Privacy Policy

1Data We Collect

From hosts: your name, email address, password (stored only as a one-way hash), organisation or event name, event settings, and billing details handled by Stripe. We never see or store your full card number.

From people hosts invite as moderators: their name and email address, so they can sign in to the approval queue, and the messages hosts and moderators send each other in team chat.

From guests: the photos, video clips, voice notes and messages they choose to send, and a display name if they give one. To apply per-phone limits and stop abuse, we keep a random device code and a scrambled (hashed) form of the IP address with each post. The guest page also saves the guest's name and that device code in the phone's own storage, so limits work and the name is filled in next time. Guests never create an account or give us an email address.

Automatically: technical data such as IP address, browser type and timestamps, including a sign-in history for accounts, used for security, abuse prevention and fixing problems during live events. When you create an account, we also note where you came from, for example a Google ad, a search engine or a partner’s link, so we know which ads and partners work. If you arrived from a Google ad, we keep that ad’s click code for 90 days. We send that code back to Google Ads to record that the click led to an account, and again with the amount and date if you buy a plan. That click code is all we send — never your name, email, photos or messages.

When you contact us: what you send us by email, WhatsApp, the contact form (including details such as your event date and guest count), a feature idea, a safety report, or the Ask Pix help assistant. From partners and resellers: business name, website, the PayPal email address for payouts, and tax forms (W-9) when US law requires them.

2How We Use Your Data

To run the service: show your wall, hold posts for approval, apply limits, build the recap video, voice guestbook and download zip, and send the emails you expect (sign-in, event and download notices, a warning before anything is deleted, and billing receipts).

To keep people safe: apply the blocked-word filter, act on reports, and investigate abuse.

We do not sell or share your data for advertising, use your content to train models, or run face recognition, not now and not as a future feature.

3Third-Party Services

We use a small number of service providers, each limited to what it needs to do its job:

Hostinger (United States) runs our servers and database. Cloudflare provides our domains, security, email forwarding and R2 storage for photos, clips, voice notes and database backups. Stripe processes payments. PayPal sends partner and reseller payouts. Brevo sends our emails. Anthropic powers Ask Pix, our AI help assistant, which sees only the questions you type to it and never guest photos or messages. Google (Gmail) hosts our support inbox. WhatsApp (Meta) carries chats only if you choose to message us there.

Our servers are in the United States. If you use Pixloud from another country, your data is transferred to and processed in the United States.

4Data Retention

How long we keep event media depends on the plan the event was on:

We email you 30 days, 7 days and 1 day before anything is deleted, and you can download everything at any time. You can also pay once to keep an event's photos 1 or 3 more years. Events on a monthly plan keep 12 months only while the plan is active; after it is cancelled they follow Free (7 days after the event, with the reminders above). Venue walls run all year, so each post is deleted 12 months after it was shared. If no plan covers a venue wall any more, the wall pauses and its posts are deleted 30 days later; we email the owner when it pauses and again 7 days before deletion. Guests' messages, names and device codes are deleted together with the event's photos. Other data is kept for:

Posts a host rejects: the file is deleted 30 days after rejection.

A "Download everything" zip: deleted 7 days after it is ready.

Database backups: up to 30 days.

Sign-in history: 12 months. Server logs are rotated out automatically, usually within a few weeks.

Ask Pix questions, closed support requests and the contact details on handled safety reports: 24 months.

Your account: until you close it. We then delete your personal data within 30 days, except billing records we must keep for tax purposes.

5Cookies

We only use cookies that are needed for the site to work: keeping you signed in (and "remember me" if you tick it), security checks on forms, remembering that a guest's phone has already entered an event code, remembering which partner or reseller link brought you to us so they get credit, and a few that remember this device's wall-screen, layout and voting choices. Stripe sets its own cookies on its checkout page to prevent fraud.

Your theme and accessibility choices are saved in your own browser, not sent to us. We do not use analytics, advertising or cross-site tracking cookies. "Cookie settings" in the footer lists every cookie we set. No third party collects information about your activity on Pixloud for its own purposes, and we do not track you across other sites, so we do not change how the site works for Do Not Track signals.

6Your Rights

You can ask for a copy of your data, correct it, or have it erased. Hosts can download an event, or delete all of its photos, clips, voice notes and messages, from the event's Afterwards page at any time, and can close their account from the account page. Closing an account also deletes its support requests and Ask Pix questions.

Guests can use "Report a problem" on the event page, ask the host, or email us, and we will remove anything of theirs. Depending on where you live (for example Texas, California, the EU or the UK) you may have further rights, including to appeal our answer, and we honour them.

Email privacy@pixloud.app for any request. We reply within 30 days.

7Children's Privacy

Pixloud is for adults running events; you must be 18 or over to hold an account. We do not knowingly collect personal information from children under 13, and children should only share to a wall with a parent or guardian involved.

Children may appear in photos at family and school events. Hosts of school or youth events are responsible for having the consent their school or local law requires. A parent, guardian or the host can ask for any photo of a child to be removed, and we treat those requests as urgent.

8Security

Data is encrypted in transit, passwords are hashed, and staff accounts require an authenticator code. Access to customer media is limited to the small number of staff who need it, and staff views of guest posts are written to an audit log.

9Changes to This Policy

If we change how we handle your data we will update this page and, for material changes, email account holders at least 30 days beforehand.

10Contact

Privacy questions and data requests: privacy@pixloud.app. Legal notices: legal@pixloud.app. If you are not satisfied with our answer, you may complain to your local data protection authority or your state attorney general.