Privacy policy

Last updated: 20 July 2026

This policy tells you which personal data we process when you use ECHO or get in touch with us, and what rights you have. It follows the revised Swiss Federal Act on Data Protection (FADP).

Controller

PIXELS AG is responsible for processing your data. The responsible person is Pascal Arnold. For any privacy question, write to hello@pixels.ch.

What data we process and why

Request via the form: When you request access on the product page, we store your name, email address, website, message, as well as your IP address and the source of the request. We use these details to reply to you and to check whether ECHO fits your needs. Submitting the form triggers an email to us and a confirmation to you.

Cockpit account: To give you access to the cockpit, we store your email address, your name, a hash of your password and the times you sign in. An audit log records security-relevant actions together with the email address and IP address so that we can detect misuse.

Use of the product: On your behalf, ECHO queries AI services and stores their answers for analysis. The queries are about brands and competitors, not people. In individual cases an AI answer may still name a person, for example a company owner. We store such details only as part of the answer and do not deliberately analyse them in relation to a person.

Cookies and consent

Necessary cookies are always in use. A session cookie keeps you signed in after login. A lang cookie remembers your language choice. A cookie_consent cookie stores your consent choice as JSON with the selected categories and a timestamp and stays for 180 days.

Anything beyond that runs only with your consent. On your first visit to the public pages we ask you through a banner whether we may load statistics and marketing services. Without your agreement these services stay off and no related code is loaded. You can change or withdraw your choice at any time via the Cookie settings link in the footer. Inside the logged-in cockpit we use none of these services.

Google Tag Manager

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The Tag Manager loads and controls the statistics and marketing services listed below. It starts only once you allow statistics or marketing, and in doing so transmits technical connection data such as your IP address to Google. The legal basis is your consent, which you can withdraw at any time via the Cookie settings. Processing also takes place in the United States.

Google Analytics 4

Provider: Google Ireland Limited, Dublin, Ireland. Purpose: we measure how the site is used, for example which pages are opened and where visits come from, in order to improve our offering. For this Google sets cookies and processes your shortened IP address and usage events.

The legal basis is your consent (Statistics category) with withdrawal at any time via the Cookie settings. The data is also processed in the United States. Google deletes user-level data after 14 months at the latest. This service runs only if you agree to it.

Google Ads (conversion and remarketing)

Provider: Google Ireland Limited, Dublin, Ireland. Purpose: we measure which ads lead to a request (conversion) and show you relevant ads on Google and its partners (remarketing). For this Google sets cookies and processes your IP address and an advertising identifier.

The legal basis is your consent (Marketing category) with withdrawal at any time via the Cookie settings. The data is also processed in the United States. The advertising cookies are usually kept for up to 90 days. This service runs only if you agree to it.

Meta Pixel

Provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. Purpose: we measure the success of campaigns on Facebook and Instagram and build audiences for ads. For this Meta sets cookies and processes your IP address as well as device and usage data.

The legal basis is your consent (Marketing category) with withdrawal at any time via the Cookie settings. The data is also processed in the United States by Meta Platforms, Inc. The cookies are usually kept for up to 90 days. This service runs only if you agree to it.

Recipients and transfers abroad

We work with service providers that process data only on our behalf. Hetzner runs our servers in Germany (EU). Brevo sends our emails from within the EU. OpenAI, Anthropic, Perplexity and Google process the AI queries in the United States. Google and Meta also process the consent-based statistics and marketing data in the United States.

Where data goes to the United States or other countries outside Switzerland and the EU, we base the transfer on appropriate safeguards under Art. 16 f. FADP, such as standard contractual clauses or a recognised certification of the provider.

How long we keep data

We keep your data for as long as your account or our business relationship exists, or as long as legal obligations require. Once we no longer need data, we delete it.

Your rights

Under the FADP you can request information about the data we hold about you. You can have it corrected or deleted, request its release or transfer, and object to processing.

For all of these, write to hello@pixels.ch. To make sure no data reaches the wrong person, we verify your identity first.

If you disagree with how we process your data, you can contact the Swiss Federal Data Protection and Information Commissioner (FDPIC).

No automated individual decisions

We do not make decisions about you based solely on automated processing, and we do not carry out profiling within the meaning of the FADP.

Security

We transmit data encrypted over TLS, store passwords only as a hash, and restrict access by role.

Changes

If our processing changes, we update this policy. The version on this page is the one that applies.