Privacy Policy

1. Who we are

This Privacy Policy is issued by MM ECO LLC, a Washington limited liability company doing business as Pixel & Canvas (“Pixel & Canvas,” “we,” “us,” or “our”). It governs our handling of personal information collected through pixelandcanvas.net (the “Site”), our products and services (the “Services”), and any painting you commission from us.

For any privacy-related question or request, email us at [email protected] with the subject line “Privacy Request.”

2. Information we collect

2.1 Information you give us

When you interact with the Services, you may give us:

• Order and checkout information: name, billing address, shipping address, email address, and (if you provide it) phone number, along with the details of your Order.
• Payment information: card details, PayPal account details, or other payment credentials are submitted directly to our payment processors (Stripe, PayPal). We do not store full payment-card numbers on our systems; we receive a confirmation token and basic transaction details only.
• Account information (if you create an account): email address, password (stored as a salted hash), and your order history.
• Source Material: the photographs and instructions you upload or send us for your Order. See Section 3.
• Contact form: your name, email, the reason for contacting us, your message, and any file you choose to attach.
• Newsletter sign-up: your email address.
• Reviews: your name or display name, email, the text of your review, and any photos you attach.
• Customer-support messages: the content of any email, live-chat message, or other communication you send us.

2.2 Information collected automatically

When you visit the Site, we and our service providers automatically collect:

• IP address and approximate geographic location derived from it;
• device type, operating system, browser type and version, screen size;
• the pages you view, the time you spend on them, the links you click, the referring URL, and the search terms that brought you;
• session activity captured by our session-recording tool (mouse movement, scrolls, clicks), with personal-information fields masked by default;
• information from cookies and similar technologies, described in Section 5.

2.3 Information from third parties

We receive limited information from third parties helping us run the business:

• payment processors confirm transaction status and flag suspicious transactions;
• advertising platforms (Meta, Google) report which ads you saw or clicked and which led to a purchase;
• shipping carriers return delivery status updates.

3. Customer-uploaded photos (Source Material)

The photographs you upload or send us are the most sensitive information we receive. The license terms (what we may do with them to fulfill your Order) are set out in Section 5 of our Terms of Service. This section covers the privacy specifics.

• Used only to fulfill your Order. We use your Source Material to design, proof, produce, deliver, and provide customer support for your Order, and for our internal records of that Order.
• Never used in marketing. We do not publish, post, advertise with, or otherwise use Source Material in any public-facing context.
• Never sold, never shared for advertising. Source Material is not part of any “sale” or “sharing” of personal information described elsewhere in this Policy.
• Retention: 2 years after Order completion. Source Material is retained in our active systems for up to 2 years after your Order is fulfilled, then deleted in the normal course. Routine backups may retain copies for a further period until they cycle out under standard rotation.
• Early deletion on request. You may ask us to delete your Source Material sooner under Section 9. We may decline only where retention is required by law or for a pending dispute.

4. How we use your information

We use the information described above for the following purposes:

• to process and fulfill your Order (design, proof, print, ship);
• to communicate with you about your Order (proofs, revisions, shipping, follow-up, support);
• to operate, secure, troubleshoot, and improve the Site and the Services;
• to create and manage your account, if you have one;
• to send you marketing email about products, promotions, and content, where you have consented (you can unsubscribe at any time via the link in every marketing email);
• to measure and improve our advertising, including which ads bring customers to the Site;
• to detect, investigate, prevent, and respond to fraud, abuse, security incidents, and violations of our Terms of Service;
• to comply with our legal obligations (tax, accounting, consumer-protection law, lawful requests from authorities);
• to enforce our Terms of Service and protect our legal rights.

5. Cookies & tracking technologies

We and our service providers use cookies, pixels, local storage, and similar technologies. In plain language, they fall into four categories:

• Strictly necessary: needed for the Site to work (your cart, your session, checkout, security). These cannot be turned off without breaking core features.
• Functional: remember your preferences and personalize parts of the experience.
• Analytics: help us understand which pages people visit, where they came from, and what’s working or broken.
• Advertising & targeting: help us show you relevant ads on other sites (such as Facebook, Instagram, and Google), and measure which ads bring customers to the Site.

You can block or delete cookies in your browser settings. Doing so for the “strictly necessary” category may prevent checkout from working. See Section 9 for how to opt out of “sale” and “sharing” of personal information for cross-context advertising under California and other state laws.

6. Third-party services we use

We use the following service providers. We share with each only the information they need to perform the function listed.

Each provider has its own privacy policy. If you want to review them, search for the provider name plus “privacy policy” or visit their website.

7. How we share your information

We disclose personal information only to the following categories of recipients:

• Service providers listed in Section 6, in each case limited to what they need to perform their function;
• Payment processors to authorize and settle transactions;
• Shipping carriers to deliver your Order;
• Professional advisors (lawyers, accountants, auditors) under duties of confidentiality, when needed;
• Authorities and other parties in response to a lawful request, court order, or to protect our rights, safety, or property, or those of others;
• A successor in connection with a merger, acquisition, financing, reorganization, or sale of all or part of our business.

We do not sell your personal information for money. However, under California and certain other state privacy laws, the term “sale” or “sharing” is defined broadly enough that our use of advertising-and-targeting cookies (for example, the Meta Pixel and Google Ads conversion tracking listed in Section 6) may qualify as “sharing” for cross-context behavioral advertising. You can opt out as described in Section 9.

8. How long we keep your information

We keep personal information only for as long as we need it for the purposes set out in this Policy, plus a reasonable period to handle disputes, defend claims, and comply with our legal obligations. Typical retention periods:

• Order records (transaction details, invoices, communications about the Order): 7 years, to meet tax, accounting, and consumer-protection requirements.
• Source Material (your uploaded photographs): 2 years after Order completion, as described in Section 3.
• Account information: until you ask us to delete your account.
• Marketing email list: until you unsubscribe or otherwise ask to be removed.
• Analytics data (GA4, Clarity, Hotjar): the default retention period of each platform, typically up to 14–25 months.
• Server and security logs: typically 90 days.
• Routine backups: retained according to standard rotation; copies of your data may persist in backups for a limited period after the active-system retention above has elapsed.