Privacy Policy

1. Overview

PixieMatch helps event photographers and organisers share, find, and sell event photos. This policy explains what personal information we collect, why we use it, who we share it with, and the choices available to you when you use our website, albums, and related services.

PixieMatch is the data controller for information used to run the platform. An album owner may also be a separate data controller for the photos and attendee information they upload or collect.

2. Information we collect

• Account information: your name, email address, account type, profile details, and authentication records.
• Event content: photos, videos, captions, album settings, attendee submissions, and reports.
• Payment information: transaction references, prices, payouts, and billing status. Payment card or mobile-money credentials are handled by our payment providers.
• Technical information: device, browser, IP address, cookies, security logs, and how you interact with the service.
• Face-search information: when enabled for an album, mathematical face measurements used to compare a search selfie with faces in that album.

3. How we use information

We use personal information to provide and secure PixieMatch, including to:

• create accounts, host albums, deliver downloads, and provide customer support;
• run a face search only after the visitor asks us to do so;
• process purchases, refunds, fees, and creator payouts;
• detect fraud, harmful content, account misuse, and security incidents;
• send service messages and, where permitted, product updates; and
• comply with legal obligations and enforce our terms.

4. Face search and biometric information

Face search is optional and limited to the album you choose. We create a numerical representation of the submitted selfie, compare it with face representations in that album, and return likely matches. We do not use this information to identify you outside that album or to train general-purpose facial-recognition models.

The search selfie and its face representation are deleted after the search is completed. Face representations linked to album photos are removed when the relevant photo or album is deleted, or when the album owner disables face search. Results may be imperfect, so you should confirm a match before purchasing or sharing a photo.

5. Google Drive

Photographers and organisers can choose to connect Google Drive to import photos into an album. We ask Google only for access to the files you select in Google’s file picker. We cannot see, list, or open anything else in your Drive.

• We read the files you select, and their names, sizes, and types, only to add them to the album you chose.
• We do not change or delete anything in your Drive, and we do not use your Drive files for advertising or to train AI models.
• We store your Google account email address and encrypted access tokens so you don’t have to sign in to Google every time. Photos you import become part of your album and are handled like any other upload.

You can disconnect Google Drive at any time from an album’s photos page, which deletes our tokens, or remove PixieMatch’s access at myaccount.google.com/permissions.

PixieMatch’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

6. When we share information

We share only what is reasonably necessary with album owners, people you authorise, and service providers that help us with hosting, email, analytics, moderation, payments, and fraud prevention. We may also disclose information where required by law, to protect someone’s safety or rights, or as part of a business reorganisation with appropriate safeguards.

We do not sell personal information or face-search data.

7. Retention and security

We keep information only for as long as needed for the purposes described here, including legal, accounting, dispute, and security requirements. Retention varies by data type and account status. We use access controls, encryption in transit, monitoring, and other organisational and technical safeguards, but no online service can guarantee absolute security.

8. Your choices and rights

Subject to applicable law, you may ask to access, correct, delete, restrict, or object to our use of your information, withdraw consent, or receive a portable copy. You can also request removal of a photo from the album page. We may need to verify your identity before completing a request.

You may complain to Kenya’s Office of the Data Protection Commissioner if you believe your data-protection rights have been infringed.

9. International transfers and children

Some providers may process information outside Kenya. Where required, we use contractual and other safeguards for these transfers. PixieMatch is not directed to children who can’t legally consent to use the service. Album owners must obtain any notices and permissions required before publishing children’s images.

10. Changes and contact

We may update this policy as our service or the law changes. We will post the new date here and provide additional notice when a change materially affects your rights. For privacy requests or questions, email privacy@pixiematch.com.