Privacy Policy

Last updated: March 22, 2026

DigitalXYZ ("we," "us," or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and protect your data when you use our AI virtual employee service, Pixel.

DigitalXYZ is a sub-brand of Digital Media Lab Inc. This policy applies to all users of our service, including visitors to our website and clients who interact with Pixel via Telegram.

1. Information We Collect

We collect the following information when you register for and use our service:

• Contact details: Full name, email address, and phone number
• Business information: Business name, industry, and business address
• Task history: Records of tasks you submit to Pixel, including the content of your requests and the outputs we deliver
• Account data: Credit balance, subscription status, and usage logs
• Communication data: Messages exchanged between you and Pixel via Telegram

We only collect information that is necessary to deliver our service. We do not collect data beyond what is needed for account registration, task completion, and service improvement.

2. How We Use Your Information

We use your information solely for the following purposes:

• Service delivery: To register your account, process your tasks, and deliver completed work through Pixel
• Communication: To respond to your inquiries, provide support, and send service-related notifications
• Service improvement: To analyze usage patterns and improve the quality and accuracy of Pixel's outputs
• Account management: To manage your subscription, process credit purchases, and maintain your account
• Legal compliance: To comply with applicable laws and regulations

We will never use your personal information for marketing purposes without your explicit consent. We do not sell, rent, or trade your data to any third party.

3. Data Storage and Security

Your data is stored in Supabase, a secure cloud database with encryption at rest and in transit. We implement reasonable security measures to protect your information, including:

• Encryption of all data stored in our database
• Encrypted data transmission using industry-standard protocols
• Access controls limiting data access to authorized personnel only
• Regular security reviews and updates

While we take security seriously, no method of electronic storage is 100% secure. We cannot guarantee absolute security of your data.

4. Data Sharing

We do not share your personal information with third parties except in the following limited circumstances:

• Service providers: We use third-party infrastructure providers (such as Supabase and Telegram) to operate our service. These providers process your data only as needed to deliver the service and are bound by their own privacy obligations
• Legal requirements: We may disclose your information if required by law, regulation, or legal process
• Safety: We may disclose information to prevent fraud, protect the safety of our users or the public, or address security vulnerabilities

We do not use your data, prompts, or task outputs to train AI models. Your information remains private to your account.

5. Your Rights

Under Canadian privacy law (PIPEDA), you have the following rights:

• Access: You may request a copy of all personal information we hold about you. We will respond within 30 days
• Correction: You may request corrections to any inaccurate or incomplete personal information
• Deletion: You may request that we delete your personal information. Upon account deletion, we will remove your data within 30 days
• Withdrawal of consent: You may withdraw your consent for data processing at any time by contacting us or deleting your account

To exercise any of these rights, contact us at [email protected].

6. Data Retention

We retain your personal information for as long as your account is active. If you delete your account or request data deletion, we will retain your information for 30 days to process the request and resolve any outstanding matters, after which it will be permanently deleted from our systems.

Certain data may be retained for longer periods where required by law or for legitimate business purposes such as dispute resolution or fraud prevention.

7. AI Output Disclaimer

Pixel is an AI-powered tool that generates content based on your requests. While we strive for accuracy and quality, AI-generated outputs may contain errors, inaccuracies, or content that is not suitable for its intended purpose. You are responsible for reviewing all outputs before using them. We are not liable for any damages arising from the use of AI-generated content.

8. Limitation of Liability

DigitalXYZ and Digital Media Lab Inc. are not responsible for any data loss, unauthorized access, or damages resulting from circumstances beyond our reasonable control. Our total liability for any claim related to your personal information shall not exceed the amount you have paid to us in the 12 months preceding the claim.

9. PIPEDA Compliance

This Privacy Policy is designed to comply with the Personal Information Protection and Electronic Documents Act (PIPEDA), Canada's federal private-sector privacy law. We adhere to the 10 fair information principles outlined in PIPEDA, including accountability, identifying purposes, consent, limiting collection, limiting use and disclosure, accuracy, safeguards, openness, individual access, and challenging compliance.

If you believe we have not handled your personal information in accordance with this policy or PIPEDA, you may file a complaint with the Office of the Privacy Commissioner of Canada at www.priv.gc.ca.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and, where appropriate, by sending you a notification. Your continued use of our service after any changes constitutes acceptance of the updated policy.