Privacy Policy

Digital Empire Holdings LLC ("PixelProof", "we", "us") built this policy to explain, in plain language, what data PixelProof collects when you run a free scan, sign up for the waitlist, or become a paying customer — and what we do with it.

1. What we collect

• Store URLs you scan. When you paste a store URL into the free scanner or connect a store to monitoring, we store that URL and the scan findings (which tracking scripts fired, which broke).
• Meta pixel / tracking events observed during a scan. The scanner records which pixel, tag, and conversion events it detects firing (or failing to fire) on the pages it checks — event names and presence/absence, not the personal data of your store's own visitors.
• Your email address, if you provide it — to receive a scan report, join the waitlist, or manage a paid subscription.
• Billing information, if you subscribe — collected and stored directly by Stripe. We never see or store your raw card number.
• Basic usage analytics (pages viewed, scan/signup funnel events) via PostHog, to understand what's working and fix what isn't.

2. Where it's sent

We use a small set of vetted subprocessors, all US-region:

• Supabase (database, US region) — stores scans, email captures, waitlist signups, and account records. supabase.com/privacy
• Stripe (billing, US) — processes and stores payment details for paid plans. stripe.com/privacy
• Resend (transactional email, US) — sends scan reports, receipts, and coupon codes. resend.com/legal/privacy-policy
• PostHog (product analytics, US) — records anonymous/pseudonymous usage events. posthog.com/privacy

We do not sell your data, and we do not share it with data brokers or ad networks. California residents: PixelProof does not sell personal information, so there is nothing to opt out of under CCPA's "Do Not Sell" provision -- this section is provided in response to your "Your California Privacy Choices" footer link.

3. Retention

• Free-scan baselines and findings: kept for 30 days, then deleted.
• Account and subscription records (email, store domains, billing history via Stripe): kept indefinitely while your account is active, so monitoring history and support stay accurate — deleted on request per Section 4 below.

4. Your rights (GDPR / CCPA)

You can request a full export of your data or full deletion of your account at any time. Email hello@citationsafe.com with the subject line "Data Request" from the email address on file. A self-serve export/delete page is planned for /meta-monitor/account/delete — until it ships, every request is handled manually: exports within 30 days, deletion within 30 days (45 days for CCPA requests, per the California statute's timeline). EU/UK residents also have the right to lodge a complaint with their local data protection authority.

5. Cookies

PixelProof uses essential cookies only — the session cookie that keeps you signed in and CSRF protection on forms. We do not use third-party advertising or tracking cookies. PostHog analytics runs cookie-light (device/session ID, no cross-site tracking).

6. Security

Data is encrypted in transit (TLS) and at rest (Supabase-managed encryption). Access to production data is limited to the founder and service-role API credentials; row-level security is enabled on every table.

7. Changes to this policy

If we materially change what we collect or how we use it, we'll update the "Last updated" date above and, for material changes, notify active customers by email.

8. Data breach notification

If we discover a security incident that affects your personal data, we will notify you without unreasonable delay. For users in the EU/UK, we will notify affected users within 72 hours of becoming aware of the breach in accordance with GDPR Art. 33 and, where applicable, the corresponding supervisory authority. For California residents, we will notify you in the most expedient time possible and without unreasonable delay in accordance with Cal. Civ. Code §1798.82. State-law notice requirements for other U.S. residents will be honored as applicable.

How we notify: primary channel is email to the address on file; we may also post an in-app notice at /meta-monitor/accountand a public update on our status page at /meta-monitor/status.

What we will include: a description of the nature of the incident, the categories and approximate number of records/users affected, the likely consequences of the incident, and the mitigation and remediation steps we are taking (or that you can take, such as password rotation).

Breach concerns: hello@citationsafe.com. This mailbox is monitored on the same rotation as our security-disclosure inbox described at /security.

v0 — attorney-review-pending. This breach-notification commitment is authored in-house and has not yet been reviewed by outside counsel; it is offered as a good-faith statement of practice and does not waive any statutory rights you may have.

9. Contact

Questions about this policy or a data request: hello@citationsafe.com (fallback: hello@citationsafe.com).

Digital Empire Holdings LLC, 30 N Gould St Ste N, Sheridan WY 82801