Privacy Policy

1. Who is responsible

Client data (account, billing, usage): [company name], [address], is the controller. Contact: contact@mediapixs.net.

Guest data (photos, creations, contact details, faces): the event organizer — our client — is the controller. MediaPixs processes this data on their behalf, solely to provide the service. A guest who wishes to exercise their rights may contact the organizer or us directly; we will forward the request.

2. Client data

• Identity and sign-in: name, email address, optional profile picture (through our authentication provider).
• Account: organization name, events, settings, logos and visuals added, connected devices.
• Billing: plan, payment history, billing details. Card numbers are processed by Stripe and never sent to us.
• Usage: number of creations, technical logs and error reports needed for operation and security.

Purposes: providing the service, billing, support and security, and meeting our legal obligations. Legal bases: performance of the contract, legal obligations and our legitimate interest in securing the platform.

3. Guest data

• Photos taken by the booth and creations made from them (including by artificial intelligence).
• First name or name entered by the guest, if any.
• Phone number or email address, if the guest asks to receive their photo or leaves their details.
• Find Me (if enabled by the organizer): faces in the event photos are indexed so each guest can find their photos from a selfie. This is biometric data. The selfie is only used for the search and is not kept.

This data is used only to produce, print, display and send the event's photos, according to the organizer's settings. We do not sell it, use it for our advertising or train AI models with it, unless the organizer agrees in writing.

The organizer must inform guests on site and obtain their explicit consent for Find Me, and a parent's consent for minors.

4. Service providers (processors)

We use the following providers, bound by confidentiality and security commitments:

Some data is therefore processed outside Israel and the European Union. These transfers rely on the safeguards provided by law (European Commission standard contractual clauses or equivalent mechanisms).

5. Retention

• Client account: for the duration of the subscription, then 30 days after the end of the contract (to allow retrieval), before deletion.
• Invoices and accounting data: 7 years, as required by law.
• Guests' photos, creations and contact details: as long as the event exists in the organizer's account. The organizer can delete an event at any time, which deletes its photos, creations, contact details and indexed faces. [Automatic deletion [90] days after the event and erasure of files at the storage provider: being implemented — to be completed before publication.]
• Find Me selfie: not kept, used only during the search.
• Technical logs and error reports: [90 days — to be confirmed].

6. Security

• Encrypted connections (HTTPS) between devices, the platform and our providers.
• Strict separation of each client's data, checked automatically and enforced at database level.
• Devices are connected with a one-time code; their key is only stored as a hash and can be revoked at any time.
• Access to data is limited to people who need it for support or maintenance.

In the event of a data breach, we notify affected clients without undue delay and the authorities where required by law.

7. Your rights

Depending on the applicable law (including the Israeli Privacy Protection Law and, for people in Europe, the GDPR), you may request access to, correction, deletion, restriction or portability of your data, and object to certain processing. Write to contact@mediapixs.net; we respond within one month.

You may also contact the competent data protection authority (in Israel, the Privacy Protection Authority; in France, the CNIL).

8. Minors

The platform is intended for professionals. At events attended by minors (bar and bat mitzvahs, birthdays…), the organizer ensures a parent has agreed, in particular before using Find Me or collecting contact details.

9. Cookies

The dashboard and booth only use cookies necessary for them to work: sign-in session, chosen language and booth iPad identification. They are not used for advertising or audience tracking.

10. Changes

We may update this policy, in particular when adding a provider. The update date appears at the top of the page; clients are notified by email of any material change.