PXI
PXI

Tickets, one shared camera roll, and the morning-after scrapbook. Never lose the night.

Download onApp Store

Explore

  • Home
  • Platform
  • Story
  • About Us

Product

  • Shared Gallery
  • Digital Passport
  • Share to Instagram
  • Find Events

Platform

  • Ticketing in Your Brand
  • Promoter Analytics
  • PXI vs Everyone
  • Pricing

Connect

  • FAQ & Support
  • Contact
  • Book a meeting
  • Legal

© 2026 PXI App. All rights reserved.

The Legal Hub.

Transparent. Secure. Stateless.

Effective Date: 07/13/2026Jurisdiction: Frisco, Texas, USAContact: [email protected]
Privacy PolicyTerms of ServiceCommunity StandardsCookie PolicyChild SafetyVendor Agreement
Privacy PolicyTerms of ServiceCommunity StandardsCookie PolicyChild SafetyVendor Agreement

Privacy Policy

TL;DR

We collect only what we need to run the party. Face Matching sends scan frames to our servers solely to create an irreversible FaceVector, then discards the images. Your location is checked when you use nearby/discover or check in — not tracked continuously. You own your photos. We never sell your data. Mobile numbers and SMS consent are never shared with third parties for their marketing.

1. Who We Are

PXIStudio ("PXI," "we," "us," "our") is a Social Media Studio combining event photo-sharing, ticketing, gamification, and analog-emulative media creation into one platform. We are operated by PXI LABS LLC, headquartered in Cambridge, Massachusetts, USA.

Our Services include: (i) event discovery and ticketing, (ii) spatially-grouped event photo albums, (iii) the Odyssey gamification system, (iv) the Analog Engine media creation suite, (v) real-time event social features, and (vi) vendor/host management tools. These Terms apply to all of these Services collectively.

2. Information We Collect

2.1 Account & Identity Data

When you create a PXI account, we collect: Phone number (E.164 format; used for OTP/account verification and, where you separately opt in, for the PXI SMS Program described in Section 2.8; we do not store passwords), Display name and username, Date of birth (for age eligibility verification; birth year is never shared with other users), Optional: profile photo, biography, and social media handles, Optional: email address (for account recovery and legal notices).

Authentication: PXI uses PASETO v4 (public) tokens signed with Ed25519 for all session management. Tokens are cryptographically signed and encode your userId, role, and isVendor/isStaff status. No raw session UUIDs or passwords are stored server-side. Local encryption of sensitive payload data uses XChaCha20-Poly1305 with a 192-bit nonce.

2.2 Location Data — The Event Lock

To unlock event-specific photo albums and show nearby events, PXI may request your location while you use the app (when-in-use). Location is used to check your latitude and longitude against a ~1km Haversine radius around the event venue (for example at ticket scan / check-in) and to rank nearby events in Discover. We do NOT request Always/background location permission and we do NOT continuously track your location when the app is closed. Aggregate spatial metadata may be retained for safety and fraud prevention for up to 90 days.

2.3 Biometric Data — BIPA Disclosure (Illinois)

PXI's Face Matching feature (also called "Find My Shots") uses facial geometry vector scanning ("FaceVector") to identify your photos within shared event albums. This feature is subject to the Illinois Biometric Information Privacy Act (BIPA), the California Consumer Privacy Act (CPRA Sensitive Data provisions), and analogous state laws.

  • If you opt in, guided capture frames from your camera are transmitted securely (TLS) to PXI servers solely so we can derive your FaceVector. Frames are held in memory during processing and permanently discarded immediately after vector extraction — we do not store raw biometric images or face crops from enrollment.
  • The FaceVector is a mathematical list of numbers that cannot reasonably be reversed into a photo. Only this vector is retained on PXI servers, encrypted in transit (TLS) and encrypted at rest.
  • The stored vector is used strictly to (a) match you in event photos you attend and (b) send you a "you're in a photo" alert. It is never used for advertising, identity verification for login, law-enforcement watchlists, or any purpose beyond photo matching.
  • A distinct, upfront Biometric Consent Screen with plain-language explanation is required before this feature is activated — affirmative opt-in only.
  • Photos uploaded to event albums are scanned to derive per-face vectors so opted-in attendees can be matched to their photos. We store vectors only — never face crops created solely for this matching process.
  • Web guests without the app may run a one-time face scan to find themselves in an event gallery. The scan frame is sent once over an encrypted connection for that single gallery match; the frame is discarded after embedding and is not stored as an enrollment profile unless you separately opt in to Face Matching in the app.
  • You may revoke consent at any time via Settings > Apps > Face Matching.
  • Upon revocation, your server-stored enrollment vector is deleted immediately; previously matched photo tags remain visible until manually removed by you.
  • We NEVER sell, lease, rent, trade, or profit from biometric data.
  • Biometric data is never shared with third parties except: (i) infrastructure and cloud storage providers strictly as necessary to store and process the encrypted vector, and (ii) as required by valid legal process.

Retention: Enrollment vectors are retained until the earliest of: (i) revocation of your consent, (ii) deletion of your account, or (iii) three (3) years following your last interaction with the Services.

2.4 Media & Content Data

We collect content you actively create or upload: Photos and videos uploaded to Event Albums, The Wall, The Vault, or The Circle. Voice notes you record in direct messages, group chats, or event album threads (audio files and duration metadata; typically capped at about 60 seconds). Metadata: upload timestamp, event association, media type, file size. Analog Engine processing parameters: ZSL (Zero Shutter Lag), Halation, Film Grain shader settings applied at render time. These parameters are PXI's proprietary aesthetic layer; the underlying raw photo remains yours. Captions, comments, reactions, and text messages you post. Number of retakes before posting (used to improve camera experience, not stored permanently). Uploaded media may be scanned by automated systems (for example NSFW safety classifiers) to enforce Community Standards.

2.5 Usage, Engagement & Gamification Data

App interactions: album joins, ticket scans, photo uploads, reactions, shares, comment posts, messages sent. Odyssey/Gamification data: XP earned per action, Stamp tier achieved, Leaderboard position, event attendance history. Event-specific behavior: Hype Gate activity, Grace Time uploads, Circle content views, check-in confirmations. Device and network data: device type, OS version, browser/app version, IP-based approximate location (city-level), and push notification tokens. PXI does not use the advertising identifier (IDFA/GAID) for tracking. Crash logs, error diagnostics, and performance monitoring data. When you take a screenshot within the app (we may notify the relevant album host).

2.6 Event & Ticketing Data (Attendees)

Ticket purchase records and order history. RSVP and attendance status. Payment confirmation numbers (NOT full card details — those are held by Stripe). Event check-in timestamp and location confirmation. Contacts: with your permission, we may read your device contacts on-device to suggest people you may already know on PXI (Circle suggestions) and to help you invite friends. We do not upload or permanently store your full address book on PXI servers; only the connections or invites you choose to act on create server-side records.

2.7 Vendor, Host & Organizer Data

If you register as a Tier 3 Vendor/Host, we additionally collect: Legal name, business name (DBA), address, EIN/tax identification number. Bank account/payout information (processed via Stripe Connect; PXI does not store raw bank details). Government-issued ID (when required for identity verification for high-volume payouts). Event proceeds history, fee records, chargeback history. Staff delegation records (who you assigned as Co-host, Photographer, Promoter, or Bouncer). Messaging Service communication logs (for SMS/event blast compliance).

2.8 SMS / Mobile Messaging Data (A2P 10DLC)

If you provide a mobile number and opt in to text messages, we collect and process: your mobile phone number; SMS/MMS opt-in and opt-out status and timestamps; message delivery logs (sent, delivered, failed); and keyword replies such as STOP and HELP. This data is used solely to operate the PXI SMS Program (transactional event notifications, account/security alerts, and — only with separate marketing consent — promotional messages from PXI or on behalf of Event Hosts).

  • Non-sharing of mobile information: We do not sell, rent, or share your mobile phone number or SMS opt-in consent with third parties, affiliates, or partners for their own marketing or promotional purposes. Mobile numbers are shared only with our SMS delivery provider (currently Twilio) as a processor necessary to send messages you consented to receive, or as required by law.
  • Message frequency: Message frequency varies. You may receive recurring messages related to events you join or host; typical volume is up to several messages per event you attend or organize, plus occasional account or marketing messages if you opted in. Exact frequency depends on your activity and preferences.
  • Rates: Message and data rates may apply. Your carrier's standard messaging rates apply to messages sent to you and from you.
  • Consent: Providing a phone number for account verification is not the same as SMS marketing consent. Marketing texts require a separate affirmative opt-in. Consent to receive texts is not a condition of any purchase.
  • Opt-out: Reply STOP to any PXI SMS to unsubscribe, or manage SMS preferences in Settings. Reply HELP for assistance, or email [email protected]. Full program terms are in Terms of Service §12.

2.9 In-App Messaging & Voice Notes

PXI includes direct messages, group chats, and event album threads. When you use these features we process: message text; voice notes (audio recordings you create with the microphone, typically up to about 60 seconds) and their duration; shared media, GIFs, stickers, and event cards you attach; conversation participant IDs; delivery/read metadata; and report/block actions.

  • Voice notes and chat media are stored on our cloud storage providers (for example Cloudflare R2) so recipients can play them, subject to the retention rules in Section 5.
  • Messages are visible to conversation participants. Event album threads may be visible to other attendees of that event.
  • You can block or report users. We review reports under our Community Standards and may remove content or restrict accounts. Automated classifiers may scan uploaded images for prohibited content; voice notes and text are primarily moderated reactively via user reports.
  • This section covers in-app chat. SMS/text messages with carriers are covered separately in Section 2.8 and Terms §12.

2.10 Music Match (Spotify / Apple Music)

Music Match is an optional feature. If you connect Spotify or Apple Music, we receive listening-history and taste signals (for example artists, genres, and related metadata available via that provider's APIs) solely to score how well your music taste overlaps with events and to help rank or recommend matches. We do not post to your music accounts.

  • Connection is affirmative opt-in via the provider's OAuth flow.
  • You may disconnect at any time; disconnecting deletes your Music Match profile/taste data stored by PXI.
  • Music providers process your account data under their own privacy policies when you authorize the connection.

3. How We Use Your Information

We use your information for the following purposes:

  • Providing and operating the Services (account creation, event access, album grouping, photo matching, ticketing, payouts).
  • Running the Event Lock: computing your Haversine proximity to an event venue to unlock albums.
  • Biometric photo matching: identifying photos you appear in at events you attend (opt-in only; enrollment frames processed to create vectors that are stored; raw enrollment images discarded after processing).
  • Operating in-app messaging, including voice notes you send to other users.
  • Music Match: ranking events and social matches from listening taste you optionally connect (Spotify / Apple Music).
  • Running the Odyssey gamification system: awarding XP, Stamps, and Leaderboard rankings.
  • Processing ticket purchases, distributing payouts to vendors via Stripe Connect.
  • Personalizing your feed, event recommendations, and suggested connections based on attendance history.
  • Safety, fraud prevention, and abuse detection (e.g., detecting spoofed GPS, fake tickets, account manipulation).
  • Sending transactional communications: ticket confirmations, event reminders, payout notifications, and (where consented) SMS/MMS event and account alerts.
  • Sending marketing communications by email or SMS (only with your explicit opt-in for that channel; unsubscribe available at any time via email Unsubscribe links or by replying STOP to SMS).
  • Complying with legal obligations, responding to law enforcement requests, enforcing our Terms.
  • Improving the platform through aggregated, anonymized analytics and A/B testing.

4. How We Share Your Information

4.1 With Other Users (by Design)

  • Your profile photo, display name, and Odyssey rank are visible to users in shared event albums you join.
  • Photos you upload to an Event Album are visible to other verified attendees of that event.
  • The Wall (public archive): visible to all PXI users.
  • The Vault: private (visible only to you).
  • The Circle: ephemeral (visible only to your Circle contacts; auto-deleted after 24 hours).
  • Hype Gate content: visible only to ticket-verified pre-event attendees.
  • Photos you are tagged in remain visible to album participants even after you leave the album. You may request removal by contacting [email protected].
  • Screenshots: we may notify the relevant album host when another user takes a screenshot within a private album.

4.2 With Vendors and Hosts

When you purchase a ticket or join a host-created event album, the host receives: your RSVP status, display name, and check-in confirmation. Hosts are contractually bound by PXI's Vendor Agreement and may only use your data in connection with their event. Hosts may NOT sell or license your personal data to third parties.

4.3 With Sub-Licensed Parties (Vendor Sub-Licensing)

When you grant PXI a license to your content, PXI may sub-license that content to: a) Event Vendors/Hosts: for the specific event album you participated in; b) Staff delegated by the Host (Co-hosts, Photographers) under a sub-license tied strictly to that event; c) PXI's service providers (Cloudflare, cloud storage) as technically necessary to deliver the Services.

Limitations: Sub-licenses to Vendors are SCOPED and expire when the event album closes or the Vendor's account is terminated. Vendors may NOT sub-license your content to unaffiliated third parties (e.g., ad agencies, data brokers). Vendors may NOT use your content for purposes beyond event documentation and promotion without your separate written consent. PXI does NOT sub-license your content for advertising or AI training purposes without separate explicit consent.

4.4 With Service Providers

Stripe, Inc. (payments), Cloudflare (Edge middleware, CDN, R2 storage for photos, videos, and voice notes), facial geometry processing on PXI servers for Face Matching, Analytics providers (aggregated, non-PII data only), music platform APIs when you connect Music Match (Spotify / Apple Music), and SMS/Push notification providers (including Twilio, Inc., which processes mobile numbers and message content solely to deliver messages on our behalf).

SMS consent & mobile numbers — no third-party marketing sharing: Mobile phone numbers collected for SMS/text messaging, and the associated opt-in consent records, will not be shared, sold, rented, or otherwise disclosed to third parties, affiliates, or any other entities for those parties' marketing or promotional purposes. We share mobile numbers only with our SMS delivery provider as a data processor necessary to transmit messages you requested, or when required by applicable law.

4.5 Legal Obligations & Business Transfers

We may disclose your information: (i) as required by law, court order, or valid legal process; (ii) to protect the safety of users or the public; (iii) in connection with a merger, acquisition, or sale of assets (with reasonable prior notice to users).

4.6 Advertising Partners & “Sharing”

We advertise PXI on Google, Meta (Facebook and Instagram), TikTok and X. To measure which ads work, and to show PXI ads to people who have already visited us, we share a limited set of information with those companies. This happens only with your consent, and only two kinds of information are involved:

  • From your browser or the app: the page or screen you viewed, the ticket value, and an advertising cookie or device identifier. Never your name, email address or phone number.
  • From our servers, when a ticket purchase completes: a SHA-256 hashed, irreversible version of your email address, phone number and PXI user id, so the sale can be matched to the ad that led to it. The plaintext never leaves PXI and the hash cannot be turned back into your details. If you have opted out, nothing is sent at all.

Under the California Consumer Privacy Act this counts as “sharing” for cross-context behavioral advertising, and several other US state privacy laws treat it as targeted advertising. It is not a sale: we never receive money for your personal information.

To opt out, use the Cookie settings link in the footer of any page — it works in every state and country, whether or not you were shown a banner. We honour the Global Privacy Control signal automatically. On iOS, declining the App Tracking Transparency prompt stops advertising identifiers being collected in the app. The Cookie Policy lists the exact cookie names.

Biometric data, precise location, and the contents of your messages are never shared with advertising partners, in any form, hashed or otherwise.

4.7 No Sale of Personal Data; Mobile Information

We do not sell personal information. We do not sell, rent, or share mobile phone numbers or SMS consent data with third parties or affiliates for marketing or promotional purposes. Message and data rates may apply to SMS communications. Message frequency varies as described in Section 2.8.

5. Data Retention

  • Account data: Until account deletion + 30-day grace period.
  • Event album photos (The Wall): Indefinite (public archive) unless deleted by user.
  • The Circle content: 24 hours from upload (auto-deleted).
  • The Vault content: Until manually deleted by user.
  • Hype Gate content: Deleted at event start time.
  • Biometric vectors: Until consent revoked, account deletion, or 3 years from last interaction — whichever is earliest.
  • In-app messages & voice notes: Retained for the life of the conversation or until deleted by participants / account deletion, subject to legal holds and safety investigations.
  • Music Match taste profiles: Until you disconnect Music Match or delete your account.
  • Location data (Event Lock): Deleted after proximity / clustering computation; aggregate metadata up to 90 days.
  • Payment and ticketing records: 7 years (tax/legal/compliance requirements).
  • Usage and analytics data: 24 months rolling.
  • Odyssey/XP/Stamp data: For the life of your account; deleted upon account deletion.
  • Vendor payout and chargeback records: 7 years.
  • SMS/messaging logs: 3 years (TCPA compliance).

6. Your Privacy Rights

6.1 All Users

Access and download a copy of your data: Settings > Privacy > Download My Data. Correct inaccurate profile data at any time within Settings. Delete your account and associated data: Settings > Account > Delete Account. Revoke biometric consent: Settings > Apps > Face Matching. Disconnect Music Match from the Music Match / music connect screen or Settings. Opt out of marketing email: Settings > Notifications > Marketing, or click Unsubscribe in any email. Opt out of SMS at any time by replying STOP to a PXI text message, or via Settings > Notifications > SMS; reply HELP for SMS help. Report content or request removal of tagged photos: In-app report button or [email protected].

6.2 California Residents (CCPA / CPRA)

California residents have the right to: Know, Access, Delete, Correct, Opt-Out of Sale/Sharing, and Limit Use of Sensitive Personal Data. We do not sell personal data for money. We do use advertising cookies from Google, Meta, TikTok and X for remarketing and conversion measurement, which counts as “sharing” for cross-context behavioral advertising under the CPRA. To opt out, use the Cookie settings link in the footer of any page, or send a Global Privacy Control signal from your browser — we honour GPC automatically. Biometric data is Sensitive Personal Data under CPRA, is collected only with explicit consent, and is never used for advertising. Submit any other request to [email protected] with subject line: CCPA Request.

6.3 EU / UK Residents (GDPR)

EU/UK residents have rights to: Access, Rectification, Erasure, Restriction of Processing, Data Portability, Objection, and the right to lodge a complaint with your local Supervisory Authority. Legal bases for PXI's processing: contractual necessity, legitimate interest, and consent. Contact [email protected] or our EU/UK data representative.

7. Payment Security

All payment data is processed directly by Stripe, Inc. PXI does not store raw credit card numbers, CVV codes, full bank account numbers, or payment method data on its servers. PXI uses Stripe Connect Destination Charges, meaning funds flow from the consumer to Stripe directly, with automated reconciliation and payout to Vendors. By using ticketing features, you also accept Stripe's Terms of Service and Privacy Policy.

8. Children's Privacy

PXI is not directed to children under 16 years of age. We do not knowingly collect personal data from users under 16. If we become aware of such collection, we will delete it promptly. Age eligibility is verified at account creation via date of birth. Users between 16 and 17 require parental/guardian consent. Contact [email protected] if you believe a minor's data has been collected.

9. Contact Information

Privacy inquiries: [email protected]
Legal inquiries: [email protected]
In-app: Settings > Help > Privacy
Mailing address: PXI LABS LLC, 5850 Town and Country Blvd, Suite 403, Frisco, TX 75034.

HOST YOUR OWN
PUBLIC EVENT

Ready to go viral? PXI gives you the power to market, ticket, and capture your events with professional precision.

Create EventDownload the app