Privacy Policy

PixelLearn is the controller of the personal data collected to create and manage your account, bill, and secure the service. The provider's legal identification details are set out in the legal notice.

Contact: contact@pixellearn.fr

When a training organization or a creator uses PixelLearn to train its own learners, it is the controller of those learners' data and PixelLearn acts as a processor on its instructions. A data processing agreement is available on request; the list of sub-processors is the one in Section 6.

This policy applies to all users of the platform, wherever they are located.

PixelLearn collects the following data when you use the platform:

• Name, email address and password (encrypted) when you sign up; your chosen language; confirmation that you accepted the terms and your age
• Content you create or import (courses, documents, exchanges with the AI studio)
• Progress data (completed lessons, quiz scores, exercise submissions)
• Payment and billing data (country, billing address, tax identification number where applicable) processed by Stripe; PixelLearn stores no card numbers
• Country inferred from your IP address when you visit, used to display prices in the right currency (see Section 4); it is not stored
• Connection and security data: IP address, browser, login sessions, audit logs, date and time
• With your consent only: product usage statistics (page views, events such as signing up or starting a payment)

Most of this data is necessary for the service: without it we cannot create your account or perform the contract.

Data is processed to:

• Provide and improve the online learning service — performance of the contract (Terms of Service)
• Manage your account and enrolments — performance of the contract
• Send you communications about your training, orders and renewals — performance of the contract and legal obligation
• Invoice, calculate and report applicable taxes, and issue certificates and legal documents — legal obligation
• Display prices in your currency and apply the pricing zone matching your country — performance of the contract and legitimate interest (fair pricing)
• Prevent fraud, keep the platform secure and track technical errors — legitimate interest
• Measure product audience (PostHog) — consent, which you may refuse or withdraw at any time without any effect on access to the service
• Send you marketing communications, where applicable — explicit consent, which you may withdraw at any time

The detected country and your billing country automatically determine the currency (euro or US dollar) and, outside the European Economic Area, the pricing zone applied to a subscription. This is not profiling about you personally: only your country is taken into account, and the detected country is not stored.

No other decision producing legal effects or similarly significantly affecting you is made solely by automated processing. The Pixel Create studio generates educational content at the user's request; it performs no scoring or automated decision-making about you.

• Account and content: for as long as your account is active; deleted on request (see Section 8).
• Invoicing and accounting: 10 years, in line with the legal obligation to keep accounting records.
• Prospects and customers: 3 years after the last contact or the end of the commercial relationship, for marketing.
• Login sessions (IP address, browser): deleted after 90 days of inactivity.
• Audit logs: the IP address is erased after 12 months; the log itself is kept for the traceability of administration actions.
• Attendance signatures: kept with the training file (proof of attendance), for the retention period of that file.
• Learner data of an organization or a creator: according to their instructions, as they are the controller.

PixelLearn never sells your personal data and does not share it for targeted advertising. It may be passed to the following processors, strictly as necessary for the service to function:

• Supabase — authentication and database (hosted in the European Union, Frankfurt)
• Stripe — payments, billing and tax calculation
• Vercel — application hosting
• Anthropic — AI features
• Resend — transactional email delivery
• Sentry — technical error tracking (no cookies or directly identifying data)
• PostHog — product audience measurement, only with your consent (hosted in the European Union)
• Cloudflare Turnstile — anti-bot check when signing in and signing up
• Google — sign-in with a Google account, if you choose that method
• Yousign — electronic signature of documents, when you sign one
• YouTube and Vimeo — playback of videos embedded in courses (YouTube in cookie-free mode; Vimeo may set cookies on playback)

Artificial intelligence. The Pixel Create studio uses AI models provided by Anthropic: the text you type, the conversation history and the excerpts of documents you import are sent to it to generate a response. The content produced is generated by an AI and may contain errors. Under the provider's commercial API terms, this data is not used to retrain its models. Do not import personal data of learners or third parties without a legal basis.

Several providers are established in the United States or process data there (notably Stripe, Vercel and Anthropic). These transfers rely on the EU–US Data Privacy Framework where the provider is certified under it and, failing that, on the European Commission's standard contractual clauses. A copy of the safeguards is available on request.

Depending on the law that applies to you (notably the GDPR in the European Union and the European Economic Area, the UK GDPR and the laws of other countries, for example in California or Brazil), you have in particular the following rights:

• Right of access, rectification and erasure of your data
• Right to data portability
• Right to object to and restrict processing
• Right to withdraw your consent at any time, for processing based on it, without affecting the lawfulness of processing carried out before withdrawal
• Right to set instructions about what happens to your data after your death (France)
• Right not to be discriminated against for exercising your rights
• Right to lodge a complaint with the data protection authority of your country or place of residence (for example the CNIL in France: www.cnil.fr)

To exercise these rights, contact us at contact@pixellearn.fr. We reply within one month. You can delete your account from your settings.

Strictly necessary (no consent required):

• Authentication session (Supabase cookie) — for the duration of your session
• Language preference (`nx-locale` cookie) — 12 months
• Interface preferences in local storage (theme, collapsed panels, guided tours) and temporary storage of the price zone during your session
• Anti-bot check (Cloudflare Turnstile) when signing in and signing up

With your consent only: product audience measurement (PostHog) sets a cookie and an identifier in your browser and records usage events. Without your consent, none of these is set or sent. Your choice is kept for 6 months; you can change it at any time:

Manage my cookies

YouTube videos are loaded in cookie-free mode; Vimeo videos, where a course embeds them, may set third-party cookies on playback. No advertising cookies are used.

The service is reserved for people aged 18 or over: a confirmation is requested at sign-up. PixelLearn does not knowingly collect data concerning minors. If you believe a minor has provided personal data on the platform, contact us at contact@pixellearn.fr so we can remove it.

PixelLearn implements appropriate technical and organizational measures: encrypted communications (HTTPS/TLS), encrypted passwords, strict data isolation per customer (multi-tenant isolation), and database access control through Row Level Security policies. In the event of a data breach likely to harm you, we will inform you without undue delay, as well as the competent authority where the law requires.

This policy may change. Any substantial change will be notified to you by email or in the application before it takes effect.

For any question about the protection of your data: contact@pixellearn.fr