Privacy Policy

Effective date: June 01, 2026 Last updated: June 01, 2026

This Privacy Policy explains how Heterodox LLC ("Pixsie," "we," "us," or "our") collects, uses, and shares information when you use pixsie.app and the related services (the "Service"). Pixsie is a QR-code photo and video sharing tool for events. By using the Service, you agree to this Policy.

If you do not agree, do not use the Service.

1. Who this Policy covers

The Service has two kinds of users, and this Policy applies to both:

• Hosts. People who create an event, pay for it, and invite others to contribute or view media.
• Guests. People who scan an event QR code to upload, view, or download photos and videos.

Where a Host sets up an event, the Host decides who is invited and what is shared. For media uploaded to an event, Pixsie acts on the Host's behalf to store and display that content. The Host is responsible for the content collected at their event, including obtaining any consent required from people who appear in it. See Section 6.

2. Information we collect

Account information. When a Host creates an account, we collect a name and email address, and any other details the Host chooses to provide (such as an event name or date).

Payment information. Pixsie charges a one-time fee per event. Payments are processed by our third-party payment processor, [Stripe]. We do not collect or store full payment card numbers on our own systems. We receive limited transaction details from the processor, such as a confirmation of payment, the last four digits of the card, and billing contact information.

Event content. Hosts and Guests upload photos and videos to an event ("Content"). This Content, and any captions or metadata attached to it (which can include the time a file was created and, in some cases, location data embedded by the uploading device), is stored so it can be displayed and downloaded within that event.

Information you give us directly. If you contact support, respond to a survey, or send feedback, we collect what you choose to share.

Technical information. When you use the Service, we automatically receive standard technical data such as IP address, browser type, device type, and basic usage events needed to operate and secure the Service.

We do not perform facial recognition, faceprinting, or other biometric analysis on uploaded media, and we do not use Content to identify individuals.

3. Cookies and similar technologies

We use a small number of cookies and similar technologies that are necessary to run the Service, such as keeping you signed in and keeping a session secure. We do not use Content for advertising, and we do not sell access to it. If we add optional analytics in the future, we will update this Policy and, where required, request your consent first.

4. How we use information

We use information to:

• Provide, operate, and maintain the Service, including hosting and displaying event Content.
• Process the one-time event fee and send receipts.
• Authenticate Hosts and secure accounts.
• Respond to support requests and communicate about the Service.
• Detect, prevent, and address fraud, abuse, security issues, and violations of our Terms.
• Comply with legal obligations and enforce our agreements.

For users in regions that require a legal basis (such as the EEA and UK), we rely on performance of our contract with you, our legitimate interests in operating and securing the Service, your consent where we ask for it, and compliance with legal obligations.

5. How we share information

We do not sell personal information. We share it only as described here:

• Service providers. We use vendors to run the Service, such as cloud hosting and storage [PROVIDER], payment processing [Stripe], and email delivery [PROVIDER]. They may process information only to provide services to us.
• Within an event. Content and the information attached to it is visible to the Host and to Guests who have access to that event, by design.
• Legal and safety. We may disclose information if required by law, to respond to lawful requests, or to protect the rights, safety, and property of Pixsie, our users, or the public.
• Business transfers. If Pixsie is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction. We will notify users of any change in control or use of personal information.

6. Photos, videos, and the people in them

Events capture images of real people, and sometimes children. Important rules apply:

• The Host is responsible for ensuring that collecting and sharing event Content is lawful, and for obtaining any consent required from people who appear in that Content under applicable law.
• Anyone who uploads Content confirms they have the right to do so and the right to share images of the people shown.
• If you appear in Content and want it removed, contact the Host who created the event, or contact us at [privacy@pixsie.app] and we will work with the Host to address the request.

7. Children's privacy

The Service is not directed to children, and Hosts and Guests who create accounts must be at least 18 years old. We do not knowingly collect account information from children. Photos taken at an event may include children; that Content is the responsibility of the Host as described in Section 6. If you believe a child has created an account or that we hold a child's personal information improperly, contact us at [privacy@pixsie.app] and we will delete it.

8. How long we keep information

We keep account and transaction information for as long as your account is active and as needed for legal, tax, and accounting purposes.

Event Content is retained for the active life of the event. By default, an event gallery remains available for [90] days after the event date, after which the Content is scheduled for deletion within [30] days, unless the Host downloads it or extends the event. Hosts can request earlier deletion at any time. After deletion, residual copies may persist briefly in backups before being overwritten.

9. Security

We use reasonable technical and organizational measures designed to protect information, including encryption in transit and access controls. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.

10. Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, contact us at [privacy@pixsie.app]. We will respond as required by applicable law and may need to verify your identity first.

United States (including California). If you are a California resident, you may request access to or deletion of your personal information and may ask us to disclose the categories of information we collect and the purposes for using it. We do not sell or share personal information for cross-context behavioral advertising. We will not discriminate against you for exercising these rights.

EEA and UK. You may lodge a complaint with your local data protection authority. Pixsie is the controller of account and account-related information; for event Content, the Host is the controller and Pixsie acts as processor on the Host's behalf.

11. International transfers

We operate from the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States and other countries that may have different data protection laws than your own. Where required, we use appropriate safeguards for such transfers.

12. Changes to this Policy

We may update this Policy from time to time. When we make material changes, we will update the date above and, where appropriate, provide additional notice. Your continued use of the Service after an update means you accept the revised Policy.

13. Contact us

Heterodox LLC Suffolk County, NY Email: [hello@pixsie.app]