PixeltablePixeltable Logo

Privacy PolicyHow We Protect Your Data

At Pixeltable, we're committed to protecting your privacy and ensuring the security of your data.

Introduction

This Privacy Policy explains how Pixeltable, Inc. ("we", "us", "our", or "Pixeltable") collects, uses, and shares information when you use our website, Pixeltable Cloud, and related services (collectively, the "Services"). Your use of the Services is also subject to our Terms of Service. Security practices are described on our Security page.

Pixeltable is typically the controller of account, billing, marketing, and website analytics information. For Customer Content you store or process in Pixeltable Cloud (tables, media, computed outputs, secrets, and similar materials), Pixeltable is typically a processor acting on your instructions. You (or your organization) remain responsible for that Customer Content, including any personal information it contains.

Enterprise customers may request a data processing agreement through our contact page.

Information We Collect

We collect information you provide, information collected automatically, and information from vendors who help us operate the Services. If you do not provide information that is required to run an account or a paid plan, you may not be able to use those parts of the Services.

1. Information you provide

  • Account and organization: When you sign in through WorkOS AuthKit, we receive identifiers such as name, email address, profile image if you provide one, organization membership, and authentication events.
  • Customer Content: Data, files, media, table rows, computed outputs, prompts, queries, API keys, and secrets you store or process in Pixeltable Cloud. We process this as a processor to provide the Cloud service.
  • Help chat (PixelAssist): Messages you send to the in-product help assistant, limited conversation history, and the page path you are on. Those messages are sent to Groq to generate replies.
  • Communications: Support, sales, waitlist, feedback, and contact-form messages, including attachments you choose to send. Transactional email is sent through Resend.
  • Payment: Paid plans are billed through Stripe. Stripe collects billing name, address, and payment-method details. We do not store full payment-card numbers on our servers.
  • Free and demo tools: Some public tools (for example, hosted demos) may receive files or queries you upload. Certain of those tools run on Render.
  • Careers: If you apply for a job, we collect the contact information and resume you submit.

2. Information collected automatically

  • Usage and device data: IP address, browser and OS, pages and features used, timestamps, referring URLs, and similar diagnostics.
  • Approximate location: City, region, or country inferred from IP address.
  • Cookies and similar technologies: See "Cookies" below.

How We Use Information

We use account, billing, and website information to operate accounts, process payments, send service and (where permitted) marketing messages, secure the Services, prevent abuse, comply with law, and understand how the website is used. We may create de-identified or aggregated operational metrics from that information.

We use Customer Content only to provide, maintain, secure, and support Pixeltable Cloud for you, including backups, debugging, abuse prevention, and legal compliance. We do not use Customer Content to train Pixeltable machine-learning models unless you opt in through a separate written agreement.

Help-chat messages are used to answer your question. Do not include secrets or sensitive personal information in help chat.

Legal Basis for Processing (EEA/UK)

If you are in the European Economic Area or the United Kingdom, we process personal information only when we have a valid legal basis:

  • Contract: To create and manage your account, provide Cloud, and process payments.
  • Legitimate interests: To operate and secure the Services, prevent fraud, understand website usage, and (where permitted) communicate about the product, unless those interests are overridden by your rights.
  • Legal obligation: For example tax, accounting, or lawful requests.
  • Consent: Where we ask for it for a specific purpose, including certain optional analytics. You may withdraw consent without affecting prior processing.

Where we act as a processor of Customer Content, we process that information on your documented instructions as described in our Terms and, if executed, a data processing agreement.

How We Share Information

We share information with vendors who process it on our behalf, when required by law, in a corporate transaction, or with your direction. We do not sell personal information for money.

Current subprocessors and similar vendors include:

  • WorkOS (authentication, organization directory, and secrets vault)
  • Stripe (payments)
  • Amazon Web Services (compute, storage, and networking for Pixeltable Cloud, currently in us-east-1)
  • Vercel (website and application hosting)
  • Cloudflare (DNS, CDN, and routing for pxt.run)
  • CockroachDB (control-plane database)
  • Resend (transactional email)
  • Groq (PixelAssist help chat)
  • Google Analytics (website analytics, when enabled)
  • Render (certain public demo tools)

We may also share information with affiliates, with professional advisors, or if we believe disclosure is required to comply with law, enforce our Terms, or protect the rights, property, or safety of Pixeltable, our users, or others.

If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, information may be transferred as part of that transaction as permitted by law.

California Privacy (CCPA/CPRA)

If you are a California resident, you have rights to know, access, correct, and delete personal information, and to opt out of "sale" or "sharing" as those terms are defined under California law. In the prior 12 months we have collected identifiers (such as name, email, and account IDs), commercial information (such as plan and billing records), internet or electronic activity (such as logs and analytics), and professional information you provide (such as company and role). We collect this information from you, from your devices, and from the vendors listed above.

We do not sell personal information, and we do not share it for cross-context behavioral advertising as those terms are commonly understood under the CCPA/CPRA. We do not use or disclose sensitive personal information for purposes that require a right to limit under CPRA, other than as needed to provide the Services.

To exercise California rights, email privacy@pixeltable.com. We will verify your request and will not discriminate against you for exercising your rights. You may use an authorized agent as permitted by law.

Cookies

We use cookies that are needed to run the Services, and some optional analytics cookies when they are enabled:

  • wos-session: Required. WorkOS authentication session.
  • pxt-help-quota: Limits guest use of PixelAssist help chat.
  • Stripe: Set on billing flows to process payment.
  • Google Analytics: When Google Analytics is enabled on the website, Google may set analytics cookies.
  • Vercel Speed Insights: Performance measurements on the website.

You can block cookies in your browser. Required cookies are needed to stay signed in. We do not currently operate a cookie consent banner that gates analytics.

Your Choices and Rights

Depending on your location, you may have rights to access, correct, delete, export, restrict, or object to processing of personal information, and to withdraw consent. You can opt out of promotional email using the unsubscribe link or by contacting us. You will still receive account and security messages.

To exercise these rights for information we control, contact privacy@pixeltable.com. We may need to verify your identity. For Customer Content in Cloud, organization administrators can typically access, export, or delete data in the product; we will assist as a processor where required.

Some browsers send "Do Not Track" signals. We do not currently respond to those signals.

Security

We use administrative, technical, and organizational measures designed to protect information we process, as described on our Security page. No method of transmission or storage is completely secure.

Retention

We retain account and billing information for as long as your account is active and as needed for legal, accounting, security, and dispute purposes. Customer Content is retained until you delete it or your account is terminated, after which we may delete it as described in the Terms of Service (typically after thirty days unless law or an Enterprise agreement requires otherwise). Help-chat logs are retained only as needed to operate, secure, and debug that feature.

When we no longer need personal information, we delete or de-identify it, or isolate it in backups until deletion is practicable.

International Transfers

Pixeltable is based in the United States. Information is processed in the United States and in other countries where we or our vendors operate. Data-protection laws in those places may differ from the laws of your country.

When we transfer personal information from the EEA, UK, or Switzerland, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (and UK or Swiss equivalents where required), not on browsing this policy alone as consent to the transfer.

Links to Other Sites

The Services may link to sites we do not operate. Their privacy practices are their own. Review the policy of every site you visit.

Children's Privacy

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us and we will take steps to delete it.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the "Last updated" date. For material changes to how we treat personal information we control, we will also notify you by email to the address on your account, through the Services, or both.

Contact Us

Pixeltable, Inc. is the controller for account, billing, marketing, and website analytics information described in this policy. For Customer Content in Pixeltable Cloud, Pixeltable acts as a processor as described above.

Questions or privacy requests:

Pixeltable, Inc., San Francisco, California, USA.

Last updated: August 15, 2026