Privacy notice
Last updated: 2026-09-07
Pixavo is a service that lets you create a shared photo and video album for a wedding or other celebration. Guests scan a code and upload their images. Below you can read which data we process and why. We store as little as possible and use no hidden tracking.
Who is responsible
The data controller for this service is Pixavo (KvK 87989700), Klaproos 21, 7483 AR Haaksbergen, Netherlands, reachable at support@pixavo.io. For the content guests place in an album, the organiser who created the album is the controller; we process that content on their behalf, as a processor.
Which data we process
- Organiser's account: your email address, to sign in via a login link and to keep you informed about your album.
- Payment: your payment is handled via Stripe. We do not receive full payment details; Stripe processes these as an independent party.
- Album content: the photos, videos and any audio messages that guests upload, plus an optional display name that a guest enters themselves. Images may show people and are therefore personal data.
- Technical: an anonymous count of how often an album has been opened (per day, without IP address or profile) and the usual server logs for security and troubleshooting.
For what purpose and on what legal basis
We process this data to provide the service (performance of the contract), to keep the service secure and working (legitimate interest), and on the basis of consent when a guest chooses to upload images. A guest decides for themselves what they share.
How long we keep it
The album can be viewed online for the duration of the chosen package (6 months to 3 years after the date of the event). The organiser can download the images in full quality to keep, and receives a reminder by email about a month before the storage period ends. After that period we permanently delete the album and all its images, at the latest within 90 days — the same term as in our terms and conditions. A guest can delete their own upload at any time; the organiser can delete items or the whole album. After deletion we remove the files concerned from our storage.
Where your data is held and who helps us
Your photos, videos and album data are held within the European Union. We work with a fixed number of processors (sub-processors), each for one component:
- Supabase — database and storage of photos and album data, in the EU region (Frankfurt).
- Cloudflare — processing and delivery of video.
- Stripe — the payment. Stripe processes payment details as an independent party.
Data processing agreements are in place with these parties.
Security and separation between albums
Every album is reachable only via its own unguessable link and is technically fully separated from other albums: data from one album cannot end up in another. Photos and videos are stored privately and are shown only via secure, temporary links, so they are not publicly findable. We use no facial recognition or other biometric data. No online service can be secured 100%; should something nevertheless go wrong, we act in line with the data breach notification duty — we report a breach to the Dutch Data Protection Authority within 72 hours where required and inform the people concerned when the breach poses a high risk to them. Also bear in mind that anyone with the album code or share link can view the album: you decide who you share it with.
Your rights
You have the right to access, correct and delete your data, and you can object to processing. A guest deletes their own upload via the button next to the upload; for other requests, contact us at support@pixavo.io. You can also lodge a complaint with the Dutch Data Protection Authority.
Contact
Questions about your data? Email support@pixavo.io.