Privacy Policy

Introduction

Welcome to PixlyStudio. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our photo management application. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the application.

Information We Collect

Personal Information

We collect the following personal information when you create an account and use PixlyStudio:

• Account Information: Username, email address, and authentication credentials through Auth0
• Connected Storage Information: Access to read photo and video files from the Google Drive, OneDrive, or local NAS folders you authorize
• Profile Information: Display name, profile preferences, and theme settings

Photo Metadata

We store metadata about your photos and videos, including:

• File names, sizes, and creation dates
• File IDs and folder locations from your connected storage (Google Drive, OneDrive, or local NAS)
• EXIF data (camera settings, location data if available)
• AI-generated labels and tags for photo content
• Smart album associations and organization preferences
• Hidden/visible status and user-assigned categories

Where Your Photos Actually Live

We do not maintain a permanent copy of your photo library. Your original files remain in your connected Google Drive, OneDrive, or local storage - we primarily store references and metadata to organize and display them. For performance, thumbnails and recently-viewed full-resolution images are temporarily cached on our servers and automatically expire. Specific photos are also sent to supporting third-party services only when a feature you use requires it - for example, automated content-safety scanning, or a print provider when you place a print order (see Third-Party Service Providers below).

Usage Information

• Application usage patterns and feature interactions
• Error logs and diagnostic information
• Session data and authentication tokens

How We Use Your Information

We use the information we collect to:

• Provide Core Services: Display and organize your photos through our smart album and tagging features
• AI Features: Generate automatic labels and tags using machine learning to categorize your photos
• Sync with Your Connected Storage: Keep your photo library up-to-date by monitoring authorized Google Drive, OneDrive, and local NAS folders for new or removed photos
• Memory Generation: Create automatic photo memories and collections based on dates and events
• Personalization: Remember your preferences, theme settings, and viewing options
• Account Management: Maintain your account, process authentication, and provide customer support
• Improve Services: Analyze usage patterns to enhance features and fix bugs
• Security: Protect against unauthorized access and maintain application security

How We Share Your Information

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

Third-Party Service Providers

• Auth0: For secure authentication and identity management
• Google Drive API: To access and read photos from your authorized Google Drive folders
• Microsoft Graph API (OneDrive): To access and read photos from your authorized OneDrive folders
• AWS Rekognition: To automatically scan photos for explicit or graphic content as part of our content-safety process
• Stripe: To process payments for print orders
• Artelo and Peecho: Our print fulfillment partners - when you place a print order, the specific photos and shipping information needed to produce and ship it are sent to whichever partner is fulfilling that order
• MailerSend: To deliver account, order, and notification emails
• PostgreSQL: For storing application data and metadata
• Redis: For caching and session management
• Akeyless: For secure credential management

Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

Data Storage and Security

We implement appropriate technical and organizational security measures to protect your information:

• Encrypted data transmission using HTTPS/TLS
• Secure authentication through Auth0
• Database access controls and encrypted connections
• Regular security updates and monitoring
• Secure credential storage using Akeyless

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

Your Data Rights

You have the following rights regarding your data:

Access and Portability

You can view all your data through the application interface, including smart albums, tags, and connections.

Modification

You can update your profile information, preferences, and photo organization at any time through your account settings.

Deletion

You can delete your account at any time from your Profile page. When you delete your account:

• All your metadata, smart albums, tags, and connections are permanently deleted
• Your AI-generated labels and memory collections are removed
• Your connected storage access (Google Drive, OneDrive, local NAS) is revoked
• Your actual photos remain safe in your original storage - we never delete your files

Revoke Storage Access

You can disconnect individual folders or completely revoke access at any time through the My Drives page, or directly through your Google Account settings, Microsoft account settings, or your local NAS agent.

Google Drive API Disclosure

PixlyStudio's use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.

Specifically, PixlyStudio:

• Only accesses Google Drive folders you explicitly authorize
• Only reads photo and video files for display and organization purposes
• Does not modify, delete, or share your Google Drive files with other users
• Does not sell your Google Drive data or use it for advertising
• Shares specific files with another service only as needed to provide a feature you've actively used - for example, automated content-safety scanning, or a print provider when you place a print order (see Third-Party Service Providers above for the complete list) - never for any unrelated purpose
• Uses Google Drive data solely to provide photo management features within PixlyStudio

Microsoft Graph API Disclosure

PixlyStudio's use of information received from the Microsoft Graph API (for OneDrive access) is held to the same standard as our use of Google Drive data above.

Specifically, PixlyStudio:

• Only accesses OneDrive folders you explicitly authorize
• Only reads photo and video files for display and organization purposes
• Does not modify, delete, or share your OneDrive files with other users
• Does not sell your OneDrive data or use it for advertising
• Shares specific files with another service only as needed to provide a feature you've actively used - for example, automated content-safety scanning, or a print provider when you place a print order (see Third-Party Service Providers above for the complete list) - never for any unrelated purpose
• Uses OneDrive data solely to provide photo management features within PixlyStudio

Cookies and Tracking

We use cookies and similar tracking technologies to:

• Maintain your login session
• Remember your theme and display preferences
• Improve application performance through caching
• Analyze usage patterns to enhance features

You can configure your browser to refuse cookies, but this may limit your ability to use certain features of PixlyStudio.

Children's Privacy

PixlyStudio is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us so we can delete it.

Data Retention

We retain your data for as long as your account is active or as needed to provide you services. We will retain and use your information as necessary to:

• Comply with legal obligations
• Resolve disputes
• Enforce our agreements
• Provide continued service

Upon account deletion, we will delete or anonymize your data within 30 days, except where we are required by law to retain it longer.

International Data Transfers

Your information may be transferred to and maintained on servers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. By using PixlyStudio, you consent to the transfer of your information to our facilities and the third parties with whom we share it as described in this privacy policy.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Updating the "Last Updated" date at the top of this policy
• Posting the new policy on this page
• Sending an email notification for material changes (if you've provided an email address)

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when posted on this page.

Contact Us

If you have any questions about this Privacy Policy, please contact us:

• Email: [email protected]
• Application Name: PixlyStudio