Privacy policy

Who we are

This policy explains how Pxlhut ("we", "us") collects, uses and protects personal information on this website and in our products, TellyPOS and Institify. Pxlhut is based at Baga Billa, Islampur, Mejortila, Sylhet 3100, Bangladesh.

Each product also has its own, more detailed privacy policy (tellypos.com/privacy and institify.com/legal/privacy). If this page and a product's policy differ, the product's policy applies to that product.

For your account and billing, we are the data controller. For the information a shop or centre enters about its own customers or students, that business is the data controller and we are its data processor: we handle that information only on its instructions.

What we collect

Depending on which Services you use, we collect:

• Website forms. If you ask for a TellyPOS free trial or book an Institify pilot test or demo on pxlhut.com, what you type in: your mobile number, and your name, shop or centre name, role and preferred time where the form asks. The request goes to that product's own system so we can call you back.
• Account and business details. Your name, email, phone number, business name, address, branches and the plan you choose.
• Staff accounts. Names, roles and sign-in details, such as staff PINs, that account owners create. Passwords and PINs are stored in a scrambled form we cannot read.
• Identity documents (TellyPOS). When a shop buys a used device, it can choose to record the seller's national ID number and photos of the ID and the seller. The shop holds this, and only its owner or manager can open the photos.
• Business records. The products, stock, customers, students, tests, sales and other records you create in a Service.
• Payment information. A reference for each payment and the plan it paid for. We do not collect or store full card numbers or mobile-wallet details (see Payments).
• Technical data. Device, browser, IP address and approximate location, logs and how the Services are used, to run, secure and improve them.
• How you use our public websites, only if you allow analytics. The pages you view, and, through Microsoft Clarity, your clicks, taps, scrolling and mouse movement, which Clarity turns into heatmaps and recordings of the visit. Anything you type into a form is hidden from the recording, and we never use it to identify you.

How we use it

We use personal information only to:

• Provide and run the Services and your account.
• Take payments, manage subscriptions and send billing and service messages.
• Prevent fraud and misuse.
• Give support and reply to your requests.
• Understand and improve our website and measure our own advertising, only with your consent (see Cookies and tracking).
• Meet our legal, tax and accounting obligations.

Payments

Payments are made through each product's payment provider: EPS for TellyPOS, and Stripe for Institify subscriptions. You enter your card or mobile-wallet details with the provider, and we never receive or store them. We keep only a payment reference and the status we need to manage your plan.

When an agency or centre connects its own payment account to take payments from its customers or students, that business and its provider handle those payments, not Pxlhut.

Cookies and tracking

pxlhut.com stores only what it needs to work, and remembers your cookie choice. Google Analytics and Microsoft Clarity (to learn which pages help and what gets in the way) and Meta's tools (to measure our ads) are loaded through Google Tag Manager and stay off until you allow them. Cloudflare Web Analytics counts visits without cookies or personal data. Every cookie, what it does and how long it lasts is listed in our Cookie Policy at pxlhut.com/cookies, where you can change your choice at any time.

Microsoft Clarity records how a visit is used (clicks, scrolling, mouse movement and the pages seen) so we can see where people get stuck. It hides what you type into forms. Microsoft keeps the recordings for up to 30 days and the summaries for up to 13 months, under its own privacy statement (privacy.microsoft.com). Clarity also sets Microsoft's own cookies on clarity.ms and bing.com. If you turn analytics off, Clarity stops and erases the cookies it keeps on our site; Microsoft's own cookies stay until they expire or you clear them in your browser.

TellyPOS and Institify use the same kinds of tools on their own public websites, each with its own cookie choice and policy. Analytics and advertising tools run only on public websites, never inside your shop or centre.

If you allowed marketing cookies, a product's server may also tell Meta (through its Conversions API) and Google (through Google Analytics) when you send one of our forms or a shop or centre you signed up pays for the first time, so that we can tell which ads work. It sends the kind of event and a reference for it, the plan and amount for a payment, the advertising identifiers the cookies set, the IP address and browser details of your request, and your email address and phone number scrambled with SHA-256 first, so Meta and Google can match the event without receiving them in readable form. We never send your name, your business's name, your messages or anything stored inside your shop or centre. Without marketing consent, nothing is sent.

Who we share it with

We share information only with providers that help us run the Services, under confidentiality and data-protection terms, and with authorities where the law requires it. We do not sell personal information. Our main providers are:

• Payments: EPS (TellyPOS) and Stripe (Institify subscriptions).
• Website hosting, domain names, email routing and cookie-free visit counts: Cloudflare.
• App hosting: Mumbai, India, for TellyPOS, and Amazon Web Services (AWS) in Sydney, Australia, for Institify.
• File storage: Bunny.net (Singapore) and Amazon S3.
• Email delivery: Amazon SES and Resend.
• SMS: Bangladeshi SMS providers, for receipts, reminders and sign-in codes.
• Analytics and advertising, only if you allow them: Google Analytics, Google Tag Manager, Microsoft Clarity and the Meta (Facebook) Pixel, with Meta's Conversions API (on tellypos.com through a gateway Datahash runs for us).
• AI features (Institify only): the AI providers listed in Institify's privacy policy.

Where your data is stored

We are based in Bangladesh, but your data is stored abroad. TellyPOS data is stored in Mumbai, India, and Institify data in Sydney, Australia. Uploaded files are stored with Bunny.net in Singapore. Some providers process data in other countries, including the United States. We choose providers that protect information properly, and send them only what they need.

How long we keep it

How long we keep account data depends on the product:

• TellyPOS. Your shop's data is kept for as long as the account exists. Cancelling or not paying makes the shop read-only; it does not delete anything. To delete your shop and its data, email support@tellypos.com from the owner's email address.
• Institify. When a centre's agreement ends, it can ask for a copy of its data until 30 days after, and we delete the data within 90 days. Speaking recordings are deleted after 90 days.
• Website form requests are kept for as long as we need them to reply and follow up, and no longer than two years without further contact.
• Payment and tax records are kept for as long as the law requires.

Your rights

You can ask us for a copy of your information, or ask us to correct it, delete it, or stop marketing to you, by emailing hello@pxlhut.com. Account owners can manage much of their data in the Service themselves. We may need to confirm who you are, and we will reply within one month.

If a shop or centre holds your information, for example as its customer or student, please ask that business first. We will help it answer.

Security

We protect data with encrypted connections, scrambled passwords, access limited by role, separation between each customer's data, and regular backups. No system is perfectly secure. If a breach affects your information, we will tell you without undue delay, as the law requires.

Children

Our Services are business tools for adults. Some Institify students are under 18; their centre is responsible for getting any permission needed from a parent or guardian. Children cannot sign up on their own.

Changes and contact

We may update this policy as our Services and providers change. The date at the top shows the current version. We will tell account holders about important changes before they take effect.

Questions or requests: email hello@pxlhut.com, phone +880 1774-224043, or write to Pxlhut, Baga Billa, Islampur, Mejortila, Sylhet 3100, Bangladesh.