Privacy Policy

Headquarters: Portugal • Last updated: 2025-10-13

Thanks for using Pyxara ("Pyxara", "we"). This policy explains, in a clear and friendly way, how we handle your data when you use our website (pyxara.com) and our AI-powered social media management platform. We act as the data controller based in Portugal.

Who we are

Pyxara, Lda. is the controller of personal data collected through our website and platform. You can reach us at hello@pyxara.com.

Data we collect

Account data (name, email, hashed password).

Profile & business data (company, website, location, brand preferences).

Operational data (created content, calendars, performance analytics, social integrations).

Payment data — processed by Stripe (customer identifiers, invoices, payment status). We do not store full card data at Pyxara.

Technical data (logs, IP address, device, language, time zone) for security, fraud prevention, and service improvement.

How we use data

Provide and improve the platform (AI content, scheduling, analytics).

Authentication, support, and account-related communications.

Payment processing and billing via Stripe.

Legal compliance (GDPR) and abuse/fraud prevention.

Legal bases

Contract performance (service delivery).

Legitimate interests (security, internal metrics, product improvement).

Consent (marketing communications where applicable, non-essential cookies).

Legal obligations (accounting, tax, requests from authorities).

Payments with Stripe

We use Stripe to process payments under high security standards. Stripe may act as an independent controller for certain payment data. Please review Stripe's policies. We do not store card data at Pyxara.

Data sharing

Vendors that help us operate the service (hosting, email, internal analytics, support).

Platform integrations (e.g., social networks) when you explicitly connect them.

Public authorities where required by law.

We never sell personal data.

International transfers

Where applicable, we rely on appropriate safeguards (e.g., Standard Contractual Clauses) for international data transfers under the GDPR.

Data retention

We keep data as long as needed to provide the service and meet legal obligations. After cancellation, we retain the minimum necessary for legal periods (billing, audit) and then delete or anonymize.

Your rights

Access, rectify, erase, restrict or object to processing, and request portability. You may also withdraw consents where applicable.

To exercise rights, contact hello@pyxara.com. We will respond within GDPR timeframes.

Cookies and similar technologies

We may use cookies and similar techniques to enhance your experience, remember preferences, and measure usage. You can manage preferences in your browser. We will use non-essential cookies only with your consent where applicable.

Security

We apply technical and organizational measures to protect data, including access controls, in-transit encryption, and secure practices. No system is 100% secure, but we work to reduce risks.

Contact & complaints

Questions or requests: hello@pyxara.com. You may also lodge a complaint with the competent supervisory authority in Portugal (CNPD).

Changes to this policy

We may update this policy to reflect changes in our service or the law. We will show the last updated date and, where appropriate, notify users.


To contact us: hello@pyxara.com.