Privacy Policy

Version 2 · Effective: May 6, 2026

This is an initial production privacy policy. We periodically review and update it as the platform grows. Material changes are surfaced to you on your next sign-in.

This Privacy Policy explains what MomentPix, LLC ("MomentPix", "we", "our", "us") collects when you use our photography platform, how we use it, and the choices you have. We try to write this in plain language; legally important parts are still binding.

We are based in Miami, Florida.

What this covers

• The MomentPix website and apps (collectively, the "Platform").
• The accounts you create on the Platform (consumer accounts, photographer accounts, and platform-staff accounts).
• The photographs and gallery experience the Platform delivers.

When a third party (for example, a school or sports league) contracts with MomentPix to photograph an event, that organization may also have its own privacy notice. This Policy describes what MomentPix does with the data — not what the third party does.

A short version

• We do not sell your personal information.
• We do not share your personal information with advertisers, ad networks, or data brokers.
• We do not use facial recognition on photos. (If we ever introduce a feature that uses facial recognition, it will be opt-in and we will publish a separate addendum to this Policy first.)
• We collect only what we need to run the Platform — your account info, your purchases, the photos a photographer uploaded, and basic usage signals to keep the site working.
• We use vetted service providers (such as our payment processor and our transactional-email provider) to operate parts of the Platform; we describe each below.

1. The information we collect

Account information. When you create an account, we collect the email address and name you provide, a password hash (we never see your plaintext password), and your role (consumer, photographer, or platform staff). For photographers, we may also collect a business name, phone number, and tax information needed to issue payouts.

Order and purchase information. When you purchase a photo or product, we record what you bought, the amount, the order timestamp, the delivery method, and the email address used for the transaction. Card data is handled by our payment processor (see Section 4); we do not store full card numbers, expiration dates, or security codes on our systems.

Photographs and related metadata. Photographers upload photos to galleries on the Platform. Photos are visible to consumers who have the access code or URL for that gallery (or to the public, if the photographer has marked the gallery public). We retain photos according to the photographer's storage settings.

Subject information. For some events (notably school and sports photography), the photographer may provide non-photo information such as a participant's first name, team or class, jersey number, or grade level so the system can group photos correctly. This information is provided by the photographer or the organization that contracted them; we treat it as confidential and use it only to operate the gallery experience.

Device and usage information. Like most web platforms, our servers automatically receive standard log information when you visit — IP address, browser type, the page or photo you requested, and a timestamp. We use this to keep the site secure, diagnose problems, and measure aggregate usage.

Cookies and similar technologies. See our Cookie Policy at /agreements/cookie_policy for the cookies we set and what each one does. We do not run third-party advertising or cross-site tracking pixels.

Acceptance records. When you accept this Policy or our Terms of Service, we record the document version, the timestamp, and the user identifier so we can demonstrate which version of the agreement you agreed to.

2. Where the information comes from

• Directly from you — when you create an account, place an order, contact support, or interact with the Platform.
• Automatically — through standard web logging when your browser interacts with the Platform.
• From the photographer or contracting organization — when an event involves grouping photos by team, class, jersey number, etc.

3. How we use the information

We use the information described above to:

• Operate, secure, and improve the Platform.
• Authenticate you and keep your session active.
• Process orders, deliver downloads, generate receipts, and handle refunds.
• Send transactional messages (sign-in links, order confirmations, password resets, refund notices). We do not send marketing email unless you have separately opted in.
• Detect and respond to fraud, abuse, and security incidents.
• Comply with legal obligations and enforce our agreements.

4. When we share information

We do not share your personal information with third parties for their own marketing purposes, and we do not sell your personal information. The only categories of recipients are:

• Service providers acting on our behalf. A short, vetted list:
  • Stripe, Inc. — payment processing. Card details are entered directly into Stripe's secure payment forms; Stripe processes the transaction and returns a confirmation to us. Stripe handles your payment data under its own privacy policy.
  • Microsoft 365 (Microsoft Corporation) — transactional email delivery. Sign-in links, receipts, and operational notices are sent via Microsoft 365 mailboxes we operate.
  • Backblaze, Inc. — long-term photo storage (cold tier). Backblaze stores encrypted photo files; it does not access them.
• The photographer of an event you are participating in. A photographer running an event sees the orders, downloads, and access activity for their own gallery — that is the basic shape of the service.
• Legal and safety. If we are required by valid legal process to disclose information, or if we reasonably believe disclosure is necessary to protect rights, safety, or to prevent fraud, we may share information accordingly. We will object to overbroad requests where we can.
• Business transfers. If MomentPix is acquired or merges with another entity, your information may transfer as part of the transaction. We would notify you of any change in ownership and any material changes to this Policy.

We do not disclose your personal information to advertising networks, data brokers, social-media targeting platforms, or analytics providers that combine your data with data from other sites for cross-context profiling.

5. Cookies and tracking

See our Cookie Policy at /agreements/cookie_policy. Short version: we use a minimal set of strictly necessary cookies for sign-in and gallery access, and we do not use third-party advertising cookies, cross-site tracking pixels, or session-replay tools.

We honor the Global Privacy Control (GPC) browser signal and standard "Do Not Track" headers where applicable. Because we do not engage in cross-context behavioral advertising, the practical impact of GPC on the Platform is limited, but we still respect it.

6. Children

The Platform is not directed at children under 13 as end users. Children may, however, appear in photographs uploaded by the photographer of an event the child or the child's parent or guardian participated in.

For events involving minors (such as school or youth-sports photography), the photographer is responsible for obtaining the appropriate parental notice and consent under the Children's Online Privacy Protection Act (COPPA) and applicable state law. MomentPix supports the photographer's compliance by:

• Restricting purchase accounts to users 18 or older.
• Allowing parents and guardians, not the children themselves, to create an account, place orders, and download photos.
• Honoring deletion requests for photographs of minors when made by the parent or guardian, the school, or the photographer.

If you believe a child under 13 has created an account on the Platform, please contact privacy@momentpix.com and we will investigate and delete the account.

7. Facial recognition and biometric data

The Platform does not currently use facial recognition or generate biometric identifiers (such as face embeddings or face templates) from any photograph.

If we develop a feature in the future that depends on facial recognition (for example, helping a parent find their child's photos in a large gallery), it will:

• Be opt-in by the appropriate consenting party (the photographed person, or, for minors, the parent or guardian).
• Be governed by a separate, dedicated addendum to this Policy that we will publish before the feature launches.
• Comply with the applicable biometric-information laws of the jurisdictions in which the feature is offered (including, for example, the Illinois Biometric Information Privacy Act if offered to Illinois residents, and similar statutes in Texas and Washington).

8. How long we keep information

• Active account information — for as long as the account is active.
• Closed-account information — limited information may be retained for accounting, tax, fraud-prevention, and legal-defense purposes. Most other information is deleted within 90 days of account closure.
• Order and purchase records — retained for the period required by tax and consumer-protection law (currently 7 years, unless local law specifies a longer or shorter period).
• Photographs — retained according to the photographer's storage settings; if the photographer's account closes, photos are typically deleted within the photographer's specified retention window.
• Acceptance records (Terms of Service / Privacy Policy) — retained for the life of the account plus a reasonable legal-defense window (typically 4 years).
• Server logs — retained for up to 90 days for security and operational diagnostics.

9. How we secure information

We protect personal information using industry-standard administrative, technical, and physical safeguards. These include encryption in transit (TLS 1.2 or higher), encryption at rest for sensitive fields, role-based access controls, audit logging, secret rotation, and network segmentation. We monitor for unauthorized access and respond to incidents we detect.

No system is perfectly secure. If we become aware of a breach affecting your personal information, we will notify you and the relevant regulators as required by applicable law.

10. Your choices and rights

You can:

• See and update your account information by signing in to the Platform.
• Close your account at any time by contacting privacy@momentpix.com or using the in-product account-closure flow.
• Opt out of marketing email by clicking the unsubscribe link in any marketing message we send (transactional email about your orders or sign-in remains).

Depending on where you live, you may also have rights under your jurisdiction's privacy law:

• Florida residents — under the Florida Digital Bill of Rights, you may have the right to know what personal information we have about you, to correct or delete it, and to opt out of certain processing. Florida residents can submit a verifiable request to privacy@momentpix.com.
• California residents — under the California Consumer Privacy Act and California Privacy Rights Act, you have rights to know, delete, correct, port, limit, and opt out of "selling" or "sharing." We do not sell personal information and do not share it for cross-context behavioral advertising. You may submit a request to privacy@momentpix.com and you have the right to designate an authorized agent.
• Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Delaware, New Hampshire, New Jersey, Minnesota, Nebraska, Maryland, Kentucky, Rhode Island, Indiana, Tennessee residents — you have substantively similar rights under your state's law and may submit requests in the same way.
• Children's data — a parent or legal guardian may submit requests on behalf of a minor in their care.

We will verify your identity before fulfilling a rights request. If we deny a request, we will explain why and provide an appeal path. Most rights requests are handled within 45 days.

11. International users

The Platform is operated from the United States. If you access the Platform from outside the United States, your information will be transferred to and processed in the United States. The United States may have different data-protection rules than your home country.

We do not currently target the Platform at residents of the European Economic Area or the United Kingdom. If you are an EEA or UK resident and access the Platform, please contact privacy@momentpix.com for further information.

12. Changes to this Policy

We will update this Policy as the Platform evolves. The version number and effective date appear at the top. Material changes are presented to authenticated users for re-acceptance on next sign-in. Older versions are archived and available on request.

13. Contact us

For privacy questions, requests, or complaints, reach us at:

MomentPix, LLC Attn: Privacy Miami, Florida Email: privacy@momentpix.com

If you believe we have not adequately addressed a concern, you may also contact your jurisdiction's data-protection authority.