Privacy Policy

Who is responsible for your data

Konfetti Apps is responsible for the data of organizer accounts, of visitors to this website, and for running the platform itself.

At an event, the organizer decides what to collect from guests (for example whether to ask for an email) and what to do with it afterwards. For that guest data (photos, the reuse grant and leads) the organizer is responsible for its use, and Pictolead processes it on the organizer's behalf. Once an organizer exports leads to its own tools, the organizer's own privacy policy applies to them.

Data we collect from guests

To join: a display name and an anonymous account created automatically, with no email or password, when you join through the App Clip or the browser. The full iOS app asks you to sign in with Apple, a passkey or an email code. We record when you accepted the Terms.

The reuse grant: to join an organizer's event you accept that the organizer may reuse the photos you take there. We store the event, the date and time you accepted, and the version of the text you accepted.

Your photos: the photos you take, the versions with the organizer's brand mark applied, your challenge entries and the hearts you give.

Your email, if the organizer turns on lead capture: it's asked either when you join or when you first enter a challenge. Receiving news and offers from the organizer is a separate box, unticked by default.

Location: the full iOS app can add an approximate city name to your photos if you allow location. It never stores your coordinates. The App Clip and the browser camera don't add location.

Notifications: if you allow them, a device token, your language and the app version, used to tell you when an event opens, closes or has news for you. The App Clip uses Apple's temporary notifications, which last eight hours and don't ask for permission.

Data we collect from organizers

Account: your name, email and password, or Sign in with Apple or a passkey. Sign-up and password resets are confirmed with an email code.

Organization: its name, billing email, country, plan, brand (logo and text), the team members you invite (their email and role), your events and their settings, and a log of actions taken in the console, including who took them.

Payments: card payments are processed by LemonSqueezy, and other plans can be paid by transfer. We keep the order or invoice reference, the amount and the plan. We never receive or store card details.

Data we collect on this website

Quote tool: your email, the kind of organization you are, the size and frequency of your events and whether you want a call. We store it with the price we calculated and email you the quote.

Waitlist: your email, your language, the page you came from and campaign tags, if any.

Technical data: connection data and error logs needed to run and protect the service. We use your IP address briefly to limit abusive requests, without storing it. When an event is created we record the country the request came from, not the IP address.

Reliability signals: when an upload fails or is retried, when camera permission is denied, or when a join page opens, we record it with the event, your account, the platform and the app version, so organizers and we can fix problems.

How we use it

To run events: deliver photos to the album and the live wall, run challenges and hearts, apply the organizer's brand, and enforce each event's limits.

To give organizers their results: the content library, the leads list, the reuse-grant records and the campaign report.

To communicate: account codes, event reminders for organizers, a notice when your photos are ready, quotes and waitlist confirmations. You can unsubscribe from reminders with one click. Pictolead itself never sends marketing to the emails guests give as leads; only the organizer receives them.

To keep the service safe and working: handle reports, remove content or participants that break the rules, detect abuse, and fix errors.

We don't sell personal data, and we don't use your photos for advertising or to train AI.

What the organizer and other guests can see

The organizer and its team see your display name, your photos, your challenge entries, your reuse grant and, if you gave it, your email and whether you ticked the marketing box. They can download the photos and export the leads (for example as a CSV for their CRM). The organizer may only send you marketing if you ticked that box.

Other guests at the event can see the participant list with display names. Your name appears on your photos only if the organizer turns that on and you haven't hidden it. The hearts you give may be visible to the organizer and to other members of the event. The event's photos may be shown on the venue's screens through the live wall.

Who we share it with

With the organizer of each event, as described above.

With providers that act on our behalf: Supabase (database, authentication and storage), Cloudflare (photo storage), Vercel (website hosting and anonymous analytics), Resend (email), LemonSqueezy (card payments) and Apple (sign-in, the App Clip and notifications). They may use the data only to provide their service to us.

For legal reasons: when the law requires it, or to protect people's rights and safety and the service itself.

Cookies, local storage & analytics

Strictly necessary: an authentication cookie keeps you signed in, as an organizer or as a guest. The service can't run without it.

Preferences: small cookies and local-storage entries remember choices such as your language, light or dark theme, that you've seen the cookie notice, and how you arranged the console.

Analytics: Vercel Web Analytics counts page visits and a few events (for example that a quote was requested, never your email) anonymously and in aggregate. It uses no cookies and doesn't follow you across other sites.

We use no advertising cookies.

Data retention

Each event's photos expire on a date the organizer sets, 90 days after the event closes by default and never more than 365. When an event expires or is deleted, its photos, reuse grants, leads and hearts are deleted with it. Deleted events are removed for good after 7 days.

Deleted accounts and organizations enter a 30-day grace period before they're removed. Leads already exported by an organizer stay in its tools under its own policy.

Quote requests and waitlist emails are kept until you ask us to delete them. Billing records are kept for as long as tax law requires.

Security

Data is encrypted in transit and at rest. Access is restricted by role: our database enforces per-event and per-organization rules, and an original photo can be downloaded only by its author, the organizer's team, or anyone if the organizer marks it as shareable. No system is perfectly secure, but we work to protect your data and will notify you and the authorities of a breach where the law requires.

Your rights

You can access, correct, delete or object to the processing of your data, and withdraw your consent, under Mexican law and, depending on where you live, laws such as those of the EU, the UK or California. Write to hello@pictolead.com. For data collected at an event, you can also contact the organizer; we'll help either way.

Organizers can edit or delete their account from the console. Guests who joined without an account can ask us by email to delete their data from an event; include the event name and your display name.

Children

Pictolead isn't directed at children under 13 (or the minimum age in your country), and we don't knowingly collect their data. If an event admits minors, the organizer is responsible for obtaining a parent's or guardian's permission. If you believe a child gave us information, contact us and we'll delete it.

International transfers

Our providers may process data in other countries, including the United States and the European Union. Where required, we rely on appropriate safeguards for these transfers.

Changes & contact

We may update this policy. We'll post the new version here with a new date and give notice of material changes. Questions or requests: hello@pictolead.com.