This Privacy Policy explains what personal information Pixel Route (Pvt) Ltd (company registration no. PV00372199), trading as Pyxel Route, of Colombo 09, Sri Lanka ("we", "us") collects when you use https://pyxelroute.com or our products, why we collect it, and what we do with it. We collect as little as we can and we don't sell it. Ever.
1. Information we collect
Information you give us:
- Contact details, such as your name, email address, phone number and company, when you fill in a form, email us or request a demo.
- Account details, such as your login email and profile, when you sign up for one of our products.
- Billing details, such as your billing name and address and a record of what you bought. Card numbers are entered directly with PayHere and never reach our servers.
- Content you put into our products, such as customer records, bookings or documents.
Information collected automatically:
- Technical data, such as IP address, browser type, device and pages visited, collected through server logs and privacy-respecting analytics.
- Cookies needed to keep you signed in and remember preferences. See section 6.
2. How we use it
- To reply to enquiries and demo requests.
- To provide, maintain and support the products you use.
- To process payments, send invoices and keep accounting records.
- To keep our services secure and prevent fraud and abuse.
- To improve our website and products, using aggregated data wherever possible.
- To send service messages about your account. We only send marketing emails if you've agreed to them, and every one has an unsubscribe link.
3. Who we share it with
We don't sell or rent personal information. We share it only with:
- PayHere, to process payments securely.
- Service providers that host or run parts of our services for us, such as cloud hosting, email delivery and analytics. They may only use the data to provide their service to us.
- AI model providers, for AI features you choose to use, limited to the content needed to produce the result.
- Authorities, when the law requires it, or to protect our rights, our customers or the public.
- A buyer or successor, if our business is sold or merged, under the same privacy commitments.
4. Data you put into our products
When a business uses our products to manage its own customers (for example guest bookings in Book-ah or student records in Pyxel CRM), that business decides what data is collected and why. We process that data on its behalf and according to its instructions. If you are one of its customers, please contact that business first about your data.
5. How we protect it
We use encryption in transit (HTTPS), access controls, and reputable infrastructure providers. Only people who need access to do their job get it. No system is perfectly secure, but we take reasonable technical and organisational steps to protect your information, and we'll tell affected users promptly if a breach puts them at risk.
6. Cookies
We use a small number of cookies and similar technologies:
- Essential cookies, which keep you signed in and make forms and checkout work.
- Preference storage, which remembers things like whether you've unlocked a walkthrough in this browser session.
- Analytics, which tell us which pages are useful, in aggregated form.
You can block or delete cookies in your browser settings. Some features may not work without essential cookies.
7. How long we keep it
We keep personal information only as long as we need it for the purposes above. Enquiries are kept for up to two years. Account data is kept while your account is active and deleted within 90 days of closure, unless you ask us to delete it sooner. Billing records are kept as long as tax and accounting law requires.
8. Your rights
You can ask us to show you the personal information we hold about you, correct it, delete it, or stop using it for marketing. Email hello@pyxelroute.com and we'll respond within 30 days. We may need to confirm your identity first. These rights apply under the Personal Data Protection Act, No. 9 of 2022 of Sri Lanka and other laws where applicable.
9. International transfers
Some of our service providers store data outside Sri Lanka. When that happens, we choose providers with strong security and contractual protections for your information.
10. Children
Our services are for businesses and are not directed at children under 18. We don't knowingly collect information from children.
11. Changes to this policy
We may update this policy. The date at the top shows the latest version. If a change is significant, we'll let account holders know by email.
12. Contact
Questions about privacy: hello@pyxelroute.com. Post: Pixel Route (Pvt) Ltd, Colombo 09, Sri Lanka.