Privacy Policy

1. Who processes your data

PixelBrothers s.r.o., IČ 09835423, DIČ CZ09835423, Kopanina 464/10, 155 00 Praha (“we” or “PixelBrothers”). Data-protection contact: info@pixelbrothers.cz.

We act in two roles:

• As a controller for the personal data of visitors to this website (enquiries, chat on our site, operational logs).
• As a processor for data our customers (website operators) collect from their visitors through PixelChat. The controller of that data is always the operator of the given website; we process it only on their instructions.

2. Data processed on this website

• Website visit: technical logs (IP address, browser type, time) for operation and security. Legal basis: legitimate interest.
• Contact / enquiry: when you write to us, we process the data you provide to handle your request. Legal basis: pre-contractual steps / legitimate interest.
• Chat widget on this website: works the same way as for our customers – see below.

3. PixelChat as a service (processor role)

When a website operator deploys PixelChat, we are their processor. On the controller’s behalf we may process, in particular:

• conversation content (visitor messages and operator/AI replies), time and language;
• a signed anonymous visitor identifier (stored in the browser) so a person’s messages stay linked;
• the IP address and approximate location derived from it (city/country), and the URL of the visited page;
• optionally contact details from a lead form (e.g. email), if the visitor provides them;
• a conversation rating, if the visitor gives one.

The purpose is running the chat and customer support on the controller’s website. We do not use this data for our own purposes – we do not sell it, profile on it, or share it with anyone other than the recipients listed below.

4. Where and how long we keep data

• Location: data is stored in a data centre in the European Union (Hetzner, Germany).
• Backups: daily encrypted backups with rotation (14-day retention).
• Retention: the controller sets a retention period for conversations – closed conversations are deleted automatically once it elapses. Data on this website is kept only for as long as necessary.

5. Recipients and sub-processors

Our sub-processors may access the data to the extent necessary:

• Hetzner Online GmbH – hosting and storage (Germany, EU).
• Cloudflare – attack protection and content delivery (transfers safeguarded by Standard Contractual Clauses).
• AI provider (Anthropic, OpenAI or Google) – only if the controller enables the AI assistant, and only to the extent needed to generate a reply.
• Email (SMTP) provider – to send notifications and transcripts, if enabled.

We have appropriate data-processing agreements in place with all sub-processors.

6. Cookies and local storage

The PixelChat widget uses functional browser storage (localStorage / sessionStorage) – e.g. the anonymous visitor identity and the chat window state. It is not used for marketing or cross-site tracking.

The operator can enable a private mode in which nothing is written to storage until the visitor opens the chat – this helps with consent requirements.

7. Your rights

Regarding your personal data you have the right of access, rectification, erasure, restriction, portability, objection, and to withdraw consent. You also have the right to lodge a complaint with a supervisory authority (in the Czech Republic, the Office for Personal Data Protection, uoou.gov.cz).

• For data where we are the controller (this website), contact us at info@pixelbrothers.cz.
• For chat data on another operator’s website, the controller is that operator – exercise your rights with them; we will assist them.
• Inside the chat window, the settings (gear icon) offer “Delete conversation on this device” and a transcript download.

8. Security

• all traffic over an encrypted connection (HTTPS/TLS) with HSTS enforced;
• sensitive data (API keys, mailbox passwords) encrypted at rest (AES-256-GCM);
• operator passwords never in readable form (scrypt), optional two-factor authentication;
• strict separation of each customer’s data, login rate-limiting, and abuse protection (Cloudflare, WAF).

Conversation transcripts are not end-to-end encrypted – the operator has to read them to reply.

9. Changes and contact

We may update this policy; the current version is always on this page with its effective date. For any privacy question, contact info@pixelbrothers.cz.