Privacy Policy

1. Information We Collect

We collect information in several ways: directly from you, automatically when you use the Service, and from third parties.

1.1 Information You Provide Directly

Account Registration

• Required: Email address, username, password
• Optional: Display name, profile picture, bio, location, website URL, social media links

Content and Communications

• Photographs and digital artwork you upload
• Captions, titles, descriptions, and tags associated with your content
• Comments and reactions on other users' content
• Direct messages and group chat communications
• Reports, feedback, and support requests

Payment and Tax Information

For creators participating in our monetization program:

• Bank account details and routing information (processed by Stripe)
• Tax identification information (SSN, EIN, or international tax ID)
• Business information for Business Pro accounts
• Payout history and earnings records

Verification Information

• Government-issued identification (for identity verification via Stripe)
• Proof of address (when required for compliance)

1.2 Information Collected Automatically

Device and Technical Information

• Device type, model, and operating system
• Browser type and version
• IP address and approximate location
• Unique device identifiers
• Screen resolution and device capabilities

Usage Information

• Pages viewed and features accessed
• Time spent on pages and interaction patterns
• Search queries within the platform
• Content viewed, liked, and shared
• Referral source and exit pages
• Crash reports and performance data

Cookies and Similar Technologies

• Session cookies for authentication
• Preference cookies for settings
• Analytics cookies for service improvement
• Local storage for performance optimization

1.3 Information from Third Parties

• OAuth Providers: If you sign in via Google, Apple, or other OAuth providers, we receive basic profile information
• Payment Partners: Stripe may provide us with verification status and payout information
• Print Partners: Printify provides order fulfillment status and delivery information
• Analytics Services: Aggregated usage data from analytics providers

2. How We Use Your Information

2.1 Providing and Improving the Service

• Create and manage your account
• Display your content to other users
• Enable social features (follows, comments, messages)
• Process poster orders and manage payouts
• Provide customer support and respond to inquiries
• Personalize your experience and content recommendations
• Analyze usage patterns to improve features and functionality

2.2 Safety and Security

• Verify user identity and prevent fraud
• Monitor for and remove prohibited content
• Detect and prevent unauthorized access or security breaches
• Enforce our Terms of Service and Content Guidelines
• Protect the rights and safety of our users and third parties

2.3 Communications

• Send transactional emails (account verification, password reset, order confirmations)
• Notify you about activity on your content (votes, comments, sales)
• Inform you about new features, updates, and service announcements
• Send marketing communications (with your consent, where required)

2.4 Legal and Compliance

• Comply with applicable laws, regulations, and legal processes
• Respond to lawful requests from public authorities
• Generate tax documentation and regulatory reports
• Exercise and defend our legal rights

2.5 AI and Automated Processing

We use artificial intelligence, including Anthropic's Claude, to:

• Analyze uploaded content for policy compliance and content moderation
• Detect potentially harmful or prohibited content
• Improve content discovery and recommendations
• Enhance search functionality

No fully automated decisions with significant legal or similar effects are made without human review.

3. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA) and United Kingdom, we process personal data under the following legal bases:

4. Information Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

4.1 Service Providers

We share information with third-party service providers who perform services on our behalf:

All service providers are contractually obligated to protect your information and use it only for the specified purposes.

4.2 Other Users

Certain information is visible to other users based on your privacy settings:

• Public profile information (username, display name, bio, profile picture)
• Content you choose to make public
• Comments, votes, and other public interactions
• Follower and following lists (unless set to private)

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to:

• Valid legal process (subpoenas, court orders, search warrants)
• Requests from government authorities
• To protect the safety of any person or prevent illegal activity
• To protect our rights, property, or the security of our Service

4.4 Business Transfers

In the event of a merger, acquisition, bankruptcy, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and your choices regarding your information.

4.5 With Your Consent

We may share your information in other circumstances with your explicit consent.

5. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Retention Periods

• Account data: Retained while your account is active and for 30 days after deletion request
• Content: Deleted upon request, except as required for legal compliance or ongoing transactions
• Financial records: 7 years (tax and regulatory requirements)
• Security logs: 1 year
• Analytics data: 26 months in aggregated form
• Support communications: 3 years

6. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

6.1 Access and Portability

You can request a copy of your personal data in a structured, commonly used, machine-readable format. Use the "Export My Data" feature in your account settings or contact us directly.

6.2 Correction

You can update most of your personal information directly through your account settings. For information that cannot be self-corrected, contact us.

6.3 Deletion

You can request deletion of your account and associated personal data. Visit your account settings or contact us at privacy@pixallpop.com. Note that some information may be retained for legal compliance.

6.4 Restriction of Processing

You can request that we restrict the processing of your personal data in certain circumstances, such as while we verify the accuracy of your data.

6.5 Objection

You can object to processing based on legitimate interests. We will cease processing unless we have compelling legitimate grounds.

6.6 Marketing Opt-Out

You can opt out of marketing communications at any time by:

• Clicking "unsubscribe" in any marketing email
• Adjusting your notification preferences in account settings
• Contacting us at privacy@pixallpop.com

6.7 Withdraw Consent

Where we rely on consent, you may withdraw it at any time. This does not affect the lawfulness of processing before withdrawal.

7. Cookies and Tracking Technologies

7.1 Types of Cookies We Use

7.2 Managing Cookies

You can manage your cookie preferences through our cookie consent banner or your browser settings. Note that disabling essential cookies may affect Service functionality.

7.3 Do Not Track

Our Service currently does not respond to "Do Not Track" browser signals. However, you can control tracking through our cookie settings and browser controls.

8. Data Security

We implement comprehensive security measures to protect your personal information:

8.1 Technical Safeguards

• Encryption: AES-256 encryption for sensitive data at rest; TLS 1.3 for data in transit
• Access Controls: Role-based access with principle of least privilege
• Authentication: Secure password hashing (bcrypt), optional two-factor authentication
• Infrastructure: Cloud hosting with SOC 2 compliance, DDoS protection
• Monitoring: Real-time security monitoring and intrusion detection

8.2 Organizational Safeguards

• Regular security training for employees
• Confidentiality agreements for all personnel
• Regular security audits and penetration testing
• Incident response procedures
• Data processing agreements with all service providers

8.3 Breach Notification

In the event of a data breach affecting your personal information, we will notify you and relevant authorities as required by applicable law, typically within 72 hours of discovery.

9. International Data Transfers

PixallPop is based in the United States. Your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate.

9.1 Safeguards for International Transfers

When we transfer data internationally, we use appropriate safeguards:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Data Processing Agreements with all service providers
• Adequacy decisions where applicable
• Binding Corporate Rules where available

9.2 Your Consent

By using our Service, you acknowledge and consent to the transfer of your information to the United States and other jurisdictions, which may have different data protection laws than your country of residence.

10. Children's Privacy

PixallPop is not intended for use by children under 13 years of age (or 16 in certain jurisdictions). We do not knowingly collect personal information from children under these age thresholds.

If we discover that we have collected information from a child under the applicable age, we will promptly delete that information. If you believe we have collected information from a child, please contact us at privacy@pixallpop.com.

11. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the following additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

11.1 Right to Know

You have the right to request disclosure of:

• Categories of personal information collected
• Categories of sources from which information is collected
• Business or commercial purpose for collection
• Categories of third parties with whom we share information
• Specific pieces of personal information we have collected about you

11.2 Right to Delete

You have the right to request deletion of your personal information, subject to certain exceptions.

11.3 Right to Correct

You have the right to request correction of inaccurate personal information.

11.4 Right to Opt-Out of Sale/Sharing

We do not sell your personal information. We do not share personal information for cross-context behavioral advertising purposes.

11.5 Right to Non-Discrimination

We will not discriminate against you for exercising your privacy rights.

11.6 Exercising Your Rights

To exercise your California privacy rights, contact us at privacy@pixallpop.com or use the "Privacy Request" feature in your account settings. We will verify your identity before processing requests.

11.7 Authorized Agents

You may designate an authorized agent to make requests on your behalf with written authorization.

11.8 Categories of Information

In the past 12 months, we have collected the following categories of personal information:

• Identifiers (name, email, username, IP address)
• Commercial information (purchase history, earnings)
• Internet activity (browsing history, interactions)
• Geolocation data (approximate location from IP)
• Professional information (for Business Pro accounts)
• Inferences (content preferences, recommendations)

12. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have the following rights under the General Data Protection Regulation (GDPR):

12.1 Your GDPR Rights

• Right of Access (Art. 15): Obtain confirmation of processing and a copy of your data
• Right to Rectification (Art. 16): Correct inaccurate or incomplete data
• Right to Erasure (Art. 17): Request deletion ("right to be forgotten")
• Right to Restriction (Art. 18): Limit processing in certain circumstances
• Right to Portability (Art. 20): Receive your data in a portable format
• Right to Object (Art. 21): Object to processing based on legitimate interests
• Rights Related to Automated Decision-Making (Art. 22): Not be subject to solely automated decisions with legal effects

12.2 Data Protection Officer

For GDPR-related inquiries, contact our Data Protection team at dpo@pixallpop.com.

12.3 Supervisory Authority

You have the right to lodge a complaint with your local data protection supervisory authority if you believe your rights have been violated.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

• Material Changes: We will notify you via email and/or prominent notice on our Service at least 30 days before changes take effect
• Minor Changes: We will update the "Last Revised" date at the top of this policy
• Your Continued Use: Constitutes acceptance of the updated Privacy Policy

We encourage you to review this Privacy Policy periodically.

14. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

We aim to respond to all legitimate requests within 30 days (or sooner where required by law). If a request is particularly complex, we may require an additional 30 days, in which case we will notify you.