Privacy policy
Last updated: September 29, 2026
1. Data controller
- Controller: Borja Pulido Tudela
- Tax ID: 53875848G
- Address: San Gerardo 6, Torrent, Valencia
- Email: borjabussiness@gmail.com
2. Data we collect
When you buy Pixelion, create a customer account, or contact us, we may collect:
- Contact data: name, email address, country.
- Transaction data: plan purchased, amount, date, and the
.myshopify.comdomain of the store where you activate the licence. - Payment data: processed directly by Stripe. Borja Pulido Tudela does not store full card numbers or financial data on its own servers.
- Technical data: IP address (aggregated, not persisted in analytics), device and browser type, used only for security and aggregate statistics — see our Cookie policy for details.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Manage the purchase, issue the licence and provide support | Performance of a contract (GDPR Art. 6.1.b) |
| Verify licence status and prevent fraud | Legitimate interest (GDPR Art. 6.1.f) |
| Comply with tax and accounting obligations | Legal obligation (GDPR Art. 6.1.c) |
| Send marketing communications about Pixelion | Consent (GDPR Art. 6.1.a), revocable at any time |
4. Processors and recipients
To provide the service, we share certain data with the following providers, which act as data processors under contract:
- Stripe (payment processing and fraud prevention).
- Resend (transactional emails: order confirmation, licence key, access links).
- Vercel (application hosting, infrastructure in the EU and US).
- Supabase (database, hosted in the EU region — Ireland).
We do not sell or share your data with third parties for advertising purposes unrelated to Pixelion.
5. International transfers
Some providers (Stripe, Vercel) may process data outside the European Economic Area, in particular in the United States. Such transfers rely on the European Commission's Standard Contractual Clauses and/or the EU-US Data Privacy Framework, as applicable.
6. Retention period
We keep contractual data for as long as the licence is active and, afterwards, for the periods legally required to meet tax and liability obligations (generally up to 6 years from the last transaction).
7. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability, as provided by GDPR, by writing to borjabussiness@gmail.com. You may also lodge a complaint with your local data protection authority if you believe processing does not comply with the law.
8. Security
We apply reasonable technical and organisational measures (encryption in transit, access control, certified providers) to protect your data against unauthorised access, loss or alteration.
9. Cookies
This site only uses strictly necessary technical cookies. See our Cookie policy for full detail.
10. Changes to this policy
We may update this policy to reflect legal changes or changes to our providers. The last-updated date appears at the bottom of this page.
Last updated: September 29, 2026