Privacy Policy

Effective August 16, 2026 · Operated by Pixel Plugins

1. Who We Are

DMNexa is operated by Pixel Plugins ("we", "us", "our"). DMNexa helps sellers manage customer requests, conversations, order drafts, subscriptions, and customer notifications.

2. Who This Policy Covers

Sellers: people and businesses that create and use a DMNexa seller account.
Customers: people whose order details, public order requests, or conversations are processed by DMNexa on behalf of a seller.

3. Information We Collect

Seller account and store data

Name, email address, phone number, store name, username, Firebase UID, and authentication metadata.
Business profile, service area, currency, pickup/delivery rules, availability, deposit settings, notification settings, products, and AI Brain setup details.
Legal acceptance records, document versions accepted, IP address, user agent, and acceptance timestamp.

Customer and order data

Customer name, phone, email, address, order details, notes, preferences, photos or attachments when provided, and allergy or dietary notes when provided.
For sellers who connect a Shopify store, customer name, email, and phone number synced from Shopify — see Section 6.
Public order page data and customer consent records when a customer-facing order flow is used.

Conversation and AI data

Instagram/Meta message data from connected seller accounts, pasted/imported conversations, and conversation metadata.
Order text, conversation text, AI extracted fields, AI generated drafts, suggested replies, validation state, and AI usage logs.

Billing, device, and infrastructure data

Stripe customer, subscription, price, payment status, and billing portal identifiers. Payment card information is processed by Stripe; DMNexa does not store full payment card numbers or CVV.
Firebase/Auth and Google Cloud infrastructure logs, request metadata, IP address, user agent, and push notification tokens if enabled.

4. How We Use Information

To operate DMNexa seller accounts, order management, customer records, public order pages, notifications, and billing.
To analyze seller setup, order details, and conversations with AI tools so sellers can prepare order drafts.
To maintain legal acceptance records, privacy controls, communication preferences, and privacy request tracking.
To secure the service, prevent abuse, troubleshoot issues, and comply with legal, billing, tax, or dispute obligations.
To improve the product using operational and aggregate analytics where practical.

5. Instagram, Meta, and Imported Conversations

DMNexa receives Instagram messages only for seller accounts that connect an Instagram Business account.
Instagram message content is retained for up to 14 days. Conversation metadata may remain while the seller account is active unless deletion is requested.
We do not use customer messages for advertising.
Sellers are responsible for giving their own customers appropriate notice when importing, pasting, or connecting conversations for processing by DMNexa.

6. Shopify and Connected Stores

DMNexa receives store, product, order, and customer data only for seller accounts that connect a Shopify store.
Customer data received from Shopify is limited to name, email address, and phone number. DMNexa does not request, receive, or store Shopify customer addresses.
Product and order data from Shopify is used to keep DMNexa's catalog and order records in sync with the connected store, and to let sellers push orders created in DMNexa back to Shopify as draft orders.
When Shopify notifies us that a customer's data must be deleted, or that a store has disconnected and its data must be removed, we process that request in the connected seller's account as required by Shopify's developer policies.
Sellers remain responsible for their own obligations to their Shopify customers under Shopify's terms and applicable law when connecting a store to DMNexa.

7. Sharing and Subprocessors

We do not sell personal information. We do not share customer messages for advertising. We use service providers that process information for DMNexa:

Google Cloud / Firebase: hosting, authentication, infrastructure, storage, and notifications.
Google Analytics: optional measurement of public marketing, Help, Learn, Support, and legal page usage only after the visitor accepts Analytics; advertising features remain disabled.
Stripe: subscription billing, checkout, billing portal, and payment processing.
Shopify: for sellers who connect a Shopify store, product, order, and customer data (name, email, phone) is exchanged with Shopify to keep catalog and orders in sync — see Section 6.
AI provider: AI processing for order drafts, conversation analysis, and seller setup.
Email provider: service emails when configured.

See also our Subprocessors page. We may disclose information when required by law, legal process, security investigation, fraud prevention, or to protect the rights and safety of DMNexa, sellers, customers, or others.

8. Data Retention

Seller account/settings: retained while the account is active or until deletion request, subject to legal, billing, tax, security, fraud-prevention, or dispute exceptions.
Orders/customers: retained while the account is active or until deletion request, subject to legal and business exceptions.
Instagram messages: up to 14 days.
Conversation metadata: retained while the account is active unless deletion is requested.
Shopify customer data: retained while the store connection is active; removed on Shopify's redaction notice or when the store is disconnected, as described in Section 6.
AI runs/usage logs: retained for billing, security, analytics, and product operations; we avoid raw message content in usage logs where possible.
Server/security logs: approximately 30 days unless needed longer for security or legal reasons.
Stripe billing IDs: retained as needed for billing, tax, legal records, dispute handling, and subscription operations.

9. Website Analytics and Consent

On the DMNexa marketing website, Google Analytics is optional. Its script does not load and no Analytics data is sent before you accept Analytics.
Rejecting non-essential tracking, ignoring the banner, or sending a Global Privacy Control signal keeps Analytics off. Advertising storage, advertising user data, advertising personalization, and Google Signals remain disabled even when Analytics is accepted.
Public customer order pages under /order/ never load Google Analytics or the marketing consent interface.
After consent, Google Analytics may process page views, named link or form interactions, standard campaign tags in the page URL, device and browser information, approximate location, and referring-page information to help us understand whether public content is useful. Form field contents are not included in Analytics events. We do not use this measurement for targeted advertising.
A first-party dmnexa_consent preference cookie remembers the consent version, Analytics choice, choice source, and update time for up to 180 days. It does not contain a name, email address, account ID, or customer order ID.
You can change or withdraw your choice at any time through Privacy choices in the website footer. Rejecting or withdrawing consent removes available Google Analytics cookies and prevents Analytics from loading on later pages.

10. Privacy Requests and California Rights

Depending on where you live, you may request access, deletion, correction, export, opt-out, or integration disconnection. California residents may have rights to know, delete, correct, opt out of sale or sharing, and not be discriminated against for exercising privacy rights.

We do not sell personal information and do not share it for cross-context behavioral advertising. To submit a request, email hello@dmnexa.com or use our privacy request endpoint if available in the product. We may verify your identity or authority before processing.

11. Communication Preferences

Transactional messages support the service, security, account, billing, and order workflows. Marketing messages are separate and default off unless enabled. You can request marketing opt-out at any time.

12. Sensitive Data

Do not enter full payment card numbers, CVV, SSNs, bank account details, emergency details, or medical information into DMNexa order, chat, or AI fields. DMNexa does not process payments and has no need to receive this information — it should not be shared through the service.

13. Security

We use cloud infrastructure controls such as encrypted connections, access controls, private database networking where applicable, and operational monitoring. No internet service can be guaranteed completely secure. See our Data Deletion Instructions for how to request deletion, and contact us using Section 16 to report a security concern.

14. Children's Privacy

DMNexa is a business tool for adults. We do not knowingly collect personal information from people under 18. If you believe a minor provided information, contact hello@dmnexa.com.

15. Changes

When Terms or Privacy versions change, registered sellers may be asked to review and accept the current versions before continuing to use the seller dashboard.

16. Contact

Email: hello@dmnexa.com
Service: DMNexa, operated by Pixel Plugins