Privacy Policy

Last updated: August 28, 2026

This Privacy Policy explains how Pixel Systems AB ("Pixel," "we," "us," or "our") processes personal data in connection with the Pixel website, dashboard, APIs, and related services (together, the "Service"). It applies to account holders and to individuals whose information we receive through the Service.

If you have signed a separate data processing agreement or service agreement with Pixel, that agreement governs the processing it covers, and this Privacy Policy applies only where not contradicted by it.

1. Our role

For account, billing, support, and usage data we collect about you as a Pixel customer or user, Pixel is the data controller.

For content you submit to the Service for analysis ("Submitted Content") and any personal data it contains, Pixel typically acts as a processor on your behalf. In that case, you are the controller and decide how the content is used. Our role is set out in more detail in any data processing agreement between us.

2. Information we process

Account and contact data. Name, email address, organization, role, and similar information you provide when creating an account or interacting with us.

Usage and technical data. Logs of API calls, dashboard activity, timestamps, IP address, device and browser information, and performance and diagnostic metrics.

Submitted Content. Images, files, and associated metadata you submit to the Service, together with the analysis results we return.

Communications. Messages you send to us, including support requests and feedback.

Cookies and similar technologies. Used on our website and dashboard to keep you signed in, remember preferences, and secure the Service. We do not use cookies or similar technologies for analytics or advertising. Our Cookie Policy sets out what we store, what each group is for, and how long it lasts.

3. Why we process it and on what basis

We process personal data to:

• Provide, operate, secure, and support the Service (performance of a contract).
• Process Submitted Content and return analysis results (performance of a contract or on behalf of a controller customer).
• Improve and develop the Service and our detection technology, including model training on Submitted Content, subject to Section 4 below (legitimate interests).
• Monitor and prevent abuse, fraud, and security incidents (legitimate interests, legal obligation).
• Comply with applicable law (legal obligation).
• Send service and product communications, and, where permitted, marketing (legitimate interests or consent).

4. Use of Submitted Content to improve our models

We may use Submitted Content to evaluate, improve, develop, and train our detection technology. Before use for training, we take reasonable steps to de-identify the content and remove direct identifiers where feasible. Submitted Content is not sold, made publicly available, or used to attempt to identify individuals.

Customers who require stricter handling, including a commitment that their Submitted Content will not be used to train or improve our models, may agree to such terms in a separate written agreement, which will override this section.

5. Sharing

We share personal data only:

• With service providers and sub-processors acting on our behalf under written confidentiality and data protection terms (such as cloud hosting, infrastructure, monitoring, communications, and payments).
• With professional advisers (legal, accounting, audit) under confidentiality.
• In connection with a corporate transaction, such as a merger, acquisition, or financing, subject to appropriate safeguards.
• Where required by law or to protect the rights, safety, or property of Pixel, our users, or others.

We do not sell personal data.

A current list of our material sub-processors is available on request.

6. International transfers

Pixel is based in Sweden. Personal data may be transferred to and processed in countries outside the EU/EEA. Where we make such transfers, we use appropriate safeguards, such as the European Commission's Standard Contractual Clauses, adequacy decisions, or other lawful mechanisms.

7. Retention

We retain personal data only for as long as needed for the purposes set out in this Policy, to provide the Service, to meet legal, accounting, or reporting requirements, and to resolve disputes. Retention of Submitted Content is governed by your account settings or the relevant agreement between us.

8. Security

We implement reasonable technical and organizational measures designed to protect personal data against unauthorized access, alteration, disclosure, and loss. No system can be guaranteed to be fully secure.

9. Your rights

Subject to applicable law, you may have the right to access, correct, delete, restrict, or object to the processing of your personal data, to data portability, and to withdraw consent where processing is based on consent. Where Pixel acts as processor for a customer, please direct such requests to that customer; we will support them in responding.

You may exercise your rights or contact us with privacy questions at the address below. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) or your local supervisory authority.

10. Children

The Service is not directed to children, and we do not knowingly collect personal data from individuals under the age of 13.

11. Changes

We may update this Privacy Policy from time to time. We will post the updated version with a new "Last updated" date and, for material changes, take reasonable steps to notify users.

12. Contact

Pixel Systems AB Data protection contact: dpo@pixelsystems.com