Privacy

This policy explains in plain terms what data we collect, why, who we share it with and how to exercise your rights. It applies to the website pixelysion.com, to our clients' Cockpit and to the emails we send.

We comply with the Swiss Federal Act on Data Protection (FADP) and, where it applies, the EU General Data Protection Regulation (GDPR).

Who is responsible for your data?

Elysion, Pedro Rodrigues, Chemin de la Crosette 9, 1418 Vuarrens, Switzerland. Contact for any questions about your data: zeltyx.officiel@gmail.com.

Representative in the European Union (Article 27 GDPR): Not appointed.

What data do we collect?

• Visiting the website: IP address, type of device and browser, pages viewed. This technical data is needed for the website to work and to keep it secure.
• Contact form and free audit: name, business, trade, town or city, country, email, language, your message or your answers to the audit.
• Account and mission: name, email, business, trade, town or city, country, language, currency, password (stored in encrypted form, never readable by us), brief, files you send (logo, photos), messages, change requests, reports.
• Payment: amounts, chosen plan, payment and subscription history. Your card details are entered directly with Stripe: we never have access to them.
• Conversations with Pixel: your messages to the assistant. If you give your email address in them, we save a summary of the conversation so that we can get back in touch with you.
• Where your visit came from (advertising, search engine, partner website), only if you accept this in the cookie banner.
• Referrals: the referral code of the person who recommended you.

Why do we use it?

• To build your website and manage your subscription (performance of the contract): brief, mock-up, go-live, changes, invoicing, support.
• To respond to your enquiries (pre-contractual measures): contact, free audit, personalised proposal.
• To send you emails related to your mission: address confirmation, updates on each step, payments, reports.
• To follow up after an enquiry (legitimate interest): two follow-ups at most, with an unsubscribe link in every email.
• To measure our audience and the effectiveness of our ads (consent): only if you agree, and you can change your mind at any time.
• To protect the website against abuse (legitimate interest): usage limits, anti-bot field.
• To comply with our legal obligations: keeping accounting records.

We never sell your data.

Artificial intelligence

We use artificial intelligence as a working tool:

• Pixel, the assistant on the website and in the Cockpit, is an AI. It tells you so from the start of the conversation. Its answers may contain errors.
• Our AI tools help us analyse your brief, prepare the copy, the translations and a first mock-up of your website, and draft some replies and reports.
• To do this, the relevant information (your messages, your brief, your requests) is passed to an artificial intelligence service provider established in the United States, which acts on our behalf. This provider is contractually committed not to use this data to train its models.
• No decision with legal effects for you is made automatically: prices, payments, refunds and the go-live of your website are always approved by a member of our team. Content intended for publication on your website is reviewed before it is published.

Do not share sensitive data (health, bank details, passwords) in your conversations with Pixel.

Cookies and storage in your browser

On your first visit, a banner lets you accept or refuse audience measurement and advertising. Refusing is as easy as accepting, and nothing is switched on before you choose. You can change your choice at any time using the “Manage cookies” link at the bottom of every page.

Essential (always on):

• login to your Cockpit (session cookies);
• language (pxl-langue, nf_lang, 1 year), currency (pxl-devise), country (pxl-pays, 30 days), welcome animation already seen (pxl-vu);
• your choice in the cookie banner (pxl-consentement, 13 months);
• referral code if you arrive via a client's link (pxl-ref, 60 days);
• sign-up security (pxl-inscription, 2 days).

Audience measurement (with your consent): where your visit came from (pxl-utm, 90 days) and Google Analytics (traffic statistics).

Advertising (with your consent): Google Ads and Meta (Facebook, Instagram), to measure the effectiveness of our ads.

Who do we share your data with?

Only with service providers who help us deliver the service, who are bound by contract and required to keep it confidential:

• Netlify: website hosting;
• Supabase: database, accounts and files;
• Stripe: payments and invoices;
• Resend: sending emails;
• an artificial intelligence service provider (see above);
• Google and Meta: only if you accept audience measurement or advertising;
• our fiduciary or accountant, for accounting records.

We may also be required to disclose data to the authorities where the law requires it.

Transfers abroad

Some of these providers are established outside Switzerland and the European Union, in particular in the United States. These transfers are covered by recognised safeguards: the European Commission's standard contractual clauses (recognised by the Swiss Federal Data Protection and Information Commissioner) or the provider's certification under the Swiss–US and EU–US data protection framework (Data Privacy Framework).

How long do we keep it?

• Account, mission and subscription: for as long as our relationship lasts, then 3 years so that we can answer your questions.
• Payments and invoices: 10 years, as required by Swiss law.
• Contact requests, audits and conversation summaries: 3 years after the last exchange, then deleted automatically.
• Log of emails sent: 2 years.
• Unsubscribe list: for as long as necessary to respect your choice.
• Anti-abuse limits: the IP address is never stored in plain text, only in an encrypted form that changes every day and is deleted after 48 hours.

Security

Your data is transmitted in encrypted form (HTTPS). Access to the database is restricted by strict rules: each client sees only their own information, and only our protected control centre (our admin area) can access all of it. Passwords are encrypted and login links can only be used once.

Your rights

You can, at any time:

• find out what data we hold about you and obtain a copy of it;
• have it corrected or deleted;
• object to its use, in particular to follow-ups (unsubscribe link in every email);
• withdraw your consent to cookies (“Manage cookies” link);
• receive your data in a common format so you can pass it on elsewhere.

Write to us at zeltyx.officiel@gmail.com. We reply within 30 days. We may ask you to prove your identity.

If you believe your rights are not being respected, you can contact the Federal Data Protection and Information Commissioner (FDPIC, www.edoeb.admin.ch) or, if you live in the European Union, the data protection authority in your country.

Changes

We may update this policy, for example if we change provider. The date of the last update is shown at the top of the page. If there is a significant change, we will let you know by email.