Privacy Policy

For your Pixinoid account and this website, we decide how personal information is used and are responsible for it.

For albums, the organiser (the studio, college or company that created the album) decides which photos are uploaded and who can see them. We process album photos and guest data on the organiser's behalf to run the album. Organisers are responsible for having the right to upload and share the photos in their albums.

• Organiser accounts: your name, email address and sign-in details (including Google sign-in identifiers), and your workspace's name, logo and settings.
• Albums: the photos organisers upload, their file names, sizes and the folders and settings of each album.
• Guest photos: photos guests choose to upload to albums that accept them.
• Face data: when face search is on, faces in album photos are converted into face templates so guests can find their photos. A guest's selfie is used for one search and then deleted; see Face data below.
• Device identifier: a random identifier stored in a cookie on a guest's browser, used for rate limits and to keep their search results. It contains nothing about who the guest is.
• Usage and log data: IP address, browser type, pages and actions, and timestamps, used to run and protect the service.
• Messages you send us, such as support requests.

We don't ask guests for their name, email or phone number to view an album or find their photos.

• To run albums: store photos, show them to the people the organiser allows, produce downloads, the live wall and shareable images.
• To run face search when the organiser has turned it on and a guest has agreed to it.
• To keep the service secure: rate limits, abuse prevention and debugging.
• To provide support and tell organisers about their account and plan.
• To meet legal obligations.

We don't sell personal information, and we don't use photos or face data to train models or for advertising.

Face search is optional and off for any album where the organiser turns it off. Before a guest's camera opens, they see a consent screen explaining what happens to their face, and the search only runs if they agree.

• The selfie is sent once to search that album's faces, then deleted. It is never stored.
• The list of photos that matched is kept for 30 days, tied only to that browser's device identifier, so the guest can come back to their results.
• Face templates made from album photos are kept until the album is deleted, which deletes all of them.

Our face data page explains this in more detail, including how to ask for your face to be removed.

• With the people the organiser allows to see an album, according to the album's settings.
• With service providers that host our infrastructure, store photos, deliver email and run face matching (Amazon Rekognition, operated by Amazon Web Services in its Mumbai region). They process data only on our instructions and under confidentiality and security obligations.
• With authorities when the law requires it, or to protect the rights and safety of people using Pixinoid.
• In a merger, acquisition or sale of assets, with the protections in this policy continuing to apply.

• Selfies: not kept. Used for one search and deleted.
• Face search results: 30 days.
• Photos: until the organiser deletes them or the album. Face templates: until the album is deleted. When an album's plan ends it becomes read-only and stays available until it's deleted.
• Organiser accounts: while the account is active, and for a limited time after closure where needed for legal, tax or dispute reasons.
• Logs: for a limited time for security and troubleshooting.

Pixinoid isn't directed at children. Events can include guests under 18. Organisers of such events are responsible for getting consent from parents or guardians where the law requires it, and should consider turning face search off for those albums.

We protect data with encryption in transit, access controls, short-lived signed links for photos and downloads, keyed hashing for album PINs, and rate limits on sign-in, PIN and face search attempts. No system is perfectly secure; if we learn of a breach affecting your data, we'll notify you and the authorities as the law requires.

Depending on where you live, including under India's Digital Personal Data Protection Act, you can ask to access, correct or delete your personal information, withdraw consent, and nominate someone to act for you. Guests who want a photo of them removed can ask the album's organiser, or write to us and we'll work with the organiser.

Write to privacy@pixinoid.com. We'll reply within 30 days. If you're not satisfied with our response, you can complain to the Data Protection Board of India or your local authority.

We'll update this page when our practices change and change the date at the top. For significant changes we'll tell organisers by email before they take effect.

Privacy questions and requests: privacy@pixinoid.com. Everything else: support@pixinoid.com.