checks and the hashed IP address in 1.6).
• Consent: news and offers by email (1.5), and Meta ads tips and PixlBridge news if you ticked the box in a free tool (1.6). You can withdraw it at any time with the unsubscribe link in each email or in Settings.
• Legitimate interests: writing to businesses at the contact address they publish, about a free check of their store and free AI ads (1.8). You can object at any time: reply "no" or press "Don't contact me again".
• Legal obligation: tax, accounting and responding to lawful requests.
• Consent: Google Analytics and Google Ads on our website and sign-up pages (1.4): Google's cookies, the ad click identifier we keep with your account and the conversions we send to Google Ads with it, and the hashed email for enhanced conversions. You can withdraw it at any time with Cookie settings.
• Consent: where a Customer's storefront requires consent for the web pixel or for Meta tracking, obtaining that consent is the Customer's responsibility as controller.

4. Sharing and sub-processors

We share data with the following categories of recipients, only as needed to provide the Service:

We may also disclose data to professional advisers, to authorities where required by law, and to a successor in a merger or acquisition (with notice to you). The current sub-processor list is maintained in the DPA.

5. International transfers

Our infrastructure is located in the European Union (Germany). The recipients above may process data in the United States and elsewhere. Where data leaves the EEA, UK or Switzerland we rely on the recipient's adequacy status, the EU Standard Contractual Clauses (and UK Addendum) or the EU-U.S. Data Privacy Framework where the recipient is certified.

6. Retention

• Account data: for the life of the account and up to 30 days after deletion, then removed from live systems; backups expire within 14 days.
• Provider tokens: Meta and Amazon tokens until you disconnect the provider or delete the workspace, at which point they are overwritten immediately. A Shopify store you disconnect in PixlBridge keeps its encrypted token, unused for tracking, so you can reconnect it in one click: while it is disconnected we only renew the token and, for the store that pays for your plan, read your Shopify plan. It is overwritten immediately when you uninstall PixlBridge from the store in Shopify or delete the workspace.
• Click data: 13 months, covering attribution windows and year-over-year reporting.
• Shopify events (hashed): 90 days after they are sent, failed or skipped. Meta does not accept events older than 7 days.
• AI Ad Creator (1.7): the images and videos it makes, in Cloudflare R2, and the details of each request, until you delete them in PixlBridge or the workspace is deleted. A store's are also deleted when Shopify asks us to erase that store's data. At Google, each video request (the approved image and its instructions) for the log retention period of our Google AI Studio account, 55 days by default; image requests aren't stored there.
• Aggregated report snapshots and billing records: for the life of the account and as required by tax law (typically 7 to 10 years for invoices).
• Audit logs and security logs: 12 months.
• Email choices and the log of emails we sent you, with their delivery events: for the life of the account. An address that bounced or reported our email as spam stays on our do-not-email list (the address only), so we don't email it again.
• Ad attribution kept with an account (campaign tags, landing page, referring site, the ad click identifier if you accepted, and the date and amount of the first payment): for the life of the account. The pb_attr cookie expires after 90 days, pb_consent after 6 months.
• Google Analytics event data: the retention period set in our Google Analytics property, at most 14 months. Conversions sent to Google Ads are kept by Google under its terms.
• Free tools (1.6): the store address you checked and the result, with the hashed IP address, 90 days.
• Businesses we contact (1.8): the AI ad images 60 days after they were made; the store's details, the check and the contact address until you opt out or ask us to delete them. After an opt-out we keep only the store's address and the email address, so we don't contact you again.
• A free-tool report you asked for by email (your email address, the store you checked, your news choice and when you made it, and the hashed IP address): 90 days if you didn't say yes to tips and news; if you did, until you unsubscribe. You can ask us to delete it at any time (7). After you unsubscribe we keep only what we need to honour it, your email address and the date, so we don't email you again.

7. Your rights

Depending on where you live you may have the right to access, correct, delete, restrict or object to processing of your personal data, to data portability, and to withdraw consent. EEA and UK residents may lodge a complaint with their supervisory authority. Contact us at privacy@pixlbridge.com; we respond within 30 days.

Shoppers whose data we process for a Customer should direct requests to that merchant, who controls the data; we assist the merchant in fulfilling them, and we honour Shopify's customers/data_request and customers/redact webhooks automatically.

California (CCPA/CPRA)

We do not sell personal information. Our website and the app's sign-up and sign-in pages use Google Analytics and Google Ads cookies to measure our own advertising (1.4 and 8); where that counts as sharing personal information for cross-context behavioural advertising as defined in the CPRA, you can opt out at any time with "Decline" in Cookie settings. Sending a Customer's hashed purchase data to Meta on the Customer's instruction is processing as a service provider. California residents may exercise the rights to know, delete, correct and to non-discrimination by contacting us.

8. Cookies and similar technologies

• go.pixlbridge.com sets a first-party _fbp cookie (SameSite=Lax, Secure) on the redirect domain so that a shopper's later purchase can be matched to the click for Meta attribution. It contains a random identifier and no personal data.
• app.pixlbridge.com stores your session token in the browser's local storage to keep you signed in.
• The PixlBridge web pixel on a Shopify store reads the store's existing _fbp and _fbc cookies; it does not set cookies of its own. It runs in Shopify's customer-privacy sandbox and respects the store's consent settings.
• pixlbridge.com and the app's sign-up and sign-in pages set first-party cookies on .pixlbridge.com: pb_consent, your cookie choice (6 months); pb_attr, how you found us (campaign tags, landing page and referring site, and the ad click identifier only after you accept; 90 days; set by the website and the sign-up page); and, only when you open a partner's referral link, pb_ref, the partner's code (90 days).
• Google Analytics (_ga, _ga_*) and Google Ads (_gcl_au, _gcl_aw and similar) cookies, set through the Google tag on the same pages: in the EEA, the United Kingdom and Switzerland only after you accept, elsewhere unless you decline. Google Analytics cookies last up to 2 years, Google Ads cookies 90 days. "Decline" removes them. The signed-in dashboard sets none of them.
• Change your choice at any time with Cookie settings at the bottom of pixlbridge.com and on the app's sign-up and sign-in pages.

9. Security

Tokens are encrypted with AES-256-GCM, passwords are hashed with bcrypt, shopper identifiers are hashed with SHA-256, every database query is scoped to a single workspace, webhooks are signature-verified, and administrative actions are audit logged. Details are on the security page. No system is perfectly secure; if we learn of a breach affecting your data we will notify you without undue delay and, where the law requires, within 72 hours.

10. Children

The Service is for businesses and is not directed to children under 16. We do not knowingly collect their data.

11. Platform terms

Our use of Meta data complies with the Meta Platform Terms and Developer Policies; our use of Amazon Ads API data complies with the Amazon Advertising API License Agreement; our Shopify app complies with the Shopify Partner Program Agreement and API Terms, including the protected customer data requirements. You can revoke our access at any time from the respective platform (Facebook settings → Business integrations; amazon.com → Login with Amazon; Shopify admin → Apps, by uninstalling PixlBridge) or, for Meta and Amazon, by disconnecting in PixlBridge. Disconnecting a Shopify store in PixlBridge pauses it and keeps the app installed (see 6).

Data deletion instructions (Meta App Review): to have all data associated with your Meta account removed, disconnect Meta in PixlBridge or delete your workspace, or email privacy@pixlbridge.com with the subject "Data deletion". We confirm completion within 30 days.

12. Changes

We will post changes on this page and update the effective date. For material changes we email Customers at least 14 days before they take effect.

13. Contact

Nextsense Solution FZC LLC, CWS-2V-195841, 26th Floor, Amber Gem Tower, Ajman, United Arab Emirates, the United Arab Emirates (Emirate of Ajman). Email privacy@pixlbridge.com. EU/UK representative (if required): Nextsense Solution FZC LLC, CWS-2V-195841, 26th Floor, Amber Gem Tower, Ajman, United Arab Emirates. Data protection officer (if appointed): office@nextsensesolution.com.