Privacy policy

PixelKraft LLC (“PixelKraft”, “we”) builds and looks after websites for businesses in Dallas–Fort Worth and beyond. This policy covers our client dashboard, PixelKraft Business Suite, at dash.pixelkraft.net — where our clients follow their requests, sites, reports and billing, and our staff do the work. Our public website has its own policy at pixelkraft.net/privacy.

Questions about this policy or your information: support@pixelkraft.net.

Your account. Your name, email address, photo if you add one, language, time zone, and the organization you belong to and your role in it.

Signing in and security. When and from which browser and device you signed in, with its IP address, so you can see where you are signed in and sign other devices out; whether you use an authenticator app; and browsers you chose to trust for a while.

What you put in. Requests, comments, messages, files you upload, calls you book, answers to questions we ask (such as when you join or a check-in), and businesses you recommend us to — including the contact details you give us for them.

Billing. Your plan, invoices, payments and retainer hours. Card details are entered on and kept by our payment provider, Stripe; we never see or store your card number.

Using the dashboard. Which pages are used and how long they take to load (without your identity), and technical reports when something goes wrong, so we can fix it.

Notifications. If you turn them on: the browser’s push address for notifications on this device, and the chat you link if you connect Telegram.

If you put our small tracking script on your website, it tells your dashboard how many people visited and which contacts they made — calls, form sends, direction requests and similar. For each event it records the page, the site the visitor came from, their country, and their browser and device type.

• It sets no cookies and stores nothing on the visitor’s device beyond the open browser tab.
• It does not identify visitors. Their IP address is used only to stop abuse and is not stored.
• The individual events are kept for 90 days; after that only daily totals remain.

You remain responsible for telling visitors to your own website what it measures, in your own privacy notice.

You can connect a Google account to the dashboard, or make PixelKraft’s Google account a manager of your Google listing. Either way we only access what you approve on Google’s own consent screen:

• Google Analytics (read-only) — visits, users, pages and conversions for the website properties you choose;
• Google Search Console (read-only) — search clicks, impressions and positions for the sites you choose;
• Google Business Profile — for listings that have made PixelKraft a manager: calls, direction requests, website clicks, bookings and messages, how often and where the listing was seen, the searches that showed it, the listing’s details (to check how complete it is), rating and reviews; and, when you ask us to, replying to reviews and posting updates;
• your Google account’s email address, to show which account is connected.

How it is used. Only to show you, in your own dashboard and in the reports we send you, how your website and listing are doing. We do not use Google data for advertising, we do not sell it, and we do not use it to train artificial-intelligence or machine-learning models. It is seen by you, the people on your account and the PixelKraft staff who look after it, and is not shared with anyone else except the hosting providers listed below — and Anthropic, as follows.

Review summaries. Once a month, the text and star ratings of your listing’s public Google reviews are sent to Anthropic, which provides the AI model, to write a short summary of what reviewers praise and complain about. The summary is shown only in your dashboard. Nothing else from Google is sent, and Anthropic does not use it to train its models.

How it is kept. The permission Google gives us is stored encrypted. Daily figures are kept so your dashboard can show trends.

Removing access. Disconnect from the dashboard (Settings → Connected accounts), which revokes our access at Google and deletes the stored permission, or remove it from your Google account at myaccount.google.com/permissions. To have the figures we collected deleted as well, email us.

PixelKraft Business Suite’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

If you ask the dashboard’s assistant a question, the question and the parts of your account needed to answer it are sent to Anthropic, which provides the AI model, to produce the answer. It is processed under Anthropic’s commercial terms for its API. If you do not use the assistant, nothing is sent.

• to run the dashboard and the work you ask us to do;
• to send you the notifications, reminders and reports you have not switched off;
• to bill you and keep the records the law requires;
• to keep accounts secure and the service working, and to answer you when you contact us;
• to improve the dashboard, using totals rather than anything about you in particular.

We do not sell your information, and we do not use it for advertising.

These services process information on our behalf, only for the purpose given:

• Cloudflare — hosting, file storage and the network the dashboard runs on;
• Neon — the database;
• Stripe — payments and invoices;
• Brevo — sending and receiving email;
• Anthropic — the assistant, when you use it, and the monthly summary of your Google reviews;
• Google — the Google services you connect;
• DataForSEO — search figures about websites and keywords (no personal information);
• Telegram — notifications, only if you link a chat;
• your browser’s push service (Apple, Google or Mozilla) — notifications, only if you turn them on.

Some of these are in the United States, so your information may be processed there. We may also disclose information when the law requires it.

The dashboard uses only the cookies it needs, all its own; there are no advertising cookies.

• keeping you signed in, and remembering a browser you chose to trust after an authenticator code;
• your time zone, so times show in yours;
• for our staff, which client’s dashboard they are viewing;
• a short-lived cookie while you connect a Google account;
• a first-party counter of dashboard use (kept up to 180 days), which never leaves PixelKraft.

While you are our client, and afterwards only as long as needed to finish our work together, settle accounts and keep records the law requires (invoices and payment records, for example). Visitor events from your website are kept 90 days, then as daily totals. Backups are kept for a limited period (two weeks by default) and then deleted.

• See and take your information: Settings → Download my data gives you what is held about you; your organization’s owners and admins can download the whole account’s records.
• Correct it: most of it is editable in Settings; for the rest, email us.
• Delete it: email support@pixelkraft.net. We delete within 30 days, except what the law requires us to keep.
• Notifications: each kind can be switched off in Settings.
• Google: disconnect at any time, as above.

Depending on where you live (for example the EU, the UK or California) you may have further rights, such as to object to processing or to complain to a data-protection authority. Email us and we will help.

Connections are encrypted; stored secrets such as Google permissions are encrypted; staff accounts can be required to use an authenticator app; access is limited to the people on an account and the staff looking after it; and staff actions are recorded in an audit log.

The dashboard is for businesses and is not meant for children under 16.

When this policy changes, the date at the top changes too. If a change affects how we use information you have already given us, we will tell you in the dashboard or by email first.