Legal

Privacy policy

Last updated: October 17, 2026

Introduction

Pixel Dispatch ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services.

Information We Collect

Information You Provide

  • Account information: name, email address, phone number
  • Business information: company name, business type, billing address
  • Payment information: processed securely through Stripe (we do not store full credit card details)
  • Content: projects, client information, media files, messages, and other data you upload
  • Communication: messages sent through our platform and support communications

Information Collected Automatically

  • Usage data: how you interact with our platform, features used, pages viewed
  • Device information: IP address, browser type, operating system
  • Cookies and tracking: we use cookies to improve your experience and analyze usage

Optional Work Location Sharing

If your business requests work location sharing, you can choose to start a work session and grant location permission on your device. Reports include your coordinates, capture time, and location accuracy, associated with your account and business. Sharing can continue while the app is in the background or your screen is locked. Only authorized administrators and managers at that business can view your latest shared report; customers cannot access it through this feature.

You can pause or end sharing at any time, and each work session expires within eight hours. We keep the latest report rather than a route history. Stale and expired positions are hidden and removed through automatic cleanup. If your device is offline, your last report may remain visible until the server receives your stop instruction or the report becomes stale. You can also revoke location permission in your device settings.

How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our services
  • Process payments and manage billing
  • Communicate with you about your account and our services
  • Send you updates, notifications, and support messages
  • Respond to your inquiries and provide customer support
  • Detect, prevent, and address technical issues and security threats
  • Comply with legal obligations

Google Sign-In and Google Calendar Data

Google Sign-In is optional. If you choose it, Pixel Dispatch uses your Google account identifier, email address, and basic profile information, such as your name and profile picture, to authenticate you and maintain your Pixel Dispatch account. Supabase processes this information on our behalf as our authentication provider. Signing in does not by itself connect your Google Calendar.

Where Google Calendar integration is available, you can separately choose to connect your account. We request your verified email and permission to manage events on calendars you own. Pixel Dispatch uses this permission to create, read, update, or cancel events linked to appointments you explicitly choose to synchronize, and jobs you choose to export, on your primary Google calendar. We refresh linked events and appointment guest responses. We do not list or import your unrelated calendar events. We do not request access to Gmail, Google Drive, or Google Contacts for these features.

Optional job synchronization requires a separate confirmation of the connected account and the jobs to export. Active administrators can opt into upcoming jobs for their business; team members can opt into jobs assigned to them. Once enabled, relevant job and assignment changes update those exported events automatically. Job exports include the title, address, schedule, time zone, and a Pixel Dispatch link. They do not send guest invitations or include client contact details, private notes, or billing information.

Calendar data includes the appointment title, location, start and end times, time zone, the guest email addresses and invitation message you approve, an attached Pixel meeting link if selected, and event identifiers, synchronization status, and guest responses. Sending an invitation shares its details with Google and the guests you select; Google may email those guests. Private appointment notes are not included in the invitation. Connecting alone does not send invitations or synchronize existing appointments.

We store the connected Google account identifier and email, synchronization records, and an encrypted refresh credential in our Supabase-hosted database. That credential lets our servers continue the synchronization you requested when you are not using the app. Calendar refresh credentials are encrypted using AES-256-GCM and processed on the server; data is transmitted over HTTPS. Access is limited through application authorization and service access controls. Google data is shared with our hosting and database providers only as needed to operate these features, and with your selected guests as described above. We do not sell Google user data or use it for advertising, data brokerage, or training generalized AI or machine learning models. Human access is limited to what is necessary for support you authorize, security investigations, or legal obligations.

You can disconnect Calendar in Pixel Dispatch to remove the stored refresh credential and stop future synchronization. Disconnecting preserves appointment and synchronization history and existing Google events; it does not delete those events or revoke the Google grant. You can also revoke Pixel Dispatch access in your Google Account connections. Revoking Google access does not delete your Pixel Dispatch account or its existing records. We retain account and synchronization data while needed to provide the service and maintain its history, subject to the retention and legal exceptions below. To request deletion of Google-related data or your account, use our contact form and use Privacy as the subject. You can manage or delete remaining Google events directly in Google Calendar.

Pixel Dispatch’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Information Sharing and Disclosure

Service Providers

We share information with third-party service providers who perform services on our behalf:

  • Stripe: Payment processing (see Stripe's Privacy Policy)
  • Supabase: Database, authentication, and file storage (see Supabase's Privacy Policy)
  • Resend: Email delivery (see Resend's Privacy Policy)
  • Vercel: Hosting and content delivery (see Vercel's Privacy Policy)
  • Twilio: SMS/text message delivery (see Twilio's Privacy Policy)

Multi-Tenant Data Isolation

Pixel Dispatch is a multi-tenant platform. Your data is isolated by tenant and is not shared with other tenants. We implement strict technical and administrative measures to ensure data isolation.

Legal Requirements

We may disclose your information if required by law, court order, or government regulation, or if we believe disclosure is necessary to protect our rights, protect your safety or the safety of others, or investigate fraud.

Data Security

We implement industry-standard security measures to protect your information:

  • Encryption in transit (HTTPS/TLS) and at rest
  • Secure authentication and authorization
  • Regular security assessments and updates
  • Access controls and audit logging
  • Tenant data isolation and Row Level Security (RLS)

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

SMS / Text Messaging

Pixel Dispatch and the tenant businesses (service providers) you work with may send SMS/text messages to the phone number you provide if you opt in to receive them.

Phone Number Usage

Phone numbers are used primarily for job status updates from tenant businesses to clients (fast communications about job progress), as well as operational, transactional, security, and service-related communications, including:

  • Job status updates and project progress notifications
  • Account notifications and security alerts
  • Delivery notifications about project deliverables
  • Two-factor authentication (2FA) codes
  • Service-related communications such as review requests

Sender Identity

SMS messages may be sent by Pixel Dispatch or the tenant business (service provider) you are working with. Messages will clearly identify the sender.

Marketing SMS

Review requests (asking for feedback on tenant services) are considered promotional/marketing messages. These are included in the same opt-in as operational messages. You must explicitly opt in to receive SMS messages, including review requests.

No Third-Party Marketing

Phone numbers and SMS consent are NOT sold or shared with third parties for marketing purposes. Phone numbers are only shared with service providers (such as Twilio) to deliver messages on our behalf.

Message Frequency

Message frequency varies based on your account activity and the services you use. Job status updates are sent as your projects progress. Other messages are sent as needed for account security and service delivery.

Opt-Out Instructions

You can opt out of SMS communications at any time by:

  • Replying "STOP" to any SMS message
  • Replying "HELP" for assistance
  • Updating your communication preferences in your account settings

Message and Data Rates

Standard message and data rates may apply to SMS/text messages depending on your mobile carrier plan. You are responsible for any charges incurred from your mobile carrier for receiving text messages. Pixel Dispatch does not charge you for sending or receiving these messages.

Data Retention

SMS consent records (including timestamp, source, disclosure text, and IP address) are retained for at least 5 years for compliance purposes and to demonstrate consent if needed.

Your Rights and Choices

Access and Update

You can access and update your account information at any time through your account settings.

Data Deletion

You can request deletion of your account and data by contacting us. We will delete your data in accordance with applicable laws, subject to our legal retention obligations.

Data Portability

You can export your data in a machine-readable format by contacting us.

Cookies

You can control cookies through your browser settings. Note that disabling cookies may affect the functionality of our platform.

Opt-Out

You can opt out of marketing communications by following the unsubscribe instructions in our emails or by contacting us.

Data Retention

We retain your information for as long as your account is active or as needed to provide services, comply with legal obligations, resolve disputes, and enforce our agreements. When you delete your account, we will delete or anonymize your data in accordance with applicable laws.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. We ensure appropriate safeguards are in place for such transfers.

Children's Privacy

Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us through our contact form and use "Privacy" as the subject.