Privacy Policy

1. Who We Are

Pixu provides hosted and connected email infrastructure for teams, including shared mailboxes, AI-assisted drafting and routing, deliverability monitoring, analytics, and administration tools. In this policy, "Pixu", "we", "us", and "our" refer to the operator of pixu.in.

Contact us at privacy@pixu.in for privacy requests.

2. Information We Collect

We collect information needed to provide, secure, support, and improve the service:

• Account information, such as name, email address, organization name, role, login status, and approval status.
• Workspace configuration, such as domains, DNS records, mailboxes, department settings, rules, signatures, templates, brand guidelines, and integration settings.
• Email data processed through Pixu, including headers, sender and recipient addresses, subject lines, message bodies, attachments, labels, conversation state, drafts, delivery events, suppressions, bounces, complaints, unsubscribe events, and analytics.
• Connected account data when a user links Google, Outlook, IMAP, SMTP, or other mailbox providers, including provider account identifiers, granted scopes, encrypted access or refresh tokens, sync status, labels, and message metadata needed to operate the connection.
• AI usage data, including provider, model, token counts, prompts or retrieved context needed to generate replies, outputs, errors, latency, and usage attribution by tenant, mailbox, user, or platform key.
• Technical data, such as IP address, device and browser information, request logs, session data, security events, audit logs, and error diagnostics.
• Billing, support, and communications data, such as plan, invoices, usage limits, support messages, and emails sent to or from Pixu.

3. How We Use Information

We use information to:

• Provide hosted mailboxes, relay connections, Gmail or Outlook sync, SMTP sending, routing, forwarding, search, analytics, and reports.
• Generate AI drafts, summaries, routing suggestions, templates, and agent actions according to customer settings.
• Verify domains, monitor DNS, enforce sending safety gates, manage suppressions, process unsubscribe requests, and improve deliverability.
• Authenticate users, send magic links or invitations, enforce role-based access, and protect accounts under review.
• Track usage, apply quotas, administer billing, support customers, detect abuse, debug issues, and comply with legal obligations.

4. AI Processing

Pixu may send customer-selected prompts, email content, attachments, conversation history, mailbox settings, brand guidelines, or knowledge base snippets to configured AI providers when AI features are enabled. Customers can use their own provider keys, organization-level keys, platform-managed keys, or local models where available.

We do not use customer email content to train Pixu models unless a customer explicitly agrees in a separate written agreement. Third-party AI providers process data under their own service terms and data processing commitments.

5. Sharing and Subprocessors

We share information only as needed to operate the service, including with:

• Email infrastructure providers, DNS providers, storage providers, analytics infrastructure, payment processors, and support tooling.
• Mailbox providers such as Google or Microsoft when users connect those accounts.
• AI providers selected or enabled by the customer or Pixu administrator.
• Authorities or third parties when required by law, to protect rights and security, or to investigate abuse.

We do not sell customer email content.

6. Security

We use technical and organizational safeguards designed to protect data, including encryption in transit, encrypted storage for sensitive credentials where supported, access controls, audit logging, tenant scoping, and operational monitoring. No system is perfectly secure, and customers are responsible for managing user access, DNS, provider permissions, and lawful use of the service.

7. Retention

We retain account, tenant, email, analytics, audit, and billing data for as long as needed to provide the service, comply with legal obligations, resolve disputes, prevent abuse, and enforce agreements. Customers can request deletion or export of eligible data by contacting their workspace administrator or privacy@pixu.in.

8. Your Choices

• You can update account and mailbox settings in the dashboard.
• Administrators can disconnect mailbox providers, remove users, delete mailboxes, export reports, and configure retention where supported.
• You can opt out of non-essential marketing communications by using unsubscribe links or contacting us.
• Depending on your location, you may have rights to access, correct, delete, restrict, or port personal data.

9. Children

Pixu is a business service and is not intended for children under 13 or the minimum age required by local law. Do not use Pixu to knowingly collect children's personal data without proper authority and consent.

10. Changes

We may update this policy as the product, law, or our operations change. We will update the "Last updated" date above and, when changes are material, provide additional notice where appropriate.