Privacy Policy
Last updated May 30, 2026
This Privacy Policy describes how Pixel Beat Technology Limited ("Pixel Beat", "we", "us", or "our") handles personal information when you visit www.pixel-beat.org, engage our engineering and consulting work, or use any of our websites, applications, platforms, APIs, and related services (together, the "Services").
Pixel Beat is a Hong Kong technology company that designs and builds digital products, cloud infrastructure, and software platforms for enterprises. Some of what we build incorporates AI and machine-learning features; where it does, we do not use client data or user-submitted content to train general-purpose or foundation models unless you give us separate, explicit permission.
Your continued use of the Services signals that you accept the practices set out here. If any part of this Policy is unacceptable to you, please stop using the Services.
- We gather only the information we genuinely need to deliver, operate, secure, support, and bill for the Services.
- We never repurpose your personal data or uploaded materials for model training without your separate, explicit consent.
- Content you submit is safeguarded with encryption in transit and at rest where applicable, backed by strict internal access controls.
- Where a product supports accounts, you can delete yours in-product, and you may also ask us to access, correct, export, or erase your data.
- We do not sell your personal information, and we do not hand it to advertising brokers for their own purposes.
1. What Information We Collect
Our collection falls into three buckets: details you give us directly, information produced as you use the Services, and technical data captured automatically to keep the Services running, secure, and compliant.
- Registration and profile details such as your name, work email, username, hashed password, authentication identifiers, and role or company information
- Correspondence you send us, including support tickets, project briefs, survey responses, and general enquiries
- User Content — the prompts, documents, source code, designs, images, and other materials you upload or submit while using the Services
- Billing and transaction records, including subscription, invoicing, and payment details handled by us or our payment partners
- Technical and usage signals such as IP address, browser and operating system, device identifiers, timestamps, diagnostic and crash data, and interaction events
- Operational API metadata, including requested endpoints, response codes, latency, and rate-limit counters needed to run the Services reliably
When you opt into a third-party login, analytics, payment, or infrastructure feature, we may receive a limited set of data from that provider.
We do not deliberately seek out sensitive categories of personal information. We only handle such data where the law requires it, where it is needed to verify security, or where you choose to share it during support or a dispute.
2. How We Use Information
Personal information is used strictly for the legitimate operational, contractual, security, and legal purposes connected to providing the Services.
- Creating, authenticating, administering, and supporting accounts and engagements
- Delivering our websites, applications, platforms, APIs, and the project and support communications that go with them
- Handling subscriptions, invoices, payments, refunds, and our tax and accounting duties
- Safeguarding the Services — detecting abuse, preventing fraud, investigating incidents, and enforcing our agreements
- Keeping the Services dependable through troubleshooting, capacity monitoring, and quality improvements
- Meeting obligations under applicable law, lawful requests, court orders, and contractual commitments
Where information is aggregated or de-identified so that it can no longer reasonably identify a person, we may use it for analytics, capacity planning, product development, and abuse prevention.
We do not feed personal data or uploaded content into the training of general-purpose AI or foundation models without your separate, explicit consent.
3. Legal Bases for Processing
If you are in a region that requires a lawful basis for processing personal data, we rely on one or more of the recognized bases below, depending on what we are doing.
- Performance of a contract, where processing is needed to deliver Services you have requested
- Our legitimate interests, such as securing the Services, improving reliability, preventing misuse, and running our operations soundly
- Compliance with legal obligations, including tax, accounting, sanctions, and responses to lawful authority
- Your consent, where the law requires it — for example certain marketing, cookies, or optional features
Where we rely on consent, you can withdraw it at any time; doing so does not affect the lawfulness of anything we processed before the withdrawal.
7. Data Retention
We hold personal information only for as long as it is reasonably needed for the purposes in this Policy, unless the law requires or permits us to keep it longer.
How long we retain data depends on factors such as account status, legal requirements, fraud-prevention needs, tax and financial recordkeeping, ongoing support or disputes, and our backup cycles.
Once retention is no longer justified, we delete, anonymize, or securely isolate the information in line with our retention and disposal procedures.
8. Security Measures
We maintain administrative, technical, and organizational safeguards designed to protect the confidentiality, integrity, and availability of information.
- Encryption in transit and, where applicable, at rest
- Identity and access management, least-privilege permissions, and activity logging
- Hardened environments, monitoring, controlled backups, and a defined incident-response process
- Due-diligence reviews and contractual controls for the key subprocessors and infrastructure partners we depend on
No system connected to the internet can ever be guaranteed completely secure. You are responsible for keeping your credentials confidential and for using the Services carefully.
9. International Data Transfers
Because we operate with clients and infrastructure across borders, your information may be processed outside the place where you live.
Where the law requires it, we put appropriate safeguards in place for cross-border transfers, such as standard contractual clauses or equivalent mechanisms with our affiliates and service providers.
By using the Services, you understand that your information may be transferred to, stored in, and processed in Hong Kong and other jurisdictions where we or our service providers operate.
10. Children's Privacy
The Services are built for users who have reached the age of majority in their jurisdiction and are not directed at children under 13 (or the equivalent minimum age locally).
We do not knowingly collect personal information from children. If we discover that we have collected such information without verifiable parental consent, we will take reasonable steps to delete it.
11. Your Privacy Rights
Depending on where you are, you may have rights to access, correct, port, restrict, object to, or delete your personal information.
- Ask for access to the personal information we hold about you
- Ask us to correct information that is inaccurate or incomplete
- Ask us to delete your account and associated personal information, subject to legal exceptions
- Ask for an export or copy of certain information where this is available
- Object to or restrict particular processing activities where the law allows
- Withdraw consent where our processing relies on it
Where a product supports it, you can delete your account directly in-product. You can also contact us for help with access, correction, export, or deletion requests.
We may need to confirm your identity before acting on certain requests, and we may decline a request where the law permits.
12. Do-Not-Track Signals
Some browsers and devices offer a Do-Not-Track setting. Because there is still no agreed standard for honoring these signals, we do not currently respond to them in a consistent way.
If a recognized standard is adopted in the future and applies to our Services, we will update this Privacy Policy to explain how we respond.
13. California Privacy Notice
If you are a California resident, you may have additional rights under California privacy law, subject to the statute's limits and exemptions.
- The right to know the categories of personal information collected, used, disclosed, or shared
- The right to request deletion of personal information, subject to exceptions
- The right to correct inaccurate personal information
- The right not to be discriminated against for exercising your privacy rights
We do not sell personal information, and we do not share it for cross-context behavioral advertising as those terms are defined under California law.
14. Virginia Privacy Notice
If you are a Virginia resident, you may have rights under the Virginia Consumer Data Protection Act, subject to its exceptions.
- The right to confirm whether we are processing your personal data
- The right to access, correct, delete, or obtain a copy of certain personal data
- The right to opt out of targeted advertising, the sale of personal data, or certain profiling where applicable
We do not sell personal data, and we do not use your personal data or uploaded content to train general AI models without your separate, explicit consent.
15. Updates to This Policy
We may revise this Privacy Policy from time to time to reflect legal, operational, product, or technical changes.
When changes are material, we will update the effective date on this page and, where the law or a contract requires, give you additional notice.
16. Contact Us
If you have questions about this Privacy Policy, want to exercise a privacy right, or have a data-protection concern, please reach out.
- Company: Pixel Beat Technology Limited
- Website: www.pixel-beat.org
- Email: ops@pixel-beat.org
- Address: RM03, 24/F, Ho King Comm Ctr, 2-16 Fa Yuen St, Mong Kok, Hong Kong
17. How to Review or Delete Your Data
You can review, update, or delete certain account information through the relevant product settings or by contacting us.
Where a product supports it, a self-service account-deletion option is built in. If you make a deletion request by email, please include enough detail for us to verify it and locate the right account.
In some cases we may need to keep limited information for legal, accounting, fraud-prevention, dispute-resolution, or security reasons.
6. Social Logins and Third-Party Accounts
If you register or sign in using a third-party account, we receive the basic profile information that provider is authorized to share with us.
Your relationship with the third-party provider remains governed by that provider's own terms and privacy notice.
We use this information only to create or maintain your account, secure access, and provide related support.