1. Who We Are & Scope of Policy
PixelMarket is a multi-vendor digital and physical creator commerce platform operated by Bhatiserve Technologies Pvt. Ltd. (referred to herein as “PixelMarket”, “Company”, “we”, “us”, or “our”). This Privacy Policy applies to all registered and visiting users (“Buyers”, “Creators/Sellers”, “Print Fulfillment Partners”, or “Visitors”) across our storefront, dashboards, APIs, and escrow payment systems.
2. Personal Data We Collect
We only collect personal information necessary to deliver transparent commerce, secure transactions, and fulfill regulatory compliance:
- Account & Identity Information: Full legal name, username, email address, mobile phone number, billing address, and physical shipping address.
- Creator & Merchant KYC Verification: Permanent Account Number (PAN), Goods & Services Tax Identification Number (GSTIN), business registration documents, and verified bank account/UPI details required for automated escrow disbursements and statutory TDS compliance.
- Transaction & Escrow Data: Order records, milestone agreements, checkout totals, payment transaction IDs, and escrow settlement status. All card, UPI, and net-banking transactions are processed through RBI-authorized payment aggregators (e.g., Razorpay). PixelMarket never stores raw credit/debit card numbers or CVVs.
- Project Briefs, Communications & Assets: Project specification briefs, chat messages exchanged between buyers and sellers, custom print artwork uploads, and downloadable digital assets.
- Technical & Telemetry Data: IP addresses, browser specifications, operating system details, access timestamps, and device identifiers collected for security defense and rate limiting.
3. How We Use Your Information
We process your personal information for lawful and legitimate purposes, including:
- Facilitating transactions across our three commerce engines: Freelance Services, Instant Digital Assets, and Phygital Print-on-Demand.
- Administering milestone-based escrow contracts, automated fund splits, tax invoicing, and creator payouts.
- Maintaining fraud prevention, automated threat mitigation, rate limiting, and anti-circumvention enforcement.
- Complying with statutory obligations under Indian tax laws, including Section 194-O TDS deductions and GST reporting.
- Resolving disputes between buyers and sellers via our Resolution Center and providing transactional customer support.
4. Disclosure & Data Sharing
PixelMarket does not sell, rent, or lease personal information to third-party advertisers or data brokers. We share data strictly on a need-to-know basis with:
- Certified Print Fulfillment Partners: Only shipping names, delivery addresses, phone numbers, and print specifications necessary to manufacture and ship physical print merchandise.
- Licensed Payment Aggregators & Banks: RBI-authorized gateways (e.g., Razorpay) to verify authorizations, process escrow disbursements, and address chargebacks.
- Legal & Regulatory Authorities: When required by statutory orders, court warrants, or lawful governmental inquiries to protect against fraud or maintain platform integrity.
5. Cookies & Storage Technologies
We utilize strictly necessary session cookies, CSRF protection tokens, shopping cart state storage, and user preference cookies (such as theme and layout preferences). We do not deploy intrusive third-party cross-site behavioral tracking cookies.
6. Data Security & Retention Standards
We implement multi-layered administrative, technical, and physical safeguards:
- End-to-end encryption in transit via TLS 1.3 / HTTPS.
- Strong password hashing utilizing modern cryptographic standards (Argon2id/bcrypt).
- Role-based access controls (RBAC) and database privilege separation.
- Financial and invoice records are preserved in accordance with statutory accounting requirements (minimum 8 years).
7. Your Rights Under Indian Data Protection Laws
Subject to applicable provisions under the Digital Personal Data Protection Act (DPDPA), 2023, you have the right to request access to your stored profile data, request corrections of incomplete or inaccurate information, and request deletion of non-statutory account information upon closure of all active escrow transactions.
8. Grievance Officer & Privacy Desk
In accordance with the Information Technology Act, 2000 and the rules framed thereunder, our designated Grievance Officer can be contacted at: