Privacy Policy

Personal Information

• Email address for account creation and verification
• Google account information when you connect Google Drive
• Event details you provide (event name, date, cover photos)

Technical Data

• IP addresses (hashed for privacy)
• Device fingerprints for rate limiting and security
• Upload metadata (file names, sizes, types, timestamps)
• Usage analytics and service performance data
• Google Drive API tokens (encrypted)

Payment Information

• When you buy a paid plan, payment is processed by Stripe. We never receive or store your full card number — only a record of the purchase (plan, amount, currency, and date).

Files and Content

• Original photos and videos are uploaded directly to your own Google Drive — we never store the originals on our servers.
• Guests may optionally add a display name to their uploads. If they provide one, we store it so their uploads can be grouped, and — only if the host turns on that option — it's added to the start of the file name in the host's Google Drive. Guests can leave this blank.
• To power the optional guest gallery and slideshow, we cache derived copies — compressed thumbnails, and a downsized preview for videos shown in the gallery — on Cloudflare R2 (our content-delivery network). These are generated from the media your guests upload or you import from your Drive, and are removed when you delete the item or your account.
• Voice notes left in the guestbook are kept in our secure storage and are accessible only to you (the host) and any co-hosts you invite, via expiring private links.
• We process files in transit during upload but do not retain the originals.

Google Drive API Integration

PixBearer's use of information received from Google APIs adheres to theGoogle API Services User Data Policy, including the Limited Use requirements.

• We access only files you explicitly select or create through our service. If you use the optional "Import a whole folder" feature, we also read the contents of your event's own Drive folder — only while you have temporarily set that folder to link-visible, and solely to add those photos to your gallery. Restoring the folder to Restricted (we remind you in-app) ends that access.
• We use the minimal OAuth scope required: drive.file. Folder import does not expand this scope — during an import you start, our server reads your link-shared event folder the same way any link holder could, and nothing else in your Drive.
• Your files are uploaded directly to your Google Drive - we don't store them
• Access tokens are encrypted and stored securely in our database
• You can revoke access at any time from your dashboard, under Manage > Google Drive

Limited Use Commitments

We commit to the following regarding Google user data:

• No selling or sharing: We do not sell, trade, or share Google user data with third parties for advertising or marketing purposes
• No human access: Our staff do not access your Google Drive files except for limited technical support cases with your explicit consent
• Purpose limitation: We only use Google data for the specific wedding photo collection service you requested
• Secure transfer: All data transfers to Google Drive are encrypted and logged for security
• No AI training: Your Google Drive data is never used to train AI models or improve our algorithms

Service Providers

• Supabase for database, authentication, and file storage services
• Stripe for payment processing — Stripe handles your card details directly; we never receive or store full card numbers
• Cloudflare R2 for caching gallery thumbnails and video previews (derived copies only, never your original files)
• Vercel for website hosting and privacy-friendly, aggregated analytics (traffic and performance only — no advertising, no sale of data)
• Resend for email verification services
• Google Cloud Platform for API services
• PostHog for product analytics and session replay (PII and Google Drive data are stripped client-side before capture)
• Google Analytics 4 for aggregated traffic and SEO measurement, linked to Google Search Console. GA4 receives anonymized IP addresses and a small set of conversion events only — never Google Drive data, file names, or contents of your uploads.
• Google Ads and the Meta (Facebook) Pixel to measure the performance of our advertising and to show relevant ads. These receive a limited set of activity signals (e.g. page views, sign-up, starting an upgrade, and completed purchases with the amount) — never your Google Drive data, file names, photos, or videos.