Your data in your dashboard.What we keep, and why.

The Pixel Silo client dashboard is where we work with our clients. It's run by Pixel Silo, a two-person design and technology studio in Cambridgeshire, United Kingdom, run by Luke and Zoe Willson. It covers two things: your website project (where it's up to, and what we need from you), and, for clients on our Adapt plan, looking after the site once it's live (requests, approvals, updates and ideas).

For the information in the dashboard, Pixel Silo is the data controller.

Questions about your data go to Luke at luke@pixelsilo.net.

• Your account: your name, email address and, if you sign in with Google, the profile photo Google shares with us. Access is by invitation only.
• Your work with us: what you send for your project (copy, files, links and decisions), and with Adapt the requests you raise, your comments, approvals and answers, and your responses to ideas we suggest.
• Your settings: how you'd like to be told about things (straight away, a daily summary or in the dashboard only), and any keys you create to connect your own AI assistant. We store those keys in a scrambled form and can't read them back.
• A record of activity: who did what and when on each request, so everyone can see the history. Our hosting providers also keep standard technical logs (such as IP addresses) to keep the service secure and working.

We don't sell your data, use it for advertising, or share it with anyone except the providers listed below.

• To provide the service your organisation has asked us for: building your website, and with Adapt, planning, delivering and approving work on it after launch.
• To tell you when something needs you, or when work is planned, ready or live, by email and in the dashboard.
• To keep the dashboard secure, and to fix problems when they come up.

Under UK data protection law, we rely on our contract with your organisation, and on our legitimate interest in running and securing the service. You can change which emails you get at any time in Email settings.

We use a small number of providers, each only for its own part of the service:

• Supabase stores the database, your files and your sign-in. Our data is held in London.
• Vercel hosts the dashboard, so what you send passes through its network.
• Resend sends the dashboard's emails, from its servers in Ireland.
• Google, if you choose to sign in with your Google account.
• Anthropic, the company behind Claude, which powers the dashboard's AI features (for example sorting requests that arrive by email, and helping you write or answer a request) and helps Luke draft work. It processes the content of requests and briefs only to provide those features, under Anthropic's commercial terms, which don't allow it to train its models on that content.

Some of these companies are based in the United States. Where data leaves the UK, it's covered by the safeguards UK law requires, such as the UK-US data bridge or approved contract terms.

If you connect your own AI assistant to the dashboard (for example Claude or ChatGPT), what you share with that assistant is covered by its provider's terms, not ours. You can remove a connection at any time in Connect your AI.

You can sign in with your Google account instead of an email link. If you do:

• What we receive from Google: your name, email address and profile photo, and a confirmation that Google has signed you in. We ask only for these basic profile details. We don't ask for, and can't see, your Gmail, Google Drive, calendar, contacts or any other Google data, and we never see your Google password.
• How we use it: only to sign you in, to match you to the invitation you were sent, and to show your name and photo to your team and to Luke and Zoe in the dashboard. We use your email address to send you the dashboard's emails.
• Who it's shared with: nobody outside the people working on your site and the providers above that run the dashboard (Supabase holds your sign-in). We don't sell it, use it for advertising, or pass it to anyone else.
• How it's kept and deleted: it's stored with your account for as long as you have access. It's deleted as described below, or straight away if you ask. You can also remove the dashboard's access from your Google account at any time, at myaccount.google.com/permissions.

Pixel Silo's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We don't use Google user data for advertising, we don't sell it, and we don't use it to develop, improve or train AI or machine learning models.

• Everything is sent over encrypted connections (HTTPS), and stored encrypted by our providers.
• Access is by invitation only. Each person sees only the sites they've been given, enforced by the database itself, not just the screens.
• Files you upload are private and are only shared through short-lived links.
• Keys for connecting your own AI assistant are stored scrambled, so even we can't read them back, and you can remove them at any time.
• Only Luke and Zoe have studio access, and the database is backed up daily.

The dashboard uses only what it needs to work. There are no advertising or analytics cookies.

• A sign-in cookie, so you stay signed in.
• A cookie remembering light or dark mode, if you choose one.
• A cookie remembering when you last opened your overview, so we can show what's new since then.
• Unsent text in comment and answer boxes is kept in your browser until you send it, so nothing is lost if you leave the page.

We keep your information while your organisation works with us, so the history of your site stays in one place. When your access ends, or your organisation stops working with us, we delete your account and personal details, including anything received from Google, within 90 days. If you ask us to delete your data sooner, we'll do it within 30 days of your request. We only keep something longer if the law requires it (for example invoices, for accounting).

You can ask us to:

• show you the information we hold about you, and give you a copy;
• correct anything that's wrong;
• delete your information, or stop using it for a particular purpose;
• move it to another service.

Email luke@pixelsilo.net and we'll reply within a month. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk.

If we change how we use your data, we'll update this page and the date at the top, and tell you in the dashboard if it matters.