1. Controller

WixPie.com is the controller responsible for personal data processed through WixPie. WixPie.com is a Dutch sole proprietorship, also trading as T4P, established in Gouda, the Netherlands, and registered with the Dutch Chamber of Commerce under number 62728237.

In this policy, “WixPie”, “we”, “us” and “our” refer to WixPie.com.

For privacy questions or requests, contact info@wixpie.com.

2. Data we process

The data we process depends on how you use WixPie:

• account information, such as your email address, internal account ID, roles, account status, creation date, last login, last activity and email-confirmation status;
• account and security information, such as temporary verification data and information needed to prevent abuse; passwords are not stored in readable form;
• personal templates and related metadata, versions, ownership, storage size and usage events;
• a random first-party anonymous session ID with first and last activity, relevant page or application area, activity count and the last used template where known;
• template usage events, such as viewing or selecting a template and creating, saving or building a project where WixPie can reliably detect the event;
• technical server and security logs, including timestamps, request details, browser information and, where necessary, an IP address for a limited period;
• information needed to connect and secure a local WixPie Agent that you authorise;
• support correspondence and the diagnostic information you choose to provide;
• functional cookie and local-storage data, including authentication, antiforgery, the anonymous session ID and your language preference.

Do not submit secrets, private keys or confidential project content through support channels.

3. User accounts and account security

Account registration and sign-in are provided through WixPie’s account service. We apply measures designed to protect accounts and prevent abuse. Depending on the service settings, registration may require email confirmation, age confirmation, a security check or administrator approval. You are responsible for choosing a unique password and keeping your email account secure.

An email address, password, age confirmation and a successful Turnstile check are required to register. An account cannot be created without this information. Self-registration can never grant an administrator role.

Personal templates are linked to the account that owns them. WixPie also uses a random first-party anonymous session ID to measure recent activity and template use without creating an account. When you log in or register, the current anonymous session is no longer counted simultaneously as an online visitor. Historical anonymous activity is not linked to your account.

WixPie may be used anonymously by visitors of all ages under the responsibility of a parent or guardian where appropriate. To register an account independently, you must confirm that you are at least 16 years old. WixPie does not request or store a date of birth for this purpose.

4. Purposes and legal bases

We process data only for the following purposes and legal bases:

• performance of a contract or steps before entering one: registering accounts, signing in, storing personal templates, providing WixPie features and responding to requested support;
• legitimate interests: securing WixPie and accounts, preventing fraud and automated abuse, investigating faults, operating the service and using privacy-friendly usage statistics to understand which features and templates are used;
• legal obligation: processing or retaining information where applicable law requires it;
• consent: only where we ask for it separately; you may withdraw consent at any time without affecting processing that was lawful before withdrawal.

5. Retention periods

We do not retain data for longer than necessary for the purpose for which it was collected:

• account information and personal templates are retained while the account is active or until you request deletion, unless a legal obligation or security interest requires longer retention;
• email-confirmation and recovery tokens remain usable only until they expire or are used and are not permanently stored as readable tokens;
• identifiable anonymous-session details are automatically removed after 30 days by default;
• aggregate template statistics may be kept longer when they can no longer be linked to an account or anonymous session;
• technical security and error logs are retained only for a limited operational period and then removed, unless a specific incident requires longer investigation;
• support correspondence is retained for as long as needed to handle the request and maintain reasonable administrative records;
• database backups remain solely on WixPie’s own server, are used only for incident recovery and are overwritten or deleted within 90 days.

6. Recipients and international transfers

WixPie does not sell personal data. Data is shared only where necessary to provide or secure the service, comply with a legal obligation or carry out your request.

Zoho Mail EU processes email traffic such as account verification, administration messages and correspondence. Cloudflare processes the information needed for Turnstile bot protection during public registration. Cloudflare is not used for advertising, general analytics, DNS, CDN or proxying WixPie.

Providers may process information outside the European Economic Area. Where this occurs, we rely on the provider’s valid transfer mechanism and appropriate safeguards to the extent required by the GDPR.

7. Your privacy rights

Where the GDPR applies, you may request access, correction, deletion, restriction, portability or object to processing based on legitimate interests. We may request reasonable identity verification. We generally respond within one month; this period may be extended for complex or multiple requests as permitted by the GDPR.

You may also use the privacy contact address to request deletion of your account and personal templates or a usable export. Some information may remain temporarily in protected backups until the maximum 90-day backup period has expired.

If you are dissatisfied with how we handle your data, you may lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or another competent European supervisory authority.

WixPie does not make solely automated decisions that produce legal or similarly significant effects. Security checks may automatically block a registration attempt to prevent abuse; you may contact us if you have questions.

8. Hosting and security

The WixPie website and related services are hosted and managed by WixPie within the Netherlands. We do not publish detailed infrastructure or connection information where doing so could increase security or privacy risks.

Access to production data is restricted to authorised access. We use appropriate technical and organisational measures to protect personal data, including secure connections, access controls and protected backups. No security measure can eliminate every risk.

9. Analytics, cookies and local storage

WixPie does not use advertising networks, behavioural tracking, tracking pixels, fingerprinting or Google Analytics. Functional cookies and local storage are used for authentication, request-forgery protection, a privacy-friendly first-party anonymous session and remembering your language preference. They are not used for advertising profiles.

To understand public-site usage, WixPie stores daily aggregate counts by country, referring domain and landing page. The country is determined on the server with a local GeoIP database; the IP address is immediately discarded and never stored. Only the referring domain is retained, never a full referring URL, search term or URL parameter. Groups with fewer than five visits are not shown separately in administration.

Anonymous activity records do not contain an email address or account identifier and do not retain a full IP address permanently. Network information may be processed separately and briefly for security purposes.

Cloudflare Turnstile is loaded only where bot protection is needed, particularly during public registration. Cloudflare may process technical information to determine whether a request is likely to come from a human.

10. WixPie Agent Connector Chrome extension

The WixPie Agent Connector Chrome extension has the sole purpose of connecting the Chrome browser to the locally installed WixPie Agent through Native Messaging.

The extension itself does not collect personal data. It uses the local WixPie Agent connection only to exchange commands and results between Chrome and the local agent when you request a function.

Native Messaging is required to communicate securely with the locally installed WixPie Agent. The extension does not send data to external servers outside the WixPie services you use, unless this is necessary for a function you requested.

The JavaScript and WebAssembly code executed by the extension is included in the published extension package. The extension does not load or execute remote code.

For privacy questions or requests concerning this extension, contact us using the privacy contact address in this policy.

11. Changes and contact

We may update this policy when WixPie, its providers or legal requirements change. The date at the top will be updated and important changes will be communicated clearly where appropriate.

If you have questions about this policy or how we process personal data, please contact us.

Privacy contact: info@wixpie.com.