Privacy Policy

1. Data We Collect

1.1 Account & Host Data

When you create a Pixloud account, we collect:

• Full name and email address
• Organization name (optional)
• Password (stored as a bcrypt hash — never in plain text)
• Billing information (processed by Stripe; we store only the last 4 digits, card brand, and expiry for display purposes)
• Event details you create: event name, date, theme settings, and moderation preferences

1.2 Guest & Upload Data

Event guests who scan a QR code and submit a photo are not required to create an account. For guest submissions, we collect:

• The photo or image file uploaded
• Optional caption text entered by the guest
• IP address and approximate geolocation (country/region) for fraud prevention
• Browser user-agent string
• Timestamp of the submission

We do not collect guest names, email addresses, phone numbers, or any personally identifiable information from guests unless they voluntarily provide it in a caption.

1.3 Usage & Technical Data

We automatically collect standard server logs and usage telemetry, including:

• Pages visited and features used within the dashboard
• Browser type, operating system, and device type
• Referring URL
• Error logs and performance metrics

1.4 Cookies

We use the following cookies (see Section 5 for full details):

• pixloud_session — authentication session (HTTP-only, secure)
• pixloud_ref — referral code tracking (30-day expiry)
• Crisp chat widget cookies (third-party, for customer support)
• Stripe cookies (third-party, for payment processing)

2. How We Use Your Data

We use the data we collect to:

• Provide, operate, and improve the Pixloud service
• Process payments and manage subscriptions via Stripe
• Send transactional emails (event confirmation, password reset, billing receipts) via Mailgun
• Display submitted guest photos on the event wall after host approval
• Enforce our Terms of Service and detect fraudulent or abusive submissions
• Generate aggregate, anonymized analytics about feature usage (no individual tracking)
• Respond to customer support requests

We do not sell your personal data to third parties. We do not use guest photos or submission data for advertising purposes.

3. Third-Party Services

Pixloud uses the following third-party processors:

Stripe

We use Stripe for payment processing. When you enter billing information, it is sent directly to Stripe over a secure connection. Pixloud does not store raw card numbers. Stripe's use of your data is governed by their Privacy Policy.

Mailgun

We use Mailgun to send transactional emails (receipts, event links, password resets). Mailgun receives your email address for the purpose of sending these messages. We do not share your data with Mailgun for any marketing purpose.

Crisp

We use Crisp to power the live chat widget on pixloud.com. If you use the chat widget, Crisp may collect your IP address, browser type, and any information you share in the chat conversation.

Cloud Storage

Guest-submitted photos are stored in a secure cloud object storage service (e.g., AWS S3 or compatible). Photos are stored in encrypted buckets with access restricted to authorized Pixloud application servers.

4. Data Retention

• Event Starter plans: Guest photos and submission data are stored for 30 days after the event end date, then automatically deleted.
• Event Pro and Org plans: Guest photos and submission data are stored for 90 days after the event end date, then automatically deleted.
• Account data: Retained for as long as your account is active. If you delete your account, we delete your personal data within 30 days, except where retention is required by law (e.g., billing records, which are kept for 7 years for tax and legal compliance).
• Server logs: Retained for 90 days for security and debugging purposes.

You may request early deletion of your data by contacting us at privacy@pixloud.com.

5. Cookies

Pixloud uses cookies to operate the service and remember your preferences. A cookie is a small text file stored in your browser.

• Essential cookies (required): pixloud_session keeps you logged in. Without this cookie, the authenticated dashboard cannot function.
• Functional cookies: pixloud_ref remembers a referral code for 30 days so you receive the correct promotional offer.
• Third-party cookies: Crisp and Stripe set their own cookies as described in their respective privacy policies. You can block these using your browser's cookie controls without affecting core Pixloud functionality.

You can manage or delete cookies at any time through your browser settings. Blocking essential cookies will prevent you from logging in to the dashboard.

6. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request that we correct inaccurate or incomplete data.
• Deletion: Request that we delete your personal data ("right to be forgotten").
• Portability: Request your data in a machine-readable format.
• Objection: Object to processing based on legitimate interests.
• Restriction: Request that we restrict processing in certain circumstances.

To exercise any of these rights, email us at privacy@pixloud.com. We will respond within 30 days. For EU/EEA residents, you also have the right to lodge a complaint with your local data protection authority.

7. Children's Privacy

Pixloud is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has submitted data to our service, contact us immediately at privacy@pixloud.com and we will promptly delete it.

8. Security

We take reasonable technical and organizational measures to protect your data, including TLS encryption for all data in transit, bcrypt password hashing, encrypted storage buckets, and access controls limited to authorized personnel. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered account holders of material changes by email at least 14 days before they take effect. Continued use of Pixloud after the effective date constitutes acceptance of the updated policy. The current version is always available at pixloud.com/privacy.

10. Contact

If you have questions, concerns, or requests related to this Privacy Policy, please contact:

Pixloud Inc.
Privacy Team
Email: privacy@pixloud.com
Website: pixloud.com