Privacy Policy

Last updated: September 10, 2026

1. Introduction

This Privacy Policy describes how Pixelwand Studio Private Limited ("Pixelwand", "we", "us", or "our") collects, uses, and protects information in connection with the Pixelwand CRM platform and related services ("Service").

SMS Consent: By submitting a web form on our website, you consent to receive SMS text messages. Your phone number and consent information will never be sold, shared, or used for purposes other than the communications you consented to. Reply STOP to opt out at any time.

2. Information We Collect

2.1 Information You Provide Directly

When you complete a web form on our website or a website powered by Pixelwand CRM, we may collect:

  • Full name
  • Email address
  • Phone number (mobile)
  • Company name and job title
  • Any additional information you voluntarily provide in the form
  • Your consent to receive SMS communications and the date and time of that consent

2.2 Information Collected Automatically

When you visit our website, we automatically collect certain technical information including:

  • IP address and approximate geographic location
  • Browser type and version
  • Device type and operating system
  • Pages visited and time spent on pages
  • Referring URL
  • Date and time of your visit

2.3 SMS Communication Data

When you receive or send SMS messages through our platform, we collect:

  • Your mobile phone number
  • Message content and delivery status
  • Date and time of messages sent and received
  • Opt-in and opt-out records with timestamps

2.4 Google Account and Workspace Data

If you choose to connect your Google account (Gmail and/or Google Calendar), we access the following Google user data, strictly limited to the scopes you approve on the Google OAuth consent screen:

  • Basic account information — your Google account name, email address, and basic profile information (non-sensitive openid, userinfo.email, and userinfo.profile scopes), used to identify which account you connected and to sign you in when you use Google sign-in.
  • Gmail messages — email headers, bodies, and attachment data for the account you connect (restricted https://mail.google.com/ scope), used only to display your mail in the CRM inbox and to send mail as you when you compose from the CRM.
  • Calendar data — calendar events including titles, descriptions, times, and attendees for the calendars you select (sensitive https://www.googleapis.com/auth/calendar scope), used only for two-way sync between Google Calendar and the CRM calendar.
  • OAuth tokens — access and refresh tokens issued by Google for the scopes above, stored encrypted and used only to maintain the connections you enabled.

Connecting a Google account is optional. We only request these scopes after you explicitly start the connection flow (for example, Settings → Email accounts → Connect with Google or Settings → Google Calendar → Connect account), and you can revoke access at any time as described in Section 4.

3. How We Use Your Information

We use the information we collect for the following purposes:

PurposeData UsedLegal Basis
Sending call reminders and appointment notifications via SMSPhone number, name, appointment detailsYour express consent obtained via web form
Follow-up communications related to your inquiryName, phone, emailYour express consent
Operating and improving the Pixelwand CRM platformUsage data, technical dataLegitimate business interests
Maintaining opt-out records and honoring opt-out requestsPhone number, opt-out timestampLegal compliance (TCPA)
Preventing fraud and ensuring platform securityTechnical data, usage patternsLegitimate business interests
Displaying your Gmail in the CRM inbox and sending mail as you when you compose from the CRMGmail messages for the connected account (mail.google.com scope)Your express consent via the Google OAuth consent screen
Two-way sync between Google Calendar and the CRM calendarCalendar events for the selected calendars (calendar scope)Your express consent via the Google OAuth consent screen
Identifying the connected Google account and signing you in with GoogleGoogle account name, email, basic profile (openid, userinfo scopes)Your express consent via the Google OAuth consent screen
Complying with legal obligationsAll categories as requiredLegal obligation

4. Google API Data (Gmail & Calendar Integration)

Summary: If you connect Gmail or Google Calendar, we access only the Google data needed to provide the sync features you turned on, use it only for those features, store OAuth tokens encrypted, and never sell it, share it with third parties for unrelated purposes, use it for advertising, or train AI models on it. You can revoke access at any time from inside the CRM or from your Google account.

4.1 Scopes we request and why

The Google OAuth consent screen always shows the exact scopes requested. We request:

ScopeTypeHow we use it
https://mail.google.com/RestrictedRead incoming mail for the connected account into the CRM inbox (IMAP over XOAUTH2) and send outgoing mail as you when you compose from the CRM (SMTP over XOAUTH2). Full-mail access is required because Gmail IMAP/SMTP OAuth does not work with narrower scopes.
https://www.googleapis.com/auth/calendarSensitivePull events from the Google calendars you select into the CRM calendar and push CRM events and tasks you choose to sync to the selected Google calendar (two-way sync, including edits).
openid, https://www.googleapis.com/auth/userinfo.email, https://www.googleapis.com/auth/userinfo.profileNon-sensitiveIdentify which Google account was connected (display the account email and Connected status) and sign you in when you use Sign in with Google.

4.2 How Google data is used and stored

  • Use is limited to user-enabled features. Gmail data is used only to show your mail in the CRM inbox, link it to the relevant lead or contact, and send mail you author. Calendar data is used only to sync events between the selected Google calendar and the CRM calendar.
  • Synced copies live in your CRM workspace. Incoming mail synced from Gmail is stored as communication records linked to your leads; synced calendar events are stored as calendar records in your team workspace so the features work when you are offline and for audit history.
  • Tokens are stored encrypted. Google OAuth access and refresh tokens are stored encrypted in our database and transmitted only over TLS to Google's servers. They are never embedded in URLs, logs, or client-side code.
  • No human reads your Google data except as strictly necessary to provide support you request, comply with law, or prevent abuse — and never for advertising.

4.3 What we never do with Google data

  • We never sell Google user data.
  • We never share Google user data with third parties except as necessary to operate the sync (secure cloud hosting and infrastructure under contract), comply with law, or protect rights and safety as described in Section 6 — never for advertising or unrelated analytics.
  • We never use Google user data for advertising, ad targeting, or credit/employment/insurance eligibility decisions.
  • We never train generalized AI or machine-learning models on Google user data.

Pixelwand CRM's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4.4 Revoking access and deleting Google data

  • Disconnect inside the CRM at any time: for Gmail, delete or disconnect the connected email account (or use the Google disconnect option in Settings); for Google Calendar, use Disconnect in the Google Calendar settings. Disconnecting deletes the locally stored OAuth tokens for that connection and stops further syncing.
  • Revoke from your Google account: visit myaccount.google.com/permissions and remove Pixelwand CRM. This immediately invalidates our access even if you do not disconnect inside the CRM first.
  • Deletion on request: contact us at deependra.kumar@pixelwand.live to request deletion of synced Gmail or Calendar data and remaining tokens for your workspace. We delete the requested Google-derived data unless we must retain narrow records for legal compliance (see Section 7), in which case we tell you what was kept and why.

After revocation, previously synced copies already stored in your CRM workspace (for example, emails already linked to a lead) remain until you delete them or request deletion — we stop all new reads, sends, and syncs immediately.

5. SMS Messaging and TCPA Compliance

Important: We are committed to full compliance with the Telephone Consumer Protection Act (TCPA) and all applicable carrier guidelines. We only send SMS messages to individuals who have provided express written consent.

5.1 How We Obtain Consent

We obtain your consent to receive SMS messages through a web form on our website. The form clearly discloses:

  • That you are consenting to receive SMS messages
  • The types of messages you will receive
  • That message and data rates may apply
  • How to opt out by replying STOP
  • A link to this Privacy Policy and our Terms and Conditions

5.2 Consent Records

We maintain detailed records of all consent obtained including the date, time, IP address, and exact language of the consent disclosure at the time of opt-in. These records are retained for a minimum of 4 years in compliance with TCPA requirements.

5.3 Opting Out

After opting out, you will receive one final confirmation message and no further SMS messages will be sent. Opt-out requests are processed within 24 hours. We retain your opt-out record permanently to ensure we do not send you further messages.

5.4 Getting Help

Reply HELP to any SMS message or email deependra.kumar@pixelwand.live for assistance with SMS communications.

6. Sharing of Information

We do not sell, rent, or trade your personal information to third parties. We may share your information only in the following limited circumstances:

6.1 Service Providers

We share information with trusted service providers who assist in operating our platform, including:

  • Twilio Inc. — SMS and voice communication delivery. Subject to Twilio's privacy policy.
  • Cloud hosting providers — for secure data storage and platform infrastructure
  • Analytics providers — for platform improvement and performance monitoring

All service providers are contractually required to use your information only to provide services to us and to maintain appropriate security measures. Google user data (Gmail, Calendar, and account information obtained through Google APIs) is never shared with third parties for purposes unrelated to providing the sync features you enabled, and is never used for advertising or analytics. Any use or transfer of Google user data adheres to the Google API Services User Data Policy, including the Limited Use requirements (see Section 4).

6.2 Legal Requirements

We may disclose your information if required by law, court order, or government authority, or if we believe disclosure is necessary to protect the rights, property, or safety of Pixelwand, our users, or the public.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of our business, your information may be transferred as part of that transaction. We will notify you of any such change via email or prominent notice on our website.

7. Data Retention

Data TypeRetention PeriodReason
Contact information (name, email, phone)Duration of business relationship + 3 yearsBusiness records and dispute resolution
SMS consent recordsMinimum 4 years from consent dateTCPA compliance requirement
Opt-out recordsPermanentlyTo prevent re-messaging opted-out numbers
SMS message logs2 yearsOperational records and compliance
Technical and usage data12 monthsPlatform improvement and security
Google OAuth tokens (access and refresh tokens)Until you disconnect or revoke access, then deleted promptlyMaintaining only the connections you enabled
Synced Gmail and Calendar dataUntil you delete the records or request deletion; syncing stops immediately on disconnect or revocationProviding inbox and calendar sync you enabled

8. Data Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, disclosure, alteration, or destruction. These measures include:

  • AES-256 encryption for data at rest
  • TLS 1.3 encryption for all data in transit
  • Encrypted storage of Google OAuth access and refresh tokens, transmitted only to Google's servers over TLS (see Section 4)
  • Role-based access controls limiting who can access personal data
  • Regular security assessments and vulnerability scanning
  • Multi-factor authentication for all systems handling personal data

While we take security seriously, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but commit to promptly notifying affected individuals in the event of a data breach.

9. Your Rights

You have the following rights regarding your personal information:

  • Access: Request a copy of the personal information we hold about you
  • Correction: Request correction of inaccurate or incomplete information
  • Deletion: Request deletion of your personal information, subject to our legal retention obligations
  • Opt-out of SMS: Reply STOP to any message or email us at any time
  • Revoke Google access: Disconnect Gmail or Google Calendar in Settings at any time, or revoke access at myaccount.google.com/permissions (see Section 4.4)
  • Do Not Sell: We do not sell personal information. No opt-out of sale is necessary.

To exercise any of these rights, please contact us at deependra.kumar@pixelwand.live. We will respond to all requests within 30 days.

10. Cookies

Our website uses cookies and similar tracking technologies to improve your browsing experience and analyse website traffic. You can control cookie settings through your browser. Disabling cookies may affect certain features of our website.

11. Children's Privacy

Our Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately at deependra.kumar@pixelwand.live and we will delete such information promptly.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date at the top of this page and, where appropriate, by sending a notification to the email address associated with your account. Your continued use of the Service after changes are posted constitutes your acceptance of the revised Privacy Policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: