PixelIslandAIPrivacy Policy
PixelIslandAI ("PixelIslandAI", "we", "us") is a web app that helps businesses plan, write, design and publish their social media, and find and contact new opportunities (buyers, partners, stockists and listings). This policy explains what information we collect, how we use it, who we share it with, and the choices you have. It applies to the app at this address and to the people who use it ("users"), and also explains how we handle information about people and businesses the app finds or contacts on a user's behalf.
1. Information we collect
From users
- Account information: your name and email address, when you sign in with an emailed link or with Google, and your role in each business account.
- Business content you add: details about your business, documents and website pages you add during setup, product facts you confirm, the posts, captions, designs and messages the app writes for you, and photos and videos you add or connect.
- Connections you choose to make: Google Drive and Google Sheets, Gmail (to send email), your Facebook Page, Instagram, TikTok, YouTube, LinkedIn and X accounts (to publish posts), Metricool. We store the access tokens for these connections encrypted.
- Activity and usage: what you approve, edit, send or change in the app (kept as an activity history for your team), and how much AI processing each account uses.
About people and businesses the app finds or contacts (the Opportunity Engine)
- Public web pages, public posts, feeds and listings that match the plan a business has approved, and pages a user chooses to add.
- Contact details only when they are published on those pages (for example a business's own email address, or the phone number on a property listing). The app never guesses or buys contact details for private individuals.
- Messages sent to them on the business's behalf, and replies they send back.
- Opt-out requests, which we keep (as a one-way code, not readable text) so that address is never contacted again.
2. Data from Google
If you connect a Google account, PixelIslandAI asks only for the permissions it needs, and only when you choose a feature that uses them:
| Permission | What we do with it | What we don't do |
|---|---|---|
| Google sign-in (name, email) | Sign you in and show who did what in your team's activity history. | Use it for anything else. |
Google Drive: files the app creates or you pick (drive.file) | Create your business's PixelIslandAI folder and posting sheet; save your photos, designs and backups there; read files you pick with Google's file picker. | See any other file in your Drive. |
| A Drive folder you share with our service account (read-only) | Copy the photos and videos in that folder (and new ones you add later) into your PixelIslandAI folder, so posts can use them. | Change or delete anything in your folder; see anything you didn't share. |
Gmail: send email on your behalf (gmail.send) | Send the emails you approve, or that you've chosen to let the app send automatically, from your address, to businesses that publish a contact address, and follow-ups to them. | Read, search, label or delete anything in your mailbox. We cannot see your inbox. |
2b. Data from Facebook, Instagram, TikTok, YouTube, LinkedIn and X
If you connect your own social media accounts, PixelIslandAI uses each platform's official login and asks only for what's needed to publish the posts you approve:
| Platform and permission | What we do with it | What we don't do |
|---|---|---|
Facebook: the Pages you manage, and publishing to them (pages_show_list, pages_manage_posts, pages_read_engagement, business_management) | Show you your Pages so you can choose one, and publish or schedule your approved posts on it. | Read your personal profile, friends or messages; post anywhere else. |
Instagram: your professional account (instagram_business_basic, instagram_business_content_publish) | Show which account is connected and publish your approved posts to it. | Read your messages; follow, like or comment for you. |
TikTok: your account (user.info.basic, video.publish, video.upload) | Show which account is connected and publish the posts you approve there, with the visibility and settings you choose for each post. | Post anything you haven't approved with its TikTok settings; read your messages. |
LinkedIn: your name and posting (openid, profile, w_member_social; for company Pages w_organization_social, r_organization_admin) | Show which profile or Page is connected and publish your approved posts there. | Read your connections, messages or feed. |
X: your account and posting (users.read, tweet.read, tweet.write, media.write, offline.access) | Show which account is connected and publish your approved posts with their images or video. | Read your messages; follow, like or repost for you. |
YouTube: uploading videos (youtube.upload) | Upload your approved videos and schedule when they go public. | Manage, edit or delete your other videos, comments or playlists. |
We keep the access tokens these platforms give us, encrypted, and use them only for the above. You can disconnect any of them in the app at any time, or remove PixelIslandAI's access in the platform's own settings; see also how to delete your data.
3. How we use information
- To run the app: draft, check, design, schedule and publish your posts; find, score and contact opportunities under the plan you approve; read replies and alert your team.
- To keep it safe and working: sign-in, permissions, backups, error logs, preventing abuse, honouring opt-outs.
- To limit cost: each business account has a monthly AI budget, so we record AI usage per account.
- To talk to you about your account (sign-in links, alerts you've asked for, important changes).
We do not sell personal information, and we do not use it for advertising.
4. AI processing
PixelIslandAI uses Anthropic's Claude models through Anthropic's commercial API to write and check text, look at your photos, and read pages and replies. The content needed for each task is sent to Anthropic for processing. Under Anthropic's commercial terms, content sent through the API is not used to train their models by default. Nothing the AI writes is posted or sent until it has passed the checks you've set and, where you've chosen, your approval.
5. Who we share information with
We share information only with the service providers that run the app for us, each under their own security and privacy commitments, and only as needed to provide the service:
- Render (hosting the app), Supabase (our database), GitHub (a scheduled job that wakes the app; no personal data).
- Anthropic (AI processing; see section 4).
- Google (sign-in, Drive, Sheets, Gmail, YouTube, at your request).
- Meta (Facebook and Instagram), TikTok, LinkedIn and X, to publish your approved posts, if you connect them.
- Resend (sign-in emails, alerts to your own team, and receiving replies to the app's reply addresses).
- Metricool (publishing your approved posts, if you connect it).
We may also disclose information if the law requires it, to protect people's rights and safety, or as part of a sale or reorganisation of the business (with this policy continuing to apply).
6. People and businesses we contact on a user's behalf
If you received a message sent through PixelIslandAI, it came from the business named in it, which uses our app. We found your details because they were published publicly (for example on your business's website, a listing or a public post). Every email to a business includes the sender's name, business and postal address and a way to opt out. To stop all contact, reply "no thanks" or use the unsubscribe link: your address is then blocked for that business straight away. You can also ask us at info@pixelisland3d.com to block your address for every business on PixelIslandAI, or to delete what we hold about you.
The app never sends automated email, WhatsApp or text messages to private individuals who haven't opted in, and never automatically replies to other people's posts or messages on social networks or forums. (It does publish a business's own approved posts to that business's own social accounts, through Metricool, when the business sets that up.)
7. Where information is stored and for how long
- Your business's working files are stored on our servers and backed up to your own Google Drive, which you control.
- Sign-in, team, connection and Opportunity Engine data are stored in our database. Connection tokens are encrypted.
- We keep information for as long as your account is active. When you ask us to delete an account, we delete it from our systems within 30 days (copies in your own Google Drive stay yours to keep or delete).
- Opt-out records are kept so the opt-out keeps working.
Our providers may process information in countries other than yours. Where the law requires it, we rely on appropriate safeguards for those transfers.
8. Security
Connections to the app use HTTPS. Access tokens for your connected accounts are encrypted at rest. Each business account's data is kept separate, and access inside an account depends on each person's role. No system is perfectly secure; if we learn of a breach that affects you, we will tell you as the law requires.
9. Your choices and rights
- Disconnect Google, Gmail or Metricool at any time from the app; you can also remove PixelIslandAI's access in your Google account's security settings.
- Ask us for a copy of your information, to correct it, or to delete it, by writing to info@pixelisland3d.com. Depending on where you live (for example the EU, UK or California), you may have further rights, including to object to processing or to complain to your data protection authority.
- Turn automatic sending off, or switch the Opportunity Engine's dry run on, at any time (account owners).
10. Children
PixelIslandAI is a business tool and isn't meant for anyone under 16. We don't knowingly collect information from children.
11. Changes
We'll update this page when our practices change and change the date at the top. If a change is significant, we'll tell account owners in the app or by email before it takes effect.
12. Contact
Questions or requests: info@pixelisland3d.com.