1. Who we are
This service is operated by BytesPlatform ("we", "us"). When you message our WhatsApp number or interact with one of our chat widgets, we act as the data controller for the personal data you share with us during that conversation. Contact us at hello@pixiebot.co for any privacy-related question.
2. What data we collect
- Your phone number — provided by WhatsApp / Messenger / Instagram when you message us.
- The content of your messages — text, images, voice notes (transcribed), location pins, and uploaded files (logos, documents).
- Business details you share with the bot to build a website / chatbot / ad / report — business name, industry, services, pricing, opening hours, contact details for your own customers, etc.
- Payment records if you activate a paid service — Stripe handles card data; we receive only the payment status, the email and name on the receipt, and the amount.
- Technical metadata — message timestamps, the WhatsApp business number you reached us on, the channel (WhatsApp / Messenger / Instagram).
3. Why we use it (legal bases)
- To deliver the service you asked for (Art. 6(1)(b) GDPR — performance of a contract). Generating a website needs your business name; sending you a payment link needs your phone number; etc.
- To improve the service and prevent abuse (Art. 6(1)(f) — legitimate interests). We log conversations so a human can step in when the bot gets stuck, and we use anonymised feedback signals to improve responses.
- To comply with legal obligations (Art. 6(1)(c)) — accounting / tax records for paid transactions.
4. Who else sees it
We use a small number of sub-processors to operate the service. None of them sell your data. Current list:
- Meta Platforms — WhatsApp / Messenger / Instagram messaging infrastructure.
- Anthropic and OpenAI — to generate replies. We send only the conversation context needed for the current reply; no data is retained for training under the API terms.
- Supabase — primary database for conversations, payments, generated sites.
- Netlify — hosting for generated websites.
- Stripe — payment processing. They are an independent controller for card data; see stripe.com/privacy.
- SendGrid — transactional email (lead notifications, receipts).
- Namecheap / NameSilo — domain registration (only if you choose a custom domain).
- Render / Vercel — server hosting.
5. How long we keep it
- Conversation history — kept while your account is active so the bot has context across sessions. Deleted on request, or after 24 months of inactivity.
- Generated assets (websites, chatbots, ads) — kept as long as you remain a paying customer. Removed within 30 days of cancellation unless you ask us to keep them longer.
- Payment records — retained for 7 years to meet accounting / tax obligations.
6. Your rights
Under GDPR (and equivalent laws in the UK, California, and other regions), you have the right to:
- Access the personal data we hold about you.
- Correct anything that's wrong.
- Ask us to delete your data ("right to erasure"). We'll delete everything except records we're legally required to keep (e.g. payment records for accounting).
- Receive an export of your data in a portable format.
- Object to processing or restrict it.
- Withdraw any consent you previously gave.
- Lodge a complaint with your local data protection authority.
To exercise any of these, email hello@pixiebot.co from the address on file or message us from the same WhatsApp number you used to sign up. We respond within 30 days.
7. International transfers
Our sub-processors operate primarily from the United States. Where we transfer data outside the EEA / UK, we rely on the European Commission's Standard Contractual Clauses with each sub-processor.
8. Cookies / tracking
This privacy notice covers the WhatsApp / chat conversation. The generated websites we build for our customers may use minimal cookies (e.g. for the activation banner on a preview site); each generated site carries its own privacy disclosure where applicable.
9. Children
This service is not intended for users under 16. If you believe a minor has provided us with data, contact us and we'll delete it.
10. Changes to this notice
When we change anything material we'll update the "last updated" date at the top. We'll also message you on WhatsApp before the new version takes effect if the change affects how we use data we already hold.
