PIXI Privacy Notice (pilot)
Last updated: 11 October 2026
PIXI is operated during its pilot by Mafatiih Alwasl Establishment (مؤسسة مفاتيح الوصل), commercial registration national number 7043304067, 6427 Khayat Al Sunnah, Sayed Al Shuhada District, Madinah 42321, Kingdom of Saudi Arabia. The establishment is the controller of the personal data described here. We follow the Kingdom's Personal Data Protection Law and its regulations.
Privacy contact: privacy@projecteatery.com
What we collect
- When you request to join the pilot: your name, work email, company, role and city, and anything you choose to write in the message field.
- When you create an account and sign in: your account details (name, email, password stored in encrypted form), the information you give about your business and projects, and basic usage data (pages visited, device and browser type, approximate location from your IP address at country or city level).
We do not ask for your device's precise location, and we ask you not to send sensitive personal data.
Why we use it
| Purpose | Legal basis |
|---|---|
| Create and verify your account, review upgrade requests, and contact you about them | Steps you asked us to take before an agreement |
| Provide PIXI to you during the pilot | Performing our agreement with you |
| Keep PIXI secure and working | Legitimate interest |
| Understand how the pilot is used, to improve it | Legitimate interest; non-essential cookies only with your consent |
| Send you PIXI news beyond the pilot | Only with your consent, which you can withdraw at any time |
Who we share it with
We do not sell personal data. We share it only with providers that run PIXI for us, under contracts that require them to protect it: hosting and database (Vercel and Supabase, data stored in Japan), email delivery (Resend), error monitoring (PIXI's own, stored in our database) and analytics (PIXI's own, stored in our database); and with authorities when the law requires.
Transfers outside Saudi Arabia
Our hosting provider stores data in Japan, and some providers operate from the United States. We transfer only the data needed, with safeguards such as the providers' data processing terms and standard contractual clauses, as the Personal Data Protection Law and its regulations allow.
How long we keep it
- Pilot requests that do not become accounts: up to 12 months, then deleted.
- Account data: while your account is active, plus 30 days after closure.
- Records the law requires us to keep, such as invoices: for the period the law requires.
Your rights
You can ask to know how your data is processed, to access it and get a copy, to correct it, to have it destroyed when it is no longer needed, and to withdraw consent. Email privacy@projecteatery.com. We will respond within the period set by the regulations. You may also complain to the Saudi Data & AI Authority (SDAIA).
Security
Encryption in transit and at rest, restricted access, separation between customer workspaces, and monitoring. If a breach affects your personal data, we will notify SDAIA and you as the law requires.
Changes
If this notice changes, we will update it here and tell pilot users by email.
PIXI is a business service for adults (18 and over).