This Privacy Notice explains how Pythagorithm, Inc., a Delaware corporation ("Pythagorithm," "we," "us," or "our"), collects, uses, and shares personal information through the pixelops™ website at www.pixelops.ai (the "Site") and the pixelops application at app.pixelops.ai (the "Service"). The Service is a business tool offered to organizations, not to consumers. It is governed by our Terms of Service or by a written agreement between Pythagorithm and the organization that gives you access (a "Customer").
1. Our two roles
When you visit the Site or ask us for a demonstration, we decide how your information is used, and this Notice applies directly.
When a Customer uses the Service, the Customer controls the content its users put into it, including solicitations, company documents, proposals, pricing, and information about its own staff and partners ("Customer Content"). For Customer Content we act as a service provider and processor: we handle it on the Customer's behalf and under the Customer's instructions, as our agreement with the Customer sets out. If you have questions about Customer Content, or wish to exercise rights in it, contact the Customer that controls it. We will help the Customer respond as our agreement requires.
2. Information we collect
Information you give us
- Demo requests. Your name, work email address, company, role, what you are pursuing, and what you would like help with, when you use the Site's demo form.
- Subscriptions. When you subscribe online, your company's legal name, its SAM.gov Unique Entity ID, a billing contact and address, and your plan. Payment card details are collected and kept by our payment processor, Stripe; we never receive or store your full card number.
- Account information. Your name, work email address, the workspace you belong to, your access level and roles, and the settings and notification choices you make. You sign in with an email address, a password, and a second step (an authenticator code), or through Google or Microsoft where your workspace allows it.
- Customer Content. The files and text you and your colleagues add to the Service, and what the Service produces from them.
- Signatures. When a partner signs a letter online, the signer's name, title, organization, email address, typed signature, and the time of signing.
- Communications. What you send us when you contact us or ask for support.
Information collected automatically
- Service records. Sign-in events, security events, the date and time of actions, and usage metadata such as the number of AI requests, tokens processed, estimated costs, and error codes. We record that something happened and how much was used, not what your documents say.
- Technical information. IP address, browser and device type, and request logs kept by our hosting provider for security, reliability, and abuse prevention.
- Cookies. The Service uses one strictly necessary cookie that keeps you signed in. The Site uses no advertising or analytics cookies and loads no third-party tracking scripts.
Information from other sources
- Sign-in providers. If you sign in with Google or Microsoft, we receive your name, email address, and a confirmation that the provider has verified that address.
- Public records. At a Customer's request, the Service reads public government sources, such as SAM.gov and USAspending.gov, for an organization's registration and award history, and reads the Customer's own public website to fill in its profile.
3. How we use information
- To provide, operate, secure, and support the Service, including authenticating users, delivering notifications, and preventing fraud and abuse.
- To process Customer Content on the Customer's instructions, including sending it to the AI models that power the Service.
- To respond to demo requests and inquiries, and to send service and administrative messages.
- To measure usage, set and enforce limits, bill Customers, and plan capacity.
- To maintain and improve the Service using service records and aggregated or de-identified information that does not identify any Customer or person.
- To comply with law, enforce our agreements, and protect the rights, property, and safety of Pythagorithm, our Customers, and others.
4. AI processing
The Service uses large language models provided through Amazon Bedrock, a service of Amazon Web Services. Customer Content sent for AI processing is handled within AWS. Under AWS's terms for Amazon Bedrock, prompts and outputs are not used to train the underlying models and are not shared with the model providers. We do not use Customer Content to train AI models. AI output can be inaccurate or incomplete, and Customers are responsible for reviewing it before use.
5. How we share information
We do not sell personal information, and we do not share it for cross-context behavioral advertising. We share information only as follows:
- Service providers that process information for us under contract, including Amazon Web Services (hosting, storage, sign-in, and AI processing through Amazon Bedrock), Resend (email delivery), Stripe (payments, for subscriptions bought online), and Calendly (scheduling, if you book a meeting with us). If you use Google or Microsoft to sign in, those companies process your sign-in under their own privacy notices.
- Within your workspace. Customer Content and your name and role are visible to other users of your workspace according to the access the Customer sets. Pricing is limited to users the Customer authorizes.
- At a Customer's direction, for example when a Customer sends a letter to a partner to sign.
- Legal and safety reasons, when we believe in good faith that disclosure is required by law, subpoena, or other legal process, or is needed to protect rights, property, or safety.
- Business transfers, in connection with a merger, acquisition, financing, reorganization, or sale of assets, in which case information may transfer subject to this Notice.
- With consent, or as otherwise disclosed when the information is collected.
Pythagorithm staff who operate the Service see account and usage metadata, such as people, usage, cost, and health. They do not view Customer Content except as needed to provide support the Customer requests, to secure the Service, or to comply with law.
6. Retention
We keep personal information for as long as needed for the purposes in this Notice. Account information and Customer Content are kept while the Customer's account is active. After an account ends, we delete or de-identify Customer Content within 90 days, except where law requires us to keep it. Backups expire on their normal cycle, generally within 35 days, and earlier versions of stored files within 90 days. Security and request logs are kept for up to one year. Demo requests are kept as long as needed to respond and follow up, and you may ask us to delete yours at any time.
7. Security
We use administrative, technical, and physical safeguards designed to protect information, including encryption in transit and at rest, required two-step sign-in for password accounts, separation of each Customer's data, access limited by role, and monitoring for unusual activity. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
The Service is not designed or authorized for classified information, Controlled Unclassified Information (CUI), export-controlled technical data, protected health information, or payment card data. Do not upload them.
8. Where information is processed
The Service is hosted in the United States. If you access it from elsewhere, your information is transferred to and processed in the United States.
9. Your choices and rights
- Account information. You can review and update much of your information in the Service, and your workspace administrator can update or remove your account.
- Email. You can choose which notifications you receive by email in the Service's settings. Some service and security messages cannot be turned off while you have an account.
- Privacy rights. Depending on where you live, you may have rights to know about, access, correct, delete, or receive a copy of personal information we hold about you, and to appeal a decision about your request. To make a request, email legal@pythagorithm.ai. We will verify your request using information we already hold, and you may use an authorized agent where the law allows. We will not discriminate against you for exercising these rights. For Customer Content, we will refer your request to the Customer that controls it.
California residents. In the past 12 months we have collected identifiers (such as name, email address, and IP address), professional information (such as company and role), internet activity (such as service records), and the content of communications and documents provided to the Service, from the sources and for the purposes described above. We disclose these categories to service providers for business purposes. We have not sold or shared personal information and do not use sensitive personal information for purposes that require a right to limit.
10. Children
The Site and Service are for business use and are not directed to anyone under 18. We do not knowingly collect personal information from children. If you believe a child has given us information, contact us and we will delete it.
11. Changes to this Notice
We may update this Notice from time to time. We will post the updated version here with a new effective date, and if a change is material we will give notice through the Site or the Service or by email. Continued use after the effective date means the updated Notice applies.
12. Contact us
Questions or requests about this Notice: legal@pythagorithm.ai.