Privacy policy

PixiCall is in early access. Right now the website collects only what you send us through the waitlist, the contact form, and the updates form. This policy explains what we keep, why, and how to have it removed. Questions go to hello@pixicall.com.

What we collect today

Waitlist: your name, email, business type, country, and phone number if you add one. Contact form: your name, email, and message. Updates form: your email. We also process your IP address for a short time to block abuse and repeated form submissions, and our host keeps standard server logs.

Analytics

We use Vercel Web Analytics and Speed Insights to count page views and measure page speed. They do not use cookies and do not build a profile of you across sites. The site sets no advertising or tracking cookies.

How we use it

We use your details to tell you when early access opens, to reply to your message, and to send the product updates you asked for. We do not sell or share your personal information for cross-context behavioral advertising, and we do not use it to train AI models.

Who processes it

Vercel hosts the website and runs the analytics. Supabase stores the waitlist and messages in the United States. When we start sending email, Resend delivers it. The full list is on the Subprocessors page.

How long we keep it

We keep waitlist and update sign-ups until you ask us to remove them, or until 12 months after early access opens if you don't create an account. We keep contact messages for up to 24 months.

Your choices and rights

Email hello@pixicall.com to see, correct, or delete your details, or to stop all email from us. We answer within 30 days. Depending on where you live, laws such as the CCPA/CPRA, PIPEDA, and Quebec's Law 25 give you these rights, and you can complain to your local privacy regulator.

When the service opens

Once businesses can create accounts, PixiCall will also handle call audio, transcripts, messages, and account data for those businesses. Callers hear an AI and recording disclosure on every call. Owners can turn recording off, but they cannot turn the disclosure off. Medical accounts keep data for 30 days by default and leave health details out of text messages. We will update this policy before that starts.

Google Calendar

If a business connects Google Calendar, PixiCall requests only the calendar.events and calendar.freebusy scopes. It reads free/busy times on the calendars the business selects, which do not include the titles of other events. It creates, updates, and deletes only the appointments PixiCall books. A normal event shows the service, the customer's first name, and phone number. A medical or HIPAA-mode business shows only “New patient appointment — details in PixiCall,” with no health details. The Google refresh token is encrypted with AES-256-GCM and is not sent to the browser. Disconnecting, or deleting the account, revokes that token at Google and deletes PixiCall's copy.

PixiCall's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Children

PixiCall is a service for businesses. It is not meant for anyone under 16, and we do not knowingly collect their information.

Changes

If we change this policy, we update the date at the top of this page. If a change is significant, we email the people on the waitlist first.