Introduction
At Pixload, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our real-time event photography service.
Information We Collect
Personal Information
- • Name and email address when you create an account
- • Payment information for event processing
- • Camera and device information for connectivity
- • Event details (name, date, location) that you provide
Photo Data
- • Original photos uploaded during events
- • Processed and enhanced versions of photos
- • Facial recognition data (temporarily processed, not stored)
- • Photo metadata (timestamp, camera settings, location if enabled)
Usage Information
- • App usage patterns and feature interactions
- • Gallery access logs and download statistics
- • Device information and technical diagnostics
- • IP addresses and general location data
How We Use Your Information
Service Delivery:
To provide real-time photo processing, gallery creation, and guest access management.
AI Processing:
To enhance photos, recognize faces for personalized galleries, and organize content automatically.
Communication:
To send event notifications, gallery links, and important service updates.
Payment Processing:
To handle billing for events and subscription services.
Improvement:
To analyze usage patterns and improve our service quality and features.
Legal Compliance:
To comply with applicable laws and protect our legal rights.
How We Protect Your Data
Encryption:
All data is encrypted in transit using TLS 1.3 and at rest using AES-256 encryption.
Secure Storage:
Photos are stored on Cloudflare R2 (buckets in EU jurisdiction) with enterprise-grade security and access controls.
Limited Access:
Only authorized personnel have access to user data, and only when necessary for service delivery.
Gallery Security:
Each gallery uses cryptographically secure URLs that cannot be guessed or enumerated.
Facial Recognition:
To match people with their event photos, the app detects faces in the event's photos and computes biometric templates (mathematical representations of facial features). These templates are stored so the app can match you to the photos you appear in. They are used only for this purpose and are never shared with third parties. Templates computed from an event's photos are scoped to that event. See the Biometric Data section for retention periods, cross-gallery search and your rights.
Regular Audits:
We conduct regular security audits and vulnerability assessments.
Biometric Data
The app processes biometric data (facial features) to help you find the photos you appear in. When selfie-based search is enabled for an event, a biometric template is computed from the faces detected in that event's photos and from your selfie, then compared to find your photos. Templates computed from an event's photos are scoped to that event.
- • Your selfie photo is deleted within minutes, once its template has been computed
- • Anonymous selfie-search data is deleted within 24 hours; for logged-in users, your selfie template is kept up to 90 days, renewed while your consent is active and deleted automatically when it lapses
- • Templates from an event's photos are used only within that event and are never shared with third parties. Separately, if you create an account and explicitly opt in, your own selfie template can be used to find your photos across the galleries you visit; you can withdraw this at any time
- • You can withdraw your consent and request deletion of your biometric data at any time
Cookies & Tracking Technologies
We use cookies and similar technologies to improve your experience. The technologies below are categorized by their legal basis.
Essential Cookies
- • Authentication and session management (Supabase auth cookies)
- • Language and theme preferences (localStorage)
Analytics Cookies (consent required)
- • Google Analytics (GA4) — usage statistics. Cookies: _ga (2 years), _gid (24 hours), _gat (1 minute). Only loaded after you accept analytics cookies.
- • PostHog — product analytics (EU-hosted). Cookies: ph_* (1 year). For connected users, your user ID and email are transmitted for analytics purposes. Only loaded after you accept analytics cookies.
- • pixload_attribution — audience-measurement cookie capturing the first page you visited and your acquisition source (referrer, UTM tags). HMAC-signed to prevent tampering. 30-day TTL, automatically cleared on the first login after signup. Only set after you accept analytics cookies.
No-Consent Technologies (legitimate interest)
- • Anonymous first-party audience measurement (aggregate gallery views and downloads). No cookies, no personal data, no cross-site tracking. Always active as CNIL-exempt audience measurement under legitimate interest.
- • Sentry — error monitoring for application stability (EU-hosted). Captures technical errors only (stack traces, browser info). Session replays on errors only, with all text masked and all media blocked. No user tracking or profiling.
- • Internal engagement tracking — anonymous gallery usage statistics (views, downloads, shares). Uses a random session-scoped visitor ID (UUID) with no link to your identity. No cookies. Based on legitimate interest.
You can manage your cookie preferences at any time using the "Cookie Policy" button in the footer.
Legal Bases (GDPR Art. 6)
We process your data based on the following legal grounds:
- • Consent (Art. 6(1)(a)) — Google Analytics, PostHog: only activated after your explicit consent via the cookie banner.
- • Performance of contract (Art. 6(1)(b)) — Pixload service: photo processing, gallery creation, facial recognition matching, account management.
- • Legitimate interest (Art. 6(1)(f)): Sentry (error monitoring) and internal engagement tracking (anonymous usage statistics).
- • Legal obligation (Art. 6(1)(c)) — Data retention required by applicable regulations.
Sub-processors
We use the following third-party service providers to deliver our services:
- • Supabase — Database and authentication (Ireland, EU)
- • Vercel — Web hosting and serverless functions (USA — EU-US Data Privacy Framework)
- • Cloudflare — CDN and image optimization (EU)
- • Google Analytics — Web analytics (USA — EU-US Data Privacy Framework)
- • PostHog — Product analytics (EU)
- • Sentry — Error monitoring (EU)
- • Resend — SMTP sub-processor used by Supabase Auth to deliver authentication emails (USA — EU-US Data Privacy Framework)
- • Stripe — Payment processing (USA — EU-US Data Privacy Framework)
Data Retention
We retain your data only as long as necessary.
- • Account data: retained while your account is active
- • Biometric data: automatically deleted after 90 days
- • Anonymous selfies: automatically deleted after 24 hours
- • Analytics data: retained for up to 26 months
Your Rights
Under GDPR, you have the following rights:
- • Right of access to your personal data (Art. 15)
- • Right to rectification of inaccurate data (Art. 16)
- • Right to erasure — right to be forgotten (Art. 17)
- • Right to restrict processing (Art. 18)
- • Right to data portability (Art. 20)
- • Right to object to processing (Art. 21)
- • Right to lodge a complaint with the CNIL (www.cnil.fr)
International Transfers
Your data may be processed on servers located in the European Union and the United States. Transfers to the USA are protected by the EU-US Data Privacy Framework (DPF). All sub-processors handling data outside the EU adhere to Standard Contractual Clauses (SCCs) or equivalent safeguards.
Contact Us
If you have any questions about this Privacy Policy or our privacy practices, please contact us:
Email: privacy@pixload.io
Pixload Limited
Unit 2A, 17/F, Glenealy Tower
No.1 Glenealy, Central
Hong Kong S.A.R.