Privacy Policy

1. Data controller

Pixera Marketing, Sociedad Limitada, with tax ID [PENDING: tax ID, registration in progress] and registered address in Madrid, Spain (hereinafter, "Pixera"), is the controller of the personal data collected on this website and platform.

Contact for privacy matters: hola@pixera.es.

2. Data we process

• Registration and access data: name, email address, and the identifier of your Google, Meta, Microsoft or TikTok account if you use social sign-in.
• Billing data: payments are processed through Stripe; Pixera does not store full card details.
• Content and usage data: the sites, stores and campaigns you create, and the technical information needed to provide the service (for example, access tokens to your Google Ads and Meta Ads accounts when you connect them).
• Contact data: if you write to us by email or through the website forms.

3. YouTube Studio sessions (browser-assisted automation, beta)

If you enable the YouTube community-posts beta feature, Pixera establishes an authenticated browser session in your Google account inside a persistent browser profile on our infrastructure (Frankfurt, Germany). This feature uses browser automation and is not part of the official YouTube API.

What we store:

• Encrypted browser session cookies: they are credentials and, being linked to your account, also personal data. Our records keep who connected them and when; if that user is deleted, the link to their identity is anonymized.
• The persistent browser profile that keeps the session alive so the automation works.
• The resolved, masked identity (channel name and partial account identifier) used to confirm the session acts on the correct channel.

What we do not store: your email, password and verification codes are used only during the connection process: they travel encrypted in transit, are consumed once and deleted on read. Pixera never persists passwords or two-factor secrets in plain text.

Notices you may receive: because the session signs in from a server in Frankfurt, Google may send you "new sign-in" alerts or ask you to confirm the device. This is expected and does not indicate unauthorized access.

Deletion and revocation: when you disconnect the session from the panel, Pixera immediately deletes the copy of cookies and the browser profile. Disconnecting your YouTube account also removes the full record in cascade. Note that the session remains valid on Google's servers until you sign out on all devices from your own Google account — we say so on the disconnect screen itself.

Recommendation: connect the session with a Google account that has an administrator role on the channel rather than the owner account, to limit exposure of your primary account. Compliance with YouTube's policies on published content remains your responsibility.

4. Purpose and legal basis

• Providing the service (accounts, websites, campaigns, billing): performance of the contract.
• Security and fraud prevention: legitimate interest.
• Our own commercial communications: consent (you may withdraw it at any time).
• Tax and legal obligations: compliance with legal obligations.

5. Data retention

We keep your data for the duration of the contractual relationship and, afterwards, for the limitation periods required by Spanish law before deletion.

6. Recipients and data processors

We do not share your data with third parties for their own purposes. We use providers acting as data processors that perform services for Pixera, including:

• Hosting and infrastructure: Render (USA).
• Payments: Stripe (USA).
• Advertising platforms: Google Ads and Meta Ads, only when you connect your own accounts.
• Domain registration and purchase: domain providers, only when you buy a domain through the platform.
• AI assistants for generating content you request.

7. International transfers

Some of the providers listed may involve data transfers outside the European Economic Area (USA). Those transfers rely on the appropriate safeguards required by the GDPR, in particular the Standard Contractual Clauses approved by the European Commission.

8. Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing, portability and withdrawal of consent at any time by writing to hola@pixera.es and attaching an identity document.

You also have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) if you believe we have not properly addressed your rights.

9. Data deletion and account closure

You may request deletion of your Pixera account and associated personal data at any time by writing to hola@pixera.es from your account email (or attaching an equivalent identity document).

We will process the request within a maximum of 30 days. Deleting the account removes your user profile, registration data, identifiers of linked social accounts (Google, Meta, Microsoft or TikTok), the sites and content created on the platform, and the connections to your advertising accounts, revoking the granted permissions and access tokens.

We may retain certain data where a legal or tax obligation requires it, for example billing data for the limitation periods required by Spanish law (see section 4).

If you only wish to unlink a specific platform (for example, your Meta account) without closing your Pixera account, you can disconnect it from the panel settings or request it at the same email.

10. Minors

The platform is not directed at minors and we do not knowingly collect data from minors.

11. Cookies

We use strictly necessary cookies and technical storage for the website and platform to work: keeping you signed in, remembering your authentication preferences and ensuring service security. These cookies do not require consent under current regulations.

With your consent we also use Google Analytics 4 analytics cookies (_ga, _ga_*) to obtain aggregate usage statistics for the website and portal. They are only installed if you accept in the cookie banner; if you decline, Analytics runs in cookieless mode. Your choice is remembered for one year and you can change it at any time by reopening the cookie banner.

You can block or delete cookies from your browser settings, though this may affect how the platform works.

12. Security

We apply appropriate technical and organizational measures to protect your data, including encryption of communications (HTTPS) and of sensitive credential storage.

13. Changes to this policy

We may update this policy to reflect legal or service changes. The current version will be published here with its update date.