What we collect, why we collect it, who we share it with, and the choices you have.
Last updated: October 11, 2026
This Privacy Policy explains how Pixally ("Pixally", "we", "us", or "our") collects, uses, shares, and protects personal information when you visit pixally.com, join our pre-launch waitlist, use the participant portal, or use the Pixally customer relationship management platform (together, the "Service").
It applies to personal information we handle as a controller, meaning where we decide why and how it is processed. This includes information about visitors to our website, waitlist participants, and the individuals who administer a customer account.
It does not apply to information you upload into the Service about your own clients, couples, guests, contractors, and second shooters. For that information you are the controller and we act as your processor, handling it only on your instructions under our Terms of Service and, where applicable, a data processing addendum. If you are an individual whose data was uploaded by a photographer or studio using Pixally, please contact that business directly, and we will support them in responding to you.
If you use a Pixally contractor account, our Contractor Privacy Notice (pixally.com/contractor-privacy) explains how we handle your information. If you are a client of a studio, see our Client Privacy Notice (pixally.com/client-privacy).
We do not sell personal information for money. Our marketing pages use Meta's advertising pixel to measure our ads and to show them to people likely to be interested in Pixally, and some US state laws may treat that as "sharing" personal information for cross-context behavioural advertising, or as a "sale". You can opt out at pixally.com/privacy-choices, and we honour the Global Privacy Control signal (Section 4.4). The pixel never runs in client galleries or portals, in contractor accounts, or on the pages we write for clients and contractors.
Pixally is the controller responsible for the personal information described in this policy. You can reach us at:
For privacy requests, please use privacy@pixally.com so that your request is routed and logged correctly. For security reports, please use security@pixally.com.
Please do not send us government identification numbers, financial account credentials, health information, biometric data, or other sensitive categories. We do not need them, and our Terms of Service prohibit uploading them to the Service. If you send them anyway, we will delete them when we become aware. This does not cover a tax form submitted through the contractor tax documentation feature, or optional meal needs that a contractor chooses to share under our Contractor Privacy Notice.
We set two first-party cookies that are required for the Service to work. Neither is used for advertising, and the Service cannot function without them.
We use Google Analytics 4 and PostHog on our public pages. These set their own cookies and similar identifiers and send information to Google and to PostHog respectively, both of which process it in the United States.
In the EEA, the UK, and Switzerland, neither loads until you choose "Accept" on our cookie notice, or switch analytics on under "Choose". Elsewhere, they load when you open a page. If we cannot tell which country you are in, they do not load.
PostHog session recording captures a replay of how pages are used. We rely on PostHog's masking of input fields so that what you type into forms is not captured in the replay, and we do not use recordings to identify individuals or to build advertising profiles. We use them to find broken interfaces and confusing flows.
In the EEA, the UK, and Switzerland, you can change your answer at any time with the small cookie button in the bottom corner of the page, or at pixally.com/privacy-choices. When you withdraw consent, we delete the analytics and advertising cookies this site set in your browser.
On our marketing pages, such as the home page, the blog, and our pricing and perks pages, we use the Meta Pixel, a piece of code provided by Meta Platforms, Inc. When it runs, it sends Meta the address of the page you are viewing, actions you take on our site such as joining the waitlist, information about your browser and device, and your IP address, and Meta may set or read its own cookies. We use it to measure how well our ads on Facebook and Instagram work and to show our ads to people likely to be interested in Pixally. Meta may combine this information with information it already holds about you, uses it under its own privacy policy, and may process it in the United States. Where the GDPR applies, Meta and we are joint controllers for collecting this information on our pages and passing it to Meta, under Meta's controller terms, and Meta alone is responsible for what it does with it afterwards.
We do not send Meta your name, your email address, or anything you type into a form, and we have turned off the Meta features that would otherwise read them from the page. You can also control the ads you see in the ad preferences of your Facebook and Instagram accounts.
We use personal information for the purposes below. Where the EU or UK General Data Protection Regulation applies, the legal basis for each purpose is given in brackets.
Where we rely on legitimate interests, we have considered whether those interests are overridden by your rights, and you can object at any time as described in Section 11.
We are specific about this because it involves sending your information to a third party, and because you have rights in relation to automated decisions.
When you provide a business website address, we retrieve the publicly available text of that page and send it, together with your first name, last name, and email address, to a third-party large language model provider. The model returns an advisory assessment of whether the site appears to belong to a professional wedding or event photographer, videographer, or content creator.
THIS ASSESSMENT IS ADVISORY ONLY AND NEVER DECIDES ANYTHING ON ITS OWN. Every eligibility outcome that affects you is made by a human reviewer who sees the assessment as one input among others. There is no solely automated decision-making producing legal or similarly significant effects, and no profiling of that kind, within the meaning of Article 22 of the GDPR.
We do not permit the model provider to use the information we send for training its generally available models. If the assessment is wrong, you can tell us and a person will re-review it. You may also ask us to assess your eligibility without using the automated step, by emailing privacy@pixally.com before adding your website.
We do not use your personal information, or Customer Data you upload into the Service, to train machine learning models for the benefit of third parties.
We do not sell personal information for money, and we do not disclose it to data brokers. Apart from the Meta Pixel on our marketing pages, which Section 4.4 describes and which you can turn off, we share it only in the circumstances below.
We use a small number of vendors to run the Service. Each processes information on our instructions, under contract, and only for the purpose described.
Copies of programme emails may be sent to an internal archive mailbox we control, so that we have a record of what was sent to whom. That archive is not shared outside Pixally.
We may disclose information where we believe in good faith that it is reasonably necessary to comply with a law, regulation, legal process, or enforceable governmental request, to enforce our Terms of Service, to detect or address fraud or security issues, or to protect the rights, property, or safety of Pixally, our users, or the public. Where we are legally permitted to notify you of a request for your information, we will.
If Pixally is involved in a merger, acquisition, financing, reorganisation, or sale of assets, personal information may be transferred as part of that transaction. We will require the recipient to honour this Privacy Policy, and we will notify you of any change in control or use of your personal information.
Leaderboards, rankings, or community features may display limited information such as a first name and an initial, or a chosen display name. We will make clear what is visible before you take part, and you can ask us to remove you from any public display.
We intend to launch a professional directory and job board that connects studios with lead shooters, second shooters, associate shooters, videographers, and other wedding and event professionals. It is not available today. When it launches, we may publish a public profile for your account by default. That profile may include your name and business name, your website and public social handles, your service area, the disciplines and roles you offer, your experience, gear, availability, and rates where you have recorded them, and sample work drawn from your Showcase, Showreel, portfolio, galleries, or any comparable or successor feature, including thumbnails, excerpts, and resized or re-encoded versions of it.
A public profile is exactly that: public. It can be viewed by anyone, indexed by search engines, and copied or cached by third parties beyond our control. Section 21 of our Terms of Service sets out the full terms, including the licence you grant us and your responsibility for holding the rights and consents needed for any sample work that shows other people.
When the directory goes live we will email you and show you a notice the next time you sign in, explaining what it is, confirming that you are listed by default, and telling you where in your account settings you can edit your profile or opt out. You can edit your profile, hide individual fields or items, or opt out entirely at any time, using the controls we provide or by emailing privacy@pixally.com. Opting out has no effect on your access to the rest of the Service.
Publishing a directory profile is not a sale of personal information and is not sharing for cross-context behavioural advertising. Where the law that applies to you requires a lawful basis or a form of consent that agreement to our Terms does not provide, we will obtain it separately before publishing your profile, or we will not publish it.
When you post in Pixally Community (feature requests, votes, comments), other signed-in members can see what you post with your display name and, if you choose to show them, your business name and profile photo. We use this information to run Pixally Community and to improve the Service. Section 23 of our Terms of Service sets out the full terms.
We are based in the United States and our infrastructure and service providers process information in the United States. If you are located in the European Economic Area, the United Kingdom, or Switzerland, your personal information will be transferred to and processed in the United States, which has not received an adequacy decision of general application.
Where we transfer personal information out of the EEA or the UK, we rely on the European Commission's Standard Contractual Clauses, together with the UK International Data Transfer Addendum where applicable, and we assess whether additional safeguards are needed for the specific transfer.
You can request a copy of the relevant transfer safeguards by emailing privacy@pixally.com.
We keep personal information only as long as we need it for the purposes described in this policy, and then delete or anonymise it.
Where information is held in encrypted backups, it may persist for a limited additional period until those backups age out on their normal cycle, and it remains protected by this policy until deleted.
We use technical and organisational measures appropriate to the risk, including encryption in transit, HTTP-only session cookies that scripts cannot read, hashed passwords, opaque server-side sessions rather than tokens that carry data in the browser, short-lived single-use sign-in links, access controls limiting who at Pixally can see what, and audit logging of significant administrative actions.
Some documents need more than that baseline. Tax forms uploaded through the contractor tax documentation feature usually contain a taxpayer identification number, so they are stored as encrypted documents and are restricted to the person who uploaded the form, the owners and administrators of a business they work with once that business has set their pay rate, and the personnel who support the feature. We do not extract, index, or display the identification number itself, so it is not searchable anywhere in the Service. We keep the form while the contractor has an engagement with any business on the Service, and for seven (7) years after their most recent engagement ends. When a new form is uploaded, the one it replaces is deleted, although a business that engaged the contractor keeps any copy it already downloaded. We will delete a form sooner at the request of the person who uploaded it, subject to any period a business that engaged them is required by law to retain it. Our Contractor Privacy Notice describes this in full.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You help by using a strong, unique password where you set one, keeping your email account secure since it can be used to sign in by magic link, and telling us promptly at security@pixally.com if you suspect unauthorised access.
If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority and affected individuals as and when required by applicable law.
Whatever your location, you can ask us to give you a copy of your information, correct it, delete it, or stop sending you marketing email. You can unsubscribe from marketing at any time using the link in any such email. Email privacy@pixally.com and we will help.
You have the right to access your personal information, to have inaccurate information corrected, to have it erased in certain circumstances, to restrict or object to processing including processing based on legitimate interests, to data portability, and, where we rely on consent, to withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.
You also have the right to lodge a complaint with your local supervisory authority. We would appreciate the chance to address your concern first.
Depending on your state, you may have the right to know what personal information we collect, use, and disclose and to obtain a copy of it; to correct inaccurate personal information; to delete personal information; to opt out of sale, of sharing for cross-context behavioural advertising, and of certain profiling; and to be free from discrimination for exercising your rights.
We do not sell personal information for money. The Meta Pixel on our marketing pages (Section 4.4) may count as "sharing" for cross-context behavioural advertising, or as a "sale", under some state laws. To opt out, use the "Your privacy choices" link at the foot of our home page, or go straight to pixally.com/privacy-choices. You do not need an account, and we will not ask you to verify your identity. A browser that sends a Global Privacy Control signal is opted out automatically. Because the choice is saved in your browser, it applies to the browser you set it in. We do not knowingly process the personal information of anyone under sixteen.
In the twelve months before the date of this policy, we collected the categories of personal information described in Section 3, for the purposes in Section 5, and disclosed them for business purposes to the categories of recipients in Section 7. From October 11, 2026, identifiers such as IP address and cookie identifiers, and internet activity on our marketing pages, may also be shared with Meta for advertising, as described in Section 4.4.
Email privacy@pixally.com with the request and the email address associated with your account. We will verify your identity, usually by confirming control of that email address, before acting, and we will respond within the period required by applicable law, generally within thirty (30) days for GDPR requests and forty-five (45) days for US state requests, extendable where permitted. There is no fee unless a request is manifestly unfounded or excessive.
You may use an authorised agent where your local law allows it, in which case we will ask for proof of authorisation and may still verify your identity directly.
The Service is a business tool intended for professionals and is not directed to children. We do not knowingly collect personal information from anyone under eighteen (18) years of age.
If you believe a child has provided us with personal information, contact privacy@pixally.com and we will delete it promptly.
Separately, wedding photography sometimes involves images of children. Where you upload such material into the Service as Customer Data, you are responsible for having the necessary permissions from a parent or guardian, as set out in our Terms of Service.
Our website and emails may link to sites we do not operate, including our blog's outbound citations, community platforms, and partner sites. This policy does not apply to them, and we are not responsible for their content or privacy practices. Please read the privacy policy of any site you visit.
Where you choose to connect a third-party account, such as Discord, that service's own privacy policy governs its handling of your information.
We may update this Privacy Policy to reflect changes to the Service, our practices, or the law. When we do, we will change the "Last updated" date at the top of this page.
If a change is material, we will give you notice before it takes effect, by email to your account address or by a prominent notice on the site, and where the change requires your consent we will ask for it.
We encourage you to review this page periodically. Continued use of the Service after a change takes effect means you accept the updated policy, except where your consent is required.
If you have a question, a request, or a complaint about how we handle your personal information, contact us first and we will do our best to resolve it.
If you are in the EEA or the UK and remain dissatisfied, you have the right to complain to your local data protection supervisory authority. If you are in the United Kingdom, that is the Information Commissioner's Office.