Transparent. Secure. Stateless.
We collect only what we need to run the party. Face Matching sends scan frames to our servers solely to create an irreversible FaceVector, then discards the images. Your location is checked when you use nearby/discover or check in — not tracked continuously. You own your photos. We never sell your data. Mobile numbers and SMS consent are never shared with third parties for their marketing.
PXIStudio ("PXI," "we," "us," "our") is a Social Media Studio combining event photo-sharing, ticketing, gamification, and analog-emulative media creation into one platform. We are operated by PXI LABS LLC, headquartered in Cambridge, Massachusetts, USA.
Our Services include: (i) event discovery and ticketing, (ii) spatially-grouped event photo albums, (iii) the Odyssey gamification system, (iv) the Analog Engine media creation suite, (v) real-time event social features, and (vi) vendor/host management tools. These Terms apply to all of these Services collectively.
When you create a PXI account, we collect: Phone number (E.164 format; used for OTP/account verification and, where you separately opt in, for the PXI SMS Program described in Section 2.8; we do not store passwords), Display name and username, Date of birth (for age eligibility verification; birth year is never shared with other users), Optional: profile photo, biography, and social media handles, Optional: email address (for account recovery and legal notices).
Authentication: PXI uses PASETO v4 (public) tokens signed with Ed25519 for all session management. Tokens are cryptographically signed and encode your userId, role, and isVendor/isStaff status. No raw session UUIDs or passwords are stored server-side. Local encryption of sensitive payload data uses XChaCha20-Poly1305 with a 192-bit nonce.
To unlock event-specific photo albums and show nearby events, PXI may request your location while you use the app (when-in-use). Location is used to check your latitude and longitude against a ~1km Haversine radius around the event venue (for example at ticket scan / check-in) and to rank nearby events in Discover. We do NOT request Always/background location permission and we do NOT continuously track your location when the app is closed. Aggregate spatial metadata may be retained for safety and fraud prevention for up to 90 days.
PXI's Face Matching feature (also called "Find My Shots") uses facial geometry vector scanning ("FaceVector") to identify your photos within shared event albums. This feature is subject to the Illinois Biometric Information Privacy Act (BIPA), the California Consumer Privacy Act (CPRA Sensitive Data provisions), and analogous state laws.
Retention: Enrollment vectors are retained until the earliest of: (i) revocation of your consent, (ii) deletion of your account, or (iii) three (3) years following your last interaction with the Services.
We collect content you actively create or upload: Photos and videos uploaded to Event Albums, The Wall, The Vault, or The Circle. Voice notes you record in direct messages, group chats, or event album threads (audio files and duration metadata; typically capped at about 60 seconds). Metadata: upload timestamp, event association, media type, file size. Analog Engine processing parameters: ZSL (Zero Shutter Lag), Halation, Film Grain shader settings applied at render time. These parameters are PXI's proprietary aesthetic layer; the underlying raw photo remains yours. Captions, comments, reactions, and text messages you post. Number of retakes before posting (used to improve camera experience, not stored permanently). Uploaded media may be scanned by automated systems (for example NSFW safety classifiers) to enforce Community Standards.
App interactions: album joins, ticket scans, photo uploads, reactions, shares, comment posts, messages sent. Odyssey/Gamification data: XP earned per action, Stamp tier achieved, Leaderboard position, event attendance history. Event-specific behavior: Hype Gate activity, Grace Time uploads, Circle content views, check-in confirmations. Device and network data: device type, OS version, browser/app version, IP-based approximate location (city-level), and push notification tokens. PXI does not use the advertising identifier (IDFA/GAID) for tracking. Crash logs, error diagnostics, and performance monitoring data. When you take a screenshot within the app (we may notify the relevant album host).
Ticket purchase records and order history. RSVP and attendance status. Payment confirmation numbers (NOT full card details — those are held by Stripe). Event check-in timestamp and location confirmation. Contacts: with your permission, we may read your device contacts on-device to suggest people you may already know on PXI (Circle suggestions) and to help you invite friends. We do not upload or permanently store your full address book on PXI servers; only the connections or invites you choose to act on create server-side records.
If you register as a Tier 3 Vendor/Host, we additionally collect: Legal name, business name (DBA), address, EIN/tax identification number. Bank account/payout information (processed via Stripe Connect; PXI does not store raw bank details). Government-issued ID (when required for identity verification for high-volume payouts). Event proceeds history, fee records, chargeback history. Staff delegation records (who you assigned as Co-host, Photographer, Promoter, or Bouncer). Messaging Service communication logs (for SMS/event blast compliance).
If you provide a mobile number and opt in to text messages, we collect and process: your mobile phone number; SMS/MMS opt-in and opt-out status and timestamps; message delivery logs (sent, delivered, failed); and keyword replies such as STOP and HELP. This data is used solely to operate the PXI SMS Program (transactional event notifications, account/security alerts, and — only with separate marketing consent — promotional messages from PXI or on behalf of Event Hosts).
PXI includes direct messages, group chats, and event album threads. When you use these features we process: message text; voice notes (audio recordings you create with the microphone, typically up to about 60 seconds) and their duration; shared media, GIFs, stickers, and event cards you attach; conversation participant IDs; delivery/read metadata; and report/block actions.
Music Match is an optional feature. If you connect Spotify or Apple Music, we receive listening-history and taste signals (for example artists, genres, and related metadata available via that provider's APIs) solely to score how well your music taste overlaps with events and to help rank or recommend matches. We do not post to your music accounts.
We use your information for the following purposes:
When you purchase a ticket or join a host-created event album, the host receives: your RSVP status, display name, and check-in confirmation. Hosts are contractually bound by PXI's Vendor Agreement and may only use your data in connection with their event. Hosts may NOT sell or license your personal data to third parties.
When you grant PXI a license to your content, PXI may sub-license that content to: a) Event Vendors/Hosts: for the specific event album you participated in; b) Staff delegated by the Host (Co-hosts, Photographers) under a sub-license tied strictly to that event; c) PXI's service providers (Cloudflare, cloud storage) as technically necessary to deliver the Services.
Limitations: Sub-licenses to Vendors are SCOPED and expire when the event album closes or the Vendor's account is terminated. Vendors may NOT sub-license your content to unaffiliated third parties (e.g., ad agencies, data brokers). Vendors may NOT use your content for purposes beyond event documentation and promotion without your separate written consent. PXI does NOT sub-license your content for advertising or AI training purposes without separate explicit consent.
Stripe, Inc. (payments), Cloudflare (Edge middleware, CDN, R2 storage for photos, videos, and voice notes), facial geometry processing on PXI servers for Face Matching, Analytics providers (aggregated, non-PII data only), music platform APIs when you connect Music Match (Spotify / Apple Music), and SMS/Push notification providers (including Twilio, Inc., which processes mobile numbers and message content solely to deliver messages on our behalf).
SMS consent & mobile numbers — no third-party marketing sharing: Mobile phone numbers collected for SMS/text messaging, and the associated opt-in consent records, will not be shared, sold, rented, or otherwise disclosed to third parties, affiliates, or any other entities for those parties' marketing or promotional purposes. We share mobile numbers only with our SMS delivery provider as a data processor necessary to transmit messages you requested, or when required by applicable law.
We may disclose your information: (i) as required by law, court order, or valid legal process; (ii) to protect the safety of users or the public; (iii) in connection with a merger, acquisition, or sale of assets (with reasonable prior notice to users).
We advertise PXI on Google, Meta (Facebook and Instagram), TikTok and X. To measure which ads work, and to show PXI ads to people who have already visited us, we share a limited set of information with those companies. This happens only with your consent, and only two kinds of information are involved:
Under the California Consumer Privacy Act this counts as “sharing” for cross-context behavioral advertising, and several other US state privacy laws treat it as targeted advertising. It is not a sale: we never receive money for your personal information.
To opt out, use the Cookie settings link in the footer of any page — it works in every state and country, whether or not you were shown a banner. We honour the Global Privacy Control signal automatically. On iOS, declining the App Tracking Transparency prompt stops advertising identifiers being collected in the app. The Cookie Policy lists the exact cookie names.
Biometric data, precise location, and the contents of your messages are never shared with advertising partners, in any form, hashed or otherwise.
We do not sell personal information. We do not sell, rent, or share mobile phone numbers or SMS consent data with third parties or affiliates for marketing or promotional purposes. Message and data rates may apply to SMS communications. Message frequency varies as described in Section 2.8.
Access and download a copy of your data: Settings > Privacy > Download My Data. Correct inaccurate profile data at any time within Settings. Delete your account and associated data: Settings > Account > Delete Account. Revoke biometric consent: Settings > Apps > Face Matching. Disconnect Music Match from the Music Match / music connect screen or Settings. Opt out of marketing email: Settings > Notifications > Marketing, or click Unsubscribe in any email. Opt out of SMS at any time by replying STOP to a PXI text message, or via Settings > Notifications > SMS; reply HELP for SMS help. Report content or request removal of tagged photos: In-app report button or [email protected].
California residents have the right to: Know, Access, Delete, Correct, Opt-Out of Sale/Sharing, and Limit Use of Sensitive Personal Data. We do not sell personal data for money. We do use advertising cookies from Google, Meta, TikTok and X for remarketing and conversion measurement, which counts as “sharing” for cross-context behavioral advertising under the CPRA. To opt out, use the Cookie settings link in the footer of any page, or send a Global Privacy Control signal from your browser — we honour GPC automatically. Biometric data is Sensitive Personal Data under CPRA, is collected only with explicit consent, and is never used for advertising. Submit any other request to [email protected] with subject line: CCPA Request.
EU/UK residents have rights to: Access, Rectification, Erasure, Restriction of Processing, Data Portability, Objection, and the right to lodge a complaint with your local Supervisory Authority. Legal bases for PXI's processing: contractual necessity, legitimate interest, and consent. Contact [email protected] or our EU/UK data representative.
All payment data is processed directly by Stripe, Inc. PXI does not store raw credit card numbers, CVV codes, full bank account numbers, or payment method data on its servers. PXI uses Stripe Connect Destination Charges, meaning funds flow from the consumer to Stripe directly, with automated reconciliation and payout to Vendors. By using ticketing features, you also accept Stripe's Terms of Service and Privacy Policy.
PXI is not directed to children under 16 years of age. We do not knowingly collect personal data from users under 16. If we become aware of such collection, we will delete it promptly. Age eligibility is verified at account creation via date of birth. Users between 16 and 17 require parental/guardian consent. Contact [email protected] if you believe a minor's data has been collected.
Privacy inquiries: [email protected]
Legal inquiries: [email protected]
In-app: Settings > Help > Privacy
Mailing address: PXI LABS LLC, 5850 Town and Country Blvd, Suite 403, Frisco, TX 75034.
Ready to go viral? PXI gives you the power to market, ticket, and capture your events with professional precision.