Privacy Policy
Data we collect
For hosts, we process Google account details, event settings, album metadata, and Stripe payment references. For guests, we process an optional display name, a browser uploader token, upload metadata, and photos or videos they submit. We also process technical information needed to operate and secure the service, such as request and device information.
Stripe handles full payment-card details and Google handles authentication credentials. OwnPix does not receive full payment-card details or Google passwords.
Why we use it
We use this data to authenticate hosts, enforce plan limits, receive and organize event uploads, provide downloads and slideshows, send transactional and expiry emails, prevent abuse, maintain service security, and comply with legal obligations.
Storage and service providers
Event metadata is stored in Cloudflare D1 and media is stored in Cloudflare R2. Cloudflare Email Service sends transactional email. Stripe processes payments and Google provides OAuth sign-in. These providers process data only to provide their services and under their own terms and privacy policies.
Retention
Event retention follows the plan purchased by the host. Access is disabled when storage expires. Media is held for a 10-day recovery buffer, then permanently removed with the event records. Security, billing, or legal records may be retained where required by law.
Sharing and public access
We do not sell personal data or use event media for advertising. Event media is not published publicly. It is available to the host and people the host gives access to through private event links and authenticated media routes. A guest upload link permits submission to its specific album but does not expose the private gallery.
Your choices
Hosts can remove individual uploads and download their event media. Signed-in hosts can request help, access, correction, or deletion where applicable by opening Help & feedback from the dashboard. Some records may need to be retained for legal, security, or fraud-prevention obligations.
If local law gives you privacy rights, such as access, correction, deletion, restriction, objection, or portability, you may exercise them through that same Help & feedback form. You may also complain to your local data-protection authority where applicable.
International processing
OwnPix and its providers may process data in countries other than yours. Where required, we rely on appropriate safeguards for those transfers.
Children
OwnPix is not directed at children under 13. Hosts must have authority to invite guests and share event media. If you believe a child has provided personal data without appropriate permission, use Help & feedback from the dashboard.
Security and changes
We use access controls, scoped storage keys, signed upload URLs, and authenticated media delivery. No system is completely secure. If legally required, we will notify affected people and regulators about a personal-data incident.
We may update this policy and will revise the date above when we do. Continued use after an update takes effect is subject to the updated policy.
Contact
Signed-in hosts can open Help & feedback from the dashboard for privacy questions or requests.