Legal
Privacy Policy
Last updated: January 2025
1. Introduction
Picsort built the Picsort app and website. This page explains our policies regarding the collection, use, and disclosure of your data when you use our services.
2. Information We Collect
- Email address: to allow you to create an account and receive notifications.
- Event pictures: images you upload to process and organize.
2.1 Face Data
When pictures are uploaded to Picsort, we use artificial intelligence to detect and group faces. This helps organize pictures by person and enables guests to find their pictures using a selfie.
- What we collect: Mathematical representations of faces (face embeddings) and face positions within pictures. We do not store facial images separately from the original pictures.
- How we use it: Solely to group similar faces together and match guests to their pictures. Face data is never used for identity verification, biometric authentication, advertising, or tracking.
- Selfie matching: When you upload a selfie to find your pictures, it is processed in memory and immediately discarded. Selfies are never stored.
- Third-party processing: Face detection is performed using secure, GDPR-compliant cloud services. Face data is not shared with advertisers or sold to third parties.
- Retention and deletion: Face data is retained for up to 12 months, after which it is automatically deleted. You may request immediate deletion at any time by contacting us.
2.2 Account Information
When you create an account, we collect:
- Email and password: For email signup, we collect your email address and a securely hashed password.
- Google profile: If you sign in with Google, we receive your email address and basic profile information from Google.
We use this information solely to authenticate you and provide our services.
2.3 Payment Information
When you make a payment, your transaction is processed by our payment provider (Paystack). We receive:
- Confirmation of payment status
- Transaction reference number
- Amount paid
We do not store your credit card or bank account details. All payment information is handled securely by our payment processor in compliance with PCI-DSS standards.
2.4 Location Information
We automatically detect your approximate location using your IP address to display prices in your local currency. This information is cached locally on your device and is not stored on our servers. You can manually override your currency preference at any time.
3. How We Use Information
We use your information to:
- Provide and maintain our services
- Process your pictures using AI facial recognition
- Send you service updates and notifications
- Process payments for premium features
- Improve our services and user experience
4. Data Retention
We will not store your images or personal information for more than 12 months. After this period, we securely delete all data. You may request deletion of your data at any time by contacting us or through your account settings.
5. Legal Basis
We process your data based on your consent when you create an account or upload pictures. For facial recognition processing, we rely on your explicit consent provided when you use our service.
6. Your Rights
- Access: You can request a copy of the data we hold about you.
- Rectification: You can request corrections to any inaccurate or incomplete data.
- Erasure (Right to be Forgotten): You can request deletion of your data at any time.
- Portability: You can request to receive your data in a machine-readable format.
- Withdraw Consent: You can withdraw your consent at any time; this will not affect processing prior to withdrawal.
7. Data Security
We implement reasonable security measures to protect your data from unauthorized access, disclosure, or loss. This includes encrypted data transmission, secure authentication, and access controls.
8. Third-Party Services
We use third-party services for cloud hosting, database storage, file storage, and AI processing. All service providers are selected for their compliance with GDPR and data protection standards. We do not sell or share your data with advertisers.
9. Cookies and Tracking
We use the following cookies and tracking technologies:
Essential Cookies
- Authentication tokens: Secure, HTTP-only cookies that keep you logged in.
- Session cookies: Temporary cookies that expire when you close your browser.
Analytics
We use analytics services to understand how visitors use our website. These services collect anonymized data about page views and user interactions. No personally identifiable information is shared with analytics providers.
Local Storage
- Currency preference: Your selected currency (NGN or USD).
- Location cache: Cached location data for currency detection (expires after 24 hours).
10. International Transfers
Your data may be processed in jurisdictions outside your country. We ensure such transfers comply with applicable data protection laws.
11. Third-Party Integrations
Our service integrates with third-party services:
- Google Sign-In: If you choose to sign in with Google, we receive basic profile information from Google.
- Google Drive: If you import pictures from Google Drive, we access only the folders you explicitly share with us.
- Social Sharing: When you share albums via WhatsApp, Twitter, or Facebook, those platforms may collect data according to their own privacy policies.
We only access the minimum data necessary to provide our services.
12. Children's Privacy
Our service is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If we discover that a child under 16 has provided us with personal information, we will delete it immediately.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes through our website or email.
14. Contact Us
If you have questions about this Privacy Policy or your data, contact us at [email protected].