Privacy Policy

This Policy defines how Zenbitx LLC protects the confidentiality, integrity, and availability of data across its servers, including local infrastructure and AWS cloud deployment.

This policy ensures the security of all user and operational data, defines encryption standards, and establishes safeguards for GDPR, CCPA, and industry compliance. It applies to:

• All Pixizen operational servers (Local and AWS Cloud).
• All user data processed through the platform.
• Internal and external communications containing sensitive information.
• System administrators, developers, and authorized personnel.

All data processed by Pixizen is classified into three tiers:

1. Personal Data: PII, sensitive user content, and account information.
2. Operational Data: Logs, metadata, and usage statistics.
3. AI Training Data: Anonymized, consented data used for model refinement.

• Transit: Communication between users, local servers, and AWS is secured via TLS 1.3 or higher. Internal APIs utilize mutual TLS (mTLS).
• Remote Access: SSH and RDP access is encrypted with public/private key authentication.
• Key Management: Keys are rotated at least every 12 months. We utilize AWS KMS and local Hardware Security Modules (HSM) or encrypted key stores.

We enforce Role-Based Access Control (RBAC) and require Multi-Factor Authentication (MFA) for all admin-level access. Encrypted backups are maintained on both AWS and local servers, tested regularly for integrity and restore capability to ensure minimum downtime.

Monitoring: Continuous surveillance for malware and unauthorized access with automated alerts. In accordance with GDPR Article 33, breaches are notified within 72 hours.

Third Parties: All sub-processors (AWS, analytics) must comply with GDPR/CCPA security requirements via mandatory contractual encryption and breach notification clauses.

Personnel must follow secure coding practices; plaintext storage of sensitive data is strictly prohibited. This policy is reviewed annually or upon significant infrastructure changes, supported by internal and third-party security assessments.