This policy explains what personal data Pixsar collects when you use this website, the dashboard, Pixsar Meet, the Pixsar Media platform and the mobile apps, why we collect it, where it is kept and what you can ask us to do with it. We write it to meet the EU General Data Protection Regulation (GDPR).
1. Who is responsible
Pixsar Media is the controller for the data described in this policy, except for data that our customers process through Pixsar Meet (see section 4). You can reach us at info@pixsar.io or through the contact page.
2. Where your data is stored
Our servers are in Germany, hosted with Hetzner, our German hosting partner. Meeting media, recordings, uploaded photos and videos and account data are stored there. Some service providers we use (section 6) may process data elsewhere; where that happens outside the EU, it is covered by standard contractual clauses or an adequacy decision.
3. What we collect and why
- Account data (name, email, organisation, phone, billing details): to create and run your account and to invoice you. Legal basis: performance of a contract.
- Session data (who joined which room, when and for how long, device and connection details): to run the call, to produce the attendance lists our customers ask for, and to diagnose problems. Legal basis: contract and our legitimate interest in a reliable service.
- Recordings: only when the host turns recording on. Recordings belong to the customer and are delivered to the customer's own system; we keep our copy only as long as needed to deliver it, and no longer than the retention the customer configures.
- Event and purchase data (tickets bought, media purchased, payment reference): to give you access to what you paid for and to pay organisers. Card and mobile money details are handled by our payment providers; we never store full card numbers.
- Contact and newsletter messages: what you type into the contact form or the newsletter box, so that we can reply or send you event updates. Legal basis: your consent, which you can withdraw at any time by writing to us or using the unsubscribe link.
- Website logs (IP address, browser, pages requested): to keep the site secure and to fix errors. Kept for no more than 30 days. Legal basis: legitimate interest.
4. When our customer is the controller
When a university, school, company or association uses Pixsar Meet for its own sessions, that organisation decides who is invited, whether sessions are recorded and how long recordings are kept. It is the controller for its participants' data, and we process that data on its instructions as a processor. Participants with questions about a session should ask the organisation that ran it; we will help it respond.
5. Cookies
This website sets only the cookies it needs to work and to remember your language. The dashboard and Pixsar Meet set cookies needed to keep you signed in and to keep a call running. We do not use advertising cookies.
6. Who else sees your data
We share personal data only with providers that help us run the service, under contracts that bind them to this policy: Hetzner for hosting, payment providers for card and mobile money payments, an email delivery provider for transactional email and newsletters, and an error monitoring service for crash reports. We do not sell personal data.
7. How long we keep it
Account data is kept while your account is open and for as long afterwards as tax and accounting law requires. Session logs are kept for 12 months. Contact messages are kept for 24 months. Recordings follow the customer's retention settings. You can ask us to delete data sooner where the law allows it.
8. Your rights
Under the GDPR you can ask us to:
- tell you what data we hold about you and give you a copy;
- correct data that is wrong;
- delete your data, or restrict how we use it;
- hand your data to you or to another provider in a machine readable form;
- stop processing that is based on legitimate interest, or withdraw a consent you gave.
Write to info@pixsar.io and we will answer within one month. You also have the right to complain to the data protection authority in the country where you live or work.
9. Children
Schools may use Pixsar Meet with pupils under 16. In that case the school is the controller and obtains the consent the law requires. We do not knowingly create accounts for children on our own platform.
10. Changes
We will publish any change to this policy here with a new date, and tell account holders by email when the change is material.