Privacy PolicyClear rules for your data

1. Who we are

YOOPixel LLC is a Wyoming limited liability company (United States). We provide software products, SaaS platforms, and professional services under the YOOPixel brand. For privacy requests, contact privacy@yoopixel.com or use our contact page. Where a merchant installs our storefront assistant on Magento or WooCommerce, the merchant is ordinarily the controller of shopper data on that store. YOOPixel LLC processes chat and connector data as a service provider in line with the merchant’s configuration and this policy.

2. Information we collect

We collect only what is needed to operate, secure, and improve our services.

• Account and organisation details: name, email address, company, role, billing information, and authentication identifiers when you register or join a client console.
• Project and discovery data: messages sent to YOO, discovery session content, project-analysis answers, uploaded context, and generated reports.
• Storefront assistant (shoppers): chat messages, the short conversation history supplied with each request, language, page URL and title, visible page text used for context, a browser session identifier, optional country signals, and product or navigation events (such as opening the assistant, product recommendations, add to cart, coupons, checkout assistance, and assisted orders).
• Storefront assistant (optional customer profile): if the merchant enables customer prefill, the assistant may receive first name, last name, email, phone, and shipping address from the logged-in store session. If prefill is disabled, we typically receive only a signed-in indicator and first name, or less.
• Merchant store connection: store URL, encrypted store API credentials after a successful connection, hashed connector tokens, webhook secrets, branding and tool settings, and aggregated storefront analytics associated with the connected store.
• Technical and usage data: IP address, browser and device information, pages viewed, referral URLs, and approximate location derived from IP address or CDN country headers.
• Communications: support tickets, booking requests, emails, and feedback.
• Payments: processed by our payment provider (for example Stripe). We do not store full card numbers on YOOPixel servers, and the storefront chat never collects card data.
• YOOPixel Cloud mobile apps (Android and iOS): account email and organisation context, access tokens stored in the device secure storage, files and photos you upload or back up, media-library metadata when you enable backup (with your permission), people labels and face-grouping data you manage, map and memory views derived from photo metadata, and technical data needed to sync and secure the app.

3. How we use information

• Provide, operate, and secure our website, console, licensing platform, hosting services, AI analysis features, YOOPixel Cloud mobile apps, and storefront assistants.
• Operate storefront chat: answer product and page questions, recommend catalogue items, suggest cart, coupon, or checkout actions that run in the shopper’s browser on the merchant’s store, and—where Support tools are enabled—look up order status through the store API using details the shopper provides in chat.
• Measure AI usage and attribute assisted commerce events to sessions for merchant analytics in the console.
• Produce discovery and project-analysis reports you request, including optional web research.
• Process payments, manage credits and subscriptions, and send transactional notices.
• Respond to support, booking, and sales enquiries.
• Improve reliability, prevent abuse, enforce rate limits, and detect fraud.
• Send product updates or marketing only with consent or where permitted by law.
• Operate YOOPixel Cloud mobile apps: sign-in, file and photo library access, optional automatic gallery backup, maps and memories views, people management, and AI-assisted photo features tied to your cloud account.

4. YOOPixel Cloud mobile apps

YOOPixel Cloud is our organisation file and photo library. The Android and iOS apps connect to the same account and storage as the web console.

• Sign-in and session: account email, organisation selection, and access tokens stored in the device secure storage to keep you signed in.
• Files and photos you upload, download, favourite, move, or delete through the app, including filename, size, and timestamps. When you upload images, associated metadata (such as capture date and, where present, location embedded in EXIF) may be stored with the file to support library features.
• Photo backup (optional): photo and video backup is a core function of YOOPixel Cloud. When you enable backup and grant the app permission to access photos and videos, the app scans your media library for items you have chosen to back up and uploads them to YOOPixel Cloud. Backup runs only while the feature is enabled. You can pause backup or revoke media access at any time in the app or your device settings. For occasional uploads we use the system photo or file picker rather than broad library access.
• Photo metadata and location: photos may contain embedded metadata (EXIF), including capture date and, where available, approximate geographic coordinates. Where this data is present, we use it to provide features such as maps and memories. Metadata is stored with your uploaded files in your organisation library.
• People and face grouping (when included in your plan): when this feature is enabled for your organisation, photos are analysed on YOOPixel servers to detect faces and suggest groupings. We store mathematical face embeddings produced by analysis to suggest grouping photos by person, along with the names you assign to people, linked to the relevant photos. Suggestions require your confirmation before a person is linked. If you rename or delete a person, or remove photos, linked data is updated or deleted in line with your actions and our retention rules. We may use a specialised face analysis or embedding service provider under appropriate contractual arrangements; we do not sell face data or use it for advertising purposes.
• AI-assisted features (when enabled): search, analysis, and YOO assistant features in YOOPixel Cloud may send the content you ask us to process (for example photo context, filenames, people labels, or your query) to vetted third-party AI providers solely to deliver that feature. We do not use your cloud library content to train public foundation models. See section 6 for more detail.
• Device and technical data: app version, operating system, network conditions for sync, and diagnostic logs needed to troubleshoot uploads.
• Permissions: media-library access when you enable backup; one-off uploads use the system photo or file picker. Notifications for backup progress when enabled; camera only when you choose to capture for upload.

5. Storefront assistants and connectors

Merchants connect a store using a one-time connection token. Credentials are stored in encrypted form. API secrets must not be exposed in public storefront HTML. Disconnecting or revoking a connection removes connection secrets and disables the embed. Cart, coupon, and checkout actions execute on the merchant’s storefront in the shopper’s browser. Contact fields used for checkout assistance require explicit consent in the widget before prefill. We do not retain full chat transcripts by default; each request includes the recent history needed to respond. Session analytics may retain counters, country, and—where provided—email or order identifiers for attribution. Historical analytics may remain after disconnect until deleted following a merchant or data-subject request.

6. Artificial intelligence and subprocessors

Certain features send prompts and related context to vetted AI and web-research providers solely to generate the responses or reports you request. This includes YOO, project analysis, storefront assistants, and—when enabled—YOOPixel Cloud photo search, analysis, and assistant features. For YOOPixel Cloud, we send third-party AI providers only the minimum content and context needed to deliver the feature you requested, under contractual safeguards. We do not use your private content to train public foundation models. Storefront chat may include the visitor’s message, recent turns, page or product context, limited profile fields when configured, and catalogue or order summaries returned from the merchant’s store. We do not list vendor names in this policy because our technical stack and providers may change; an up-to-date list of providers and processing categories is available on request at privacy@yoopixel.com. Provider log retention practices may vary by service and requested function. Providers process data under their own terms and may retain limited logs for security and abuse prevention. AI outputs may be incomplete or inaccurate—verify material decisions independently. Product recommendations depend on the merchant’s catalogue and store APIs.

7. When we share data

We do not sell personal information. We also do not sell files, photos, cloud library content, or face data. We share data only with:

• Infrastructure and tooling providers (hosting, email, analytics, and error monitoring) under appropriate contractual protections where required.
• AI and research providers, solely to deliver features you or the merchant have enabled.
• Payment processors, to complete transactions.
• The merchant’s commerce platform (Magento or WooCommerce), when the assistant or connector calls APIs the merchant has authorised.
• Professional advisers, where necessary to protect our rights or comply with law.
• Competent authorities, where legally required or to prevent harm, fraud, or abuse.

8. Retention

Account and billing records are retained for the life of the organisation relationship and as required for tax and legal obligations. Discovery sessions and reports follow your plan and console settings; specific reports may be deleted where the product allows. Storefront session analytics are capped and rotated in the ordinary course of operations. Merchants—and shoppers via the merchant or privacy@yoopixel.com—may request deletion of identifiable storefront records. Security and server logs are retained on an operational schedule. We continue to strengthen automated retention and deletion controls as the product matures; material changes will be reflected in this policy.

9. Your rights

Depending on your location, you may have rights to access, correct, delete, restrict, or export personal data, and to object to certain processing. Contact privacy@yoopixel.com to exercise these rights. Shoppers should also contact the merchant whose store they used. We will respond within a reasonable period. You may also complain to your local data-protection authority.

10. Account and data deletion

You can request deletion of your YOOPixel account and associated personal data from your account settings in the console or by contacting privacy@yoopixel.com. When you request account deletion, we delete personal data and stored content in your organisation workspace according to our retention and deletion procedures, except where the law requires us to retain certain records (for example billing or tax). Organisation administrators may delete files, photos, people labels, and backups from the console or mobile apps. Deletion requests are handled within a reasonable period; we will confirm when processing is complete or explain any lawful limitation.

11. Cookies and similar technologies

On yoopixel.com we use essential cookies for authentication, session security, and language preferences. The storefront assistant may store a session identifier in localStorage and/or short-lived cookies, and may keep a checkout draft in sessionStorage to continue a conversation. YOOPixel Cloud mobile apps store session tokens and preferences locally on your device using secure storage; backup metadata may be cached locally until upload completes. Optional analytics or marketing cookies on our marketing site, if used, will be disclosed through browser settings or a consent mechanism where required. You may clear site data in your browser; disabling essential cookies may limit console functionality.

12. Security

We apply industry-standard safeguards, including TLS in transit, access controls, least-privilege administration, encrypted connector credentials, and monitoring. Storefront embeds are designed so Magento and WooCommerce API secrets are not printed into public HTML. We continue to harden credential storage, connector security, and compliance documentation over time. No method of transmission or storage is perfectly secure; please use strong passwords and protect account credentials.

13. International transfers

YOOPixel operates with team members and infrastructure in more than one region. Where personal data is processed outside your country, we rely on appropriate safeguards—such as standard contractual clauses or equivalent mechanisms—where required.

14. Children

Our services are intended for businesses and professionals. Storefront assistants may appear on merchant shops open to the public. We do not knowingly collect personal data from children under 16 for YOOPixel accounts. Merchants remain responsible for the age-appropriateness of their own stores.

15. Changes to this policy

We may update this policy from time to time, including when new product capabilities materially change how personal data is handled. The “Last updated” date above reflects the current version. Material changes will be posted on this page. Continued use after an update constitutes acceptance where permitted by law.