Privacy Policy

1. Who we are

PixelMili ("we", "us", "our") is a server-side tracking platform operated by Somaf Group. Our registered address is Dhaka, Bangladesh. You can reach us at contact@pixelmili.com.

2. What data we collect

• Account data — name, email address, and password hash when you register.
• Billing data — payment method token (we never store raw card numbers), transaction records, and billing address.
• Tracking event data — events your visitors fire via tracker.js (PageView, Purchase, etc.) including hashed customer identifiers (email, phone — always SHA-256 hashed), IP addresses, and user agents.
• Usage data — dashboard activity, API calls, domain configurations, and error logs.
• Communication data — messages you send us via the contact form or email.

3. How we use your data

• To provide and operate the PixelMili tracking pipeline.
• To forward hashed conversion events to the ad platforms you configure (Meta, GA4, TikTok, LinkedIn, Snapchat, Pinterest).
• To send transactional emails (account creation, billing receipts, plan expiry notices).
• To improve the platform — analysing aggregated, anonymised usage patterns.
• To respond to support requests and contact form submissions.

4. Data we never store

We do not store raw customer PII (plaintext email, phone, name) from tracking events. All customer identifiers are hashed with SHA-256 before processing and are never written to disk in plaintext. We do not sell, rent, or trade your data or your customers' data to any third party.

5. Third-party services

We share hashed event data only with the ad platforms you explicitly connect — Meta, Google, TikTok, LinkedIn, Snapchat, and Pinterest. Each platform's own privacy policy governs how they handle that data. We use standard infrastructure providers (cloud hosting, database services) under data processing agreements that prohibit them from using your data for any purpose other than providing us with services.

6. Data retention

• Free plan: Event data retained for 30 days.
• Free trial: Event data retained for 180 days.
• Growth plan: Event data retained for 180 days.
• Account and billing records are retained for 7 years as required by applicable law.
• You may request deletion of your account and all associated data at any time.

7. Cookies

PixelMili sets first-party tracking cookies (_pm_id, _fbp, _fbc) on your visitors' browsers via your custom CNAME. These cookies are set on YOUR domain — PixelMili does not set any cookies on your visitors' browsers directly. Our dashboard uses a single session cookie for authentication.

8. Your rights

You have the right to access, correct, or delete your personal data at any time. To exercise these rights, email us at contact@pixelmili.com. We will respond within 30 days.

9. Security

We use TLS encryption for all data in transit. Data at rest is encrypted. Access to production systems is restricted to authorised personnel only. We conduct regular security reviews. Despite these measures, no system is 100% secure — please use a strong, unique password for your account.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice in the dashboard. Continued use of PixelMili after changes take effect constitutes acceptance of the updated policy.

11. Contact

Questions about this policy? Reach us at contact@pixelmili.com or via the contact form.