Legal

Privacy Policy

Last updated May 30, 2026

This Privacy Policy describes how Pixel Beat Technology Limited ("Pixel Beat", "we", "us", or "our") handles personal information when you visit www.pixel-beat.org, engage our engineering and consulting work, or use any of our websites, applications, platforms, APIs, and related services (together, the "Services").

Pixel Beat is a Hong Kong technology company that designs and builds digital products, cloud infrastructure, and software platforms for enterprises. Some of what we build incorporates AI and machine-learning features; where it does, we do not use client data or user-submitted content to train general-purpose or foundation models unless you give us separate, explicit permission.

Your continued use of the Services signals that you accept the practices set out here. If any part of this Policy is unacceptable to you, please stop using the Services.

Summary of Key Points
  • We gather only the information we genuinely need to deliver, operate, secure, support, and bill for the Services.
  • We never repurpose your personal data or uploaded materials for model training without your separate, explicit consent.
  • Content you submit is safeguarded with encryption in transit and at rest where applicable, backed by strict internal access controls.
  • Where a product supports accounts, you can delete yours in-product, and you may also ask us to access, correct, export, or erase your data.
  • We do not sell your personal information, and we do not hand it to advertising brokers for their own purposes.

1. What Information We Collect

Our collection falls into three buckets: details you give us directly, information produced as you use the Services, and technical data captured automatically to keep the Services running, secure, and compliant.

  • Registration and profile details such as your name, work email, username, hashed password, authentication identifiers, and role or company information
  • Correspondence you send us, including support tickets, project briefs, survey responses, and general enquiries
  • User Content — the prompts, documents, source code, designs, images, and other materials you upload or submit while using the Services
  • Billing and transaction records, including subscription, invoicing, and payment details handled by us or our payment partners
  • Technical and usage signals such as IP address, browser and operating system, device identifiers, timestamps, diagnostic and crash data, and interaction events
  • Operational API metadata, including requested endpoints, response codes, latency, and rate-limit counters needed to run the Services reliably

When you opt into a third-party login, analytics, payment, or infrastructure feature, we may receive a limited set of data from that provider.

We do not deliberately seek out sensitive categories of personal information. We only handle such data where the law requires it, where it is needed to verify security, or where you choose to share it during support or a dispute.

2. How We Use Information

Personal information is used strictly for the legitimate operational, contractual, security, and legal purposes connected to providing the Services.

  • Creating, authenticating, administering, and supporting accounts and engagements
  • Delivering our websites, applications, platforms, APIs, and the project and support communications that go with them
  • Handling subscriptions, invoices, payments, refunds, and our tax and accounting duties
  • Safeguarding the Services — detecting abuse, preventing fraud, investigating incidents, and enforcing our agreements
  • Keeping the Services dependable through troubleshooting, capacity monitoring, and quality improvements
  • Meeting obligations under applicable law, lawful requests, court orders, and contractual commitments

Where information is aggregated or de-identified so that it can no longer reasonably identify a person, we may use it for analytics, capacity planning, product development, and abuse prevention.

We do not feed personal data or uploaded content into the training of general-purpose AI or foundation models without your separate, explicit consent.

4. When We Share Information

We do not sell personal information. We disclose it only where it is reasonably necessary and always with appropriate contractual, legal, or technical protection in place.

  • Service providers acting on our instructions — hosting, cloud, storage, communications, analytics, payment, security, and support vendors
  • Professional advisers such as auditors, insurers, and lawyers, all bound by confidentiality
  • Government bodies, regulators, courts, or law-enforcement agencies, where disclosure is required by law or proper legal process
  • Counterparties and their advisers in connection with a merger, financing, acquisition, reorganization, or sale of business assets

We do not pass personal information to data brokers or advertising marketplaces for their own independent commercial use.

5. Cookies and Similar Technologies

We use cookies, pixels, local storage, and comparable technologies to run the website and to improve how it functions, performs, and stays secure.

  • Strictly necessary technologies that power core operation, login sessions, security, and your saved preferences
  • Performance and analytics technologies that help us understand usage and keep the Services stable
  • Preference storage for choices such as language or interface settings

You can manage cookies through your browser or device settings. Turning some of them off may reduce the availability or performance of parts of the Services.

6. Social Logins and Third-Party Accounts

If you register or sign in using a third-party account, we receive the basic profile information that provider is authorized to share with us.

  • Profile fields permitted by the provider, such as your name, email address, profile image, or account identifier
  • The authentication tokens or confirmations needed to complete sign-in

Your relationship with the third-party provider remains governed by that provider's own terms and privacy notice.

We use this information only to create or maintain your account, secure access, and provide related support.

7. Data Retention

We hold personal information only for as long as it is reasonably needed for the purposes in this Policy, unless the law requires or permits us to keep it longer.

How long we retain data depends on factors such as account status, legal requirements, fraud-prevention needs, tax and financial recordkeeping, ongoing support or disputes, and our backup cycles.

Once retention is no longer justified, we delete, anonymize, or securely isolate the information in line with our retention and disposal procedures.

8. Security Measures

We maintain administrative, technical, and organizational safeguards designed to protect the confidentiality, integrity, and availability of information.

  • Encryption in transit and, where applicable, at rest
  • Identity and access management, least-privilege permissions, and activity logging
  • Hardened environments, monitoring, controlled backups, and a defined incident-response process
  • Due-diligence reviews and contractual controls for the key subprocessors and infrastructure partners we depend on

No system connected to the internet can ever be guaranteed completely secure. You are responsible for keeping your credentials confidential and for using the Services carefully.

9. International Data Transfers

Because we operate with clients and infrastructure across borders, your information may be processed outside the place where you live.

Where the law requires it, we put appropriate safeguards in place for cross-border transfers, such as standard contractual clauses or equivalent mechanisms with our affiliates and service providers.

By using the Services, you understand that your information may be transferred to, stored in, and processed in Hong Kong and other jurisdictions where we or our service providers operate.

10. Children's Privacy

The Services are built for users who have reached the age of majority in their jurisdiction and are not directed at children under 13 (or the equivalent minimum age locally).

We do not knowingly collect personal information from children. If we discover that we have collected such information without verifiable parental consent, we will take reasonable steps to delete it.

11. Your Privacy Rights

Depending on where you are, you may have rights to access, correct, port, restrict, object to, or delete your personal information.

  • Ask for access to the personal information we hold about you
  • Ask us to correct information that is inaccurate or incomplete
  • Ask us to delete your account and associated personal information, subject to legal exceptions
  • Ask for an export or copy of certain information where this is available
  • Object to or restrict particular processing activities where the law allows
  • Withdraw consent where our processing relies on it

Where a product supports it, you can delete your account directly in-product. You can also contact us for help with access, correction, export, or deletion requests.

We may need to confirm your identity before acting on certain requests, and we may decline a request where the law permits.

12. Do-Not-Track Signals

Some browsers and devices offer a Do-Not-Track setting. Because there is still no agreed standard for honoring these signals, we do not currently respond to them in a consistent way.

If a recognized standard is adopted in the future and applies to our Services, we will update this Privacy Policy to explain how we respond.

13. California Privacy Notice

If you are a California resident, you may have additional rights under California privacy law, subject to the statute's limits and exemptions.

  • The right to know the categories of personal information collected, used, disclosed, or shared
  • The right to request deletion of personal information, subject to exceptions
  • The right to correct inaccurate personal information
  • The right not to be discriminated against for exercising your privacy rights

We do not sell personal information, and we do not share it for cross-context behavioral advertising as those terms are defined under California law.

14. Virginia Privacy Notice

If you are a Virginia resident, you may have rights under the Virginia Consumer Data Protection Act, subject to its exceptions.

  • The right to confirm whether we are processing your personal data
  • The right to access, correct, delete, or obtain a copy of certain personal data
  • The right to opt out of targeted advertising, the sale of personal data, or certain profiling where applicable

We do not sell personal data, and we do not use your personal data or uploaded content to train general AI models without your separate, explicit consent.

15. Updates to This Policy

We may revise this Privacy Policy from time to time to reflect legal, operational, product, or technical changes.

When changes are material, we will update the effective date on this page and, where the law or a contract requires, give you additional notice.

16. Contact Us

If you have questions about this Privacy Policy, want to exercise a privacy right, or have a data-protection concern, please reach out.

  • Company: Pixel Beat Technology Limited
  • Website: www.pixel-beat.org
  • Email: ops@pixel-beat.org
  • Address: RM03, 24/F, Ho King Comm Ctr, 2-16 Fa Yuen St, Mong Kok, Hong Kong

17. How to Review or Delete Your Data

You can review, update, or delete certain account information through the relevant product settings or by contacting us.

Where a product supports it, a self-service account-deletion option is built in. If you make a deletion request by email, please include enough detail for us to verify it and locate the right account.

In some cases we may need to keep limited information for legal, accounting, fraud-prevention, dispute-resolution, or security reasons.