Privacy Policy
Privacy Policy
Last updated: July 1, 2026. Effective date: July 1, 2026.
1. Introduction, Entity & Contact
This Privacy Policy describes how Bowdacious Media LLC, dba PixelTools ("PixelTools," "we," "us," or "our") collects, uses, discloses, and protects personal information when you visit pixeltoolspost.com (the "Site") or purchase our digital products (DaVinci Resolve plugins, DCTLs, OFX plugins, PowerGrades) and training materials (collectively, the "Services").
PixelTools is based in California, USA, and sells digital downloads and training worldwide, including to customers in the European Union, United Kingdom, Canada, and Australia.
By using the Site, you consent to the data practices described in this Privacy Policy. This policy incorporates our California-specific disclosures (CCPA/CPRA) and our EU/UK GDPR disclosures directly — it is the single canonical privacy document for the Site.
Contact: info@pixeltoolspost.com
2. Categories of Personal Information We Collect, Sources, and Purposes
We collect information that identifies, relates to, describes, or could reasonably be linked with a particular consumer or device. The categories below follow the classifications defined by the CCPA. Whether a category is marked "Collected: Yes" reflects our good-faith understanding of current practice; it does not mean every example within that category is collected.
- Category A: Identifiers. Examples: real name, alias, postal address, unique personal identifier, online identifier, IP address, email address, account name. Collected: Yes.
- Category B: California Customer Records categories (Cal. Civ. Code § 1798.80(e)). Examples: name, address, telephone number, payment card number, financial information. Collected: Yes (payment card data is collected by our payment processor as part of checkout; see Section 3).
- Category C: Protected classification characteristics. Examples: age, race, religion, sex, disability, sexual orientation. Collected: No.
- Category D: Commercial information. Examples: records of products or services purchased or considered. Collected: Yes.
- Category E: Biometric information. Collected: No.
- Category F: Internet or other similar network activity. Examples: browsing behavior, interaction with the Site, session activity (see Section 10, Cookies & Tracking). Collected: Yes.
- Category G: Geolocation data. Examples: approximate location derived from IP address. Collected: Yes (approximate/coarse only; no precise geolocation).
- Category H: Sensory data. Collected: No.
- Category I: Professional or employment-related information. Collected: No.
- Category J: Non-public education information. Collected: No.
- Category K: Inferences drawn from other personal information. Examples: profile reflecting preferences or interests inferred from purchase or browsing activity. Collected: Yes (limited — e.g., product interest inferred from browsing/purchase history for email marketing; see Section 7).
Sources of Personal Information
- Directly from you — account creation, checkout, email sign-up, support requests, product reviews.
- Automatically — through cookies and similar technologies as you browse the Site (see Section 10).
- From service providers — e.g., Shopify (checkout/payment confirmation), Microsoft Clarity (session analytics).
Business/Commercial Purposes
- To operate the Site and fulfill orders (processing payment, delivering digital downloads, providing invoices).
- To provide customer support and respond to inquiries.
- To screen orders for fraud and security risk.
- To send transactional notices (order confirmations, product updates).
- To send marketing emails and discount offers where you have opted in (see Section 7).
- To analyze and improve the Site's usability (see Section 10, Microsoft Clarity).
- To administer our affiliate program.
- To comply with legal obligations and respond to lawful requests.
3. Sensitive Personal Information
Under the CPRA, "Sensitive Personal Information" (SPI) includes items such as payment card/account credentials, precise geolocation, and certain other categories.
- Payment card information: collected at checkout, processed and stored by Shopify (our payment processor), not by us directly. See Section 4.
- Account credentials (e.g., account login/password, if you create an account): collected and stored via Shopify.
- We do not collect precise geolocation, government ID numbers, biometric data, or the other higher-sensitivity SPI categories.
We use SPI only for purposes necessary to provide the Services (e.g., processing your payment, authenticating your account) — not to infer characteristics about you. Under CPRA, you have the right to limit the use and disclosure of Sensitive Personal Information to these necessary purposes. Because we do not use SPI beyond what is necessary to provide the Services, no additional opt-out action is required to achieve this limitation; you may still contact us at info@pixeltoolspost.com with questions or to request confirmation.
4. How Information Is Shared — Recipients
We share personal information with the following categories of recipients, each acting as a service provider/processor under contract, solely to help us operate the Services described in this policy:
| Recipient | Purpose | Data Category Shared |
|---|---|---|
| Shopify | Site hosting, checkout, order processing, payment processing | Identifiers (A), Customer Records/payment data (B), Commercial information (D) |
| Omnisend | Email marketing (newsletters, cart/product emails, discount codes) | Identifiers (A) — email address, name; Commercial information (D); Inferences (K) — product interest |
| Judge.me | Product review collection and display | Identifiers (A) — name/email; Commercial information (D) — purchased product |
| GoAffPro | Affiliate program administration and commission tracking | Identifiers (A); Commercial information (D) — order/referral data relevant to affiliate attribution |
| Microsoft Clarity | Site analytics, including session recording/replay of clicks, scrolling, and mouse movement, to understand usability | Internet/network activity (F) — session replay data; Identifiers (A) — IP address/device identifiers |
Microsoft Clarity session recording notice: Clarity may record and replay your on-page interactions (clicks, scrolling, mouse movement) for analytics purposes. Clarity acts as our service provider/processor under contract and is not a third party we sell or share data with. See Section 10 for the cookie-level disclosure and consent approach for this feature.
We may also disclose personal information to comply with applicable law, respond to subpoenas or lawful requests, or protect our legal rights.
5. Sale / Sharing of Personal Information
Current position: We do NOT sell your personal information, and we do NOT share it for cross-context behavioral advertising (targeted ads). We never sell, rent, or trade customer lists to anyone. In the preceding twelve (12) months, we have not sold or shared personal information as those terms are defined under the CCPA/CPRA.
6. Your CCPA/CPRA Rights (California Residents)
If you are a California resident, you have the following rights:
- Right to Know/Access — the categories and specific pieces of personal information we have collected about you, and the categories of sources, purposes, and recipients.
- Right to Delete — request deletion of personal information we have collected from you, subject to certain legal exceptions.
- Right to Correct — request correction of inaccurate personal information.
- Right to Opt-Out of Sale/Sharing — as described in Section 5, this right is not currently operative because we do not sell or share personal information.
- Right to Limit Use of Sensitive Personal Information — see Section 3.
- Right to Non-Discrimination — we will not deny goods/services, charge different prices, or provide a different level of service because you exercised a privacy right.
How to Submit a Request
You may submit a verifiable consumer request through either of the following methods:
- Email: info@pixeltoolspost.com
- Contact form: pixeltoolspost.com/pages/contact
Verification
To protect your information, we will verify your identity before fulfilling a request, generally by matching information you provide (such as name and email/order history) against our records. We may request additional information if we cannot verify your identity from the initial submission.
Authorized Agents
You may designate an authorized agent to submit a request on your behalf. We may require proof of the agent's authorization (e.g., signed permission from you) and may still require you to verify your own identity directly with us.
Response Time
We will respond to a verifiable consumer request within forty-five (45) days of receipt. If needed, we may extend this by an additional forty-five (45) days, with notice to you of the extension and reason.
7. Financial Incentive Notice
PixelTools offers certain financial incentives in exchange for personal information, consistent with Cal. Civ. Code § 1798.125:
- Free-tool email capture: in exchange for your email address, you receive access to a free tool and may receive related marketing communications.
- Discount codes: in exchange for your email address (and opt-in), you receive a discount code for future purchases.
Material terms: providing your email address is voluntary; declining does not prevent you from purchasing our paid products, only from receiving the specific free tool or discount tied to the offer.
Estimated value of the data provided to us in connection with this incentive: We reasonably value the personal information collected as equivalent in value to the free product, discount, or offer provided in exchange.
Right to withdraw: you may withdraw from a financial incentive program at any time by unsubscribing from marketing emails (link in every email) or by contacting info@pixeltoolspost.com. Withdrawal does not affect any discount already redeemed.
8. CalOPPA Do-Not-Track Disclosure & "Shine the Light"
Do Not Track: the Site does not currently alter its data collection practices in response to a browser's Do Not Track ("DNT") signal, as no common industry standard for DNT has been adopted. Where required by law, we honor Global Privacy Control (GPC) signals as a valid opt-out preference signal.
Shine the Light (Cal. Civ. Code § 1798.83): California residents may request information once per year, free of charge, regarding disclosure of personal information (if any) to third parties for their own direct marketing purposes in the preceding calendar year. As stated in Section 5, we do not currently disclose personal information to third parties for their own direct marketing purposes. To make such a request, contact info@pixeltoolspost.com.
9. GDPR / UK-GDPR (EU, EEA, and UK Residents)
Controller
Bowdacious Media LLC, dba PixelTools, is the data controller for personal information processed through the Site. Contact: info@pixeltoolspost.com.
Legal Bases for Processing
- Contract — processing necessary to fulfill an order (payment, delivery of digital products, invoicing).
- Legitimate interests — fraud prevention, Site security, Site analytics/usability improvement (Microsoft Clarity), administering the affiliate program.
- Consent — email marketing communications (Omnisend) and non-essential cookies (see Section 10).
- Legal obligation — tax, accounting, and regulatory compliance.
Your Rights
- Right of access — obtain a copy of the personal data we hold about you.
- Right to rectification — correct inaccurate or incomplete data.
- Right to erasure ("right to be forgotten") — request deletion, subject to legal retention obligations.
- Right to data portability — receive your data in a portable format, or have it transmitted to another controller where technically feasible.
- Right to restrict processing — request that we limit how we use your data in certain circumstances.
- Right to object — object to processing based on legitimate interests, including direct marketing.
- Right to withdraw consent — where processing is based on consent, withdraw at any time without affecting prior lawful processing.
To exercise any of these rights, contact info@pixeltoolspost.com. Requests may cover: correcting/updating account data, exporting your data (personal information and/or order history), obtaining a report of the personal data we store about you, or deleting your account and associated data.
International Transfers
As a California-based business serving customers in the EU/EEA/UK, your personal information will be transferred to and processed in the United States. Where required, we rely on legally recognized safeguards such as the European Commission's Standard Contractual Clauses (SCCs) for such transfers, including transfers to our service providers.
Retention
See Section 11.
Right to Complain
You have the right to lodge a complaint with your local data protection supervisory authority (an EU Member State Data Protection Authority, or the UK Information Commissioner's Office (ICO)) if you believe our processing of your personal data violates applicable law.
10. Cookies & Tracking Technologies
We use the following categories of cookies and similar technologies:
- Essential/strictly necessary — required for the Site and checkout (e.g., Shopify cart/session cookies).
- Analytics — Microsoft Clarity, which uses cookies and session-recording technology to capture clicks, scrolling, and mouse movement for usability analysis. See Section 4 for the full disclosure.
- Marketing/advertising — not currently in use.
Consent Approach
- EU/EEA/UK visitors: non-essential cookies (including Microsoft Clarity's session recording) will not fire until you provide opt-in consent via the cookie banner/consent tool. This consent is captured and managed through our cookie consent banner.
- California/other visitors: an opt-out approach applies consistent with Section 5; because no sale/sharing currently occurs, no cookie-level opt-out is currently required beyond the general disclosures in this section.
To manage cookie preferences, use the settings available through our cookie consent banner.
11. Data Retention
We retain personal information for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required or permitted by law.
- Order/transaction records: retained per Shopify’s platform defaults and applicable tax/accounting recordkeeping obligations, for as long as reasonably necessary for the purposes described above, and as required by applicable law.
- Email marketing data (Omnisend): retained until you unsubscribe or request deletion, and otherwise for as long as reasonably necessary for the purposes described above, and as required by applicable law.
- Session recording data (Microsoft Clarity): retained per Microsoft Clarity’s platform retention settings, for as long as reasonably necessary for the purposes described above, and as required by applicable law.
- Review data (Judge.me): retained for as long as the review remains published, or per Judge.me’s platform defaults, for as long as reasonably necessary for the purposes described above, and as required by applicable law.
- Affiliate data (GoAffPro): retained for the duration of the affiliate relationship plus applicable commission/audit recordkeeping, for as long as reasonably necessary for the purposes described above, and as required by applicable law.
12. Children's Privacy
The Site is not intended for individuals under the age of 13, and we do not knowingly collect personal information from children under 13 (COPPA). Separately, under the CCPA/CPRA, we do not knowingly sell or share the personal information of consumers we know to be under 16 years of age without affirmative opt-in authorization (from the consumer if age 13–16, or from a parent/guardian if under 13) — noting that, per Section 5, we do not currently sell or share personal information at all. If you believe a child has provided us with personal information, contact us at info@pixeltoolspost.com so we can delete it.
13. Security, Changes to This Policy, and Contact
Security
We use reasonable technical and organizational measures to protect personal information. Shopify provides PCI-DSS compliant payment processing and encrypts payment data. No method of transmission or storage over the internet is completely secure, and we cannot guarantee absolute security.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or business operations. Material changes will be reflected by updating the "Last updated" date at the top of this policy.
Contact
For questions, requests, or complaints regarding this Privacy Policy or our data practices, contact us at:
Email: info@pixeltoolspost.com