Last updated: December 17, 2025

PXL LAB LTD (“PXL LAB”, “we”, “us”, or “our”) is committed to protecting your privacy and personal data.

This Privacy Policy explains how we collect, use, disclose, and protect personal data when you use our websites, applications, and cloud-based services (collectively, the “Services”).

This Policy is intended to comply with the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018.

1. Who We Are

Data Controller:

PXL LAB LTD

Company incorporated in England and Wales

Email: support@pixality.ai

Website: https://pixality.ai

PXL LAB acts as a data controller for account, usage, and service data, and as a data processor where we process User Content on behalf of customers.

2. Personal Data We Collect

2.1. Information You Provide

We may collect:

• Name, email address, username, company name, job title;

• Account credentials and authentication information;

• Billing and payment-related information (processed by third-party providers);

• Communications with us (support requests, emails, feedback);

• Content you upload to the Services, including photos, videos, 360° captures, 3D models, Gaussian splats, annotations, and associated metadata (“User Content”).

2.2. Information Collected Automatically

When you use the Services, we may collect:

• IP address, device identifiers, browser type, operating system;

• Log files (access times, feature usage, error logs);

• Performance and diagnostic data;

• Cookies and similar tracking technologies.

2.3. Information from Third Parties

We may receive information from:

• Authentication providers (e.g. Google, Apple);

• Payment processors;

• Analytics, hosting, and infrastructure providers;

• Business partners, where permitted by law.

3. How We Use Personal Data

We use personal data to:

• Provide, operate, and maintain the Services;

• Process User Content and generate outputs (e.g. 3D reconstructions);

• Improve, test, and develop our products and features;

• Conduct internal research and development;

• Train, evaluate, and improve artificial intelligence and machine-learning models;

• Monitor performance, prevent fraud, and ensure platform security;

• Communicate with users regarding support, updates, and service notices;

• Comply with legal and regulatory obligations.

4. Use of User Content for AI and R&D

User Content may be used:

• To provide and operate the Services;

• To create derivative technical representations (e.g. point clouds, Gaussian splats);

• For internal research, testing, and product development;

• For training, validating, and improving AI and machine-learning systems;

• For generating aggregated or anonymised datasets and analytics.

We do not sell User Content.

We do not publicly display identifiable User Content without permission, unless it has been anonymised or aggregated such that it cannot reasonably be linked to you.

5. Lawful Bases for Processing (UK GDPR)

We process personal data on the following legal bases:

• Contract (Article 6(1)(b)) — to provide the Services;

• Legitimate interests (Article 6(1)(f)) — to improve Services, conduct R&D, ensure security, and prevent misuse;

• Consent (Article 6(1)(a)) — where required (e.g. certain marketing communications);

• Legal obligation (Article 6(1)(c)) — to comply with applicable law.

Where legitimate interests are relied upon, we balance our interests against your rights and freedoms.

6. Data Sharing

We may share personal data with:

• Service providers and processors (cloud hosting, analytics, payments, support);

• Professional advisers (legal, accounting, compliance);

• Affiliates and group companies;

• Law enforcement or regulators where required by law;

• A buyer or successor in the event of a merger, acquisition, or asset sale.

All processors are subject to contractual confidentiality and data protection obligations.

7. International Data Transfers

Your personal data may be transferred outside the UK.

Where this occurs, we ensure appropriate safeguards are in place, such as:

• UK International Data Transfer Agreements (IDTA);

• Addendum to EU Standard Contractual Clauses;

• Transfers to countries deemed adequate by the UK government.

8. Data Retention

We retain personal data and User Content only for as long as necessary to:

• Provide and improve the Services;

• Meet legal, regulatory, or contractual requirements;

• Resolve disputes and enforce agreements.

Retention periods vary depending on the nature of the data.

9. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Authenticate users;

• Remember preferences;

• Analyse usage and performance;

• Improve the Services.

You can manage cookies through your browser settings. Disabling cookies may affect functionality.

10. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse.

However, no system is completely secure, and we cannot guarantee absolute security.

11. Your Rights (UK GDPR)

You have the right to:

• Access your personal data;

• Rectify inaccurate or incomplete data;

• Request erasure of personal data;

• Restrict or object to processing;

• Request data portability;

• Withdraw consent where processing is based on consent.

You may exercise your rights by contacting us at support@pixality.ai.

12. Complaints

If you believe we have not handled your personal data appropriately, you have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO):

https://www.ico.org.uk/

13. Children’s Data

The Services are not intended for children under 13 years of age.

We do not knowingly collect personal data from children.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

Changes take effect when published. Continued use of the Services constitutes acceptance of the updated Policy.

15. Contact Us

PXL LAB LTD

United Kingdom

Email: support@pixality.ai

Website: https://pixality.ai