The Legal Hub.

2.1 Account & Identity Data

When you create a PXI account, we collect: Phone number (E.164 format; used for OTP/account verification and, where you separately opt in, for the PXI SMS Program described in Section 2.8; we do not store passwords), Display name and username, Date of birth (for age eligibility verification; birth year is never shared with other users), Optional: profile photo, biography, and social media handles, Optional: email address (for account recovery and legal notices).

2.2 Location Data — The Event Lock

To unlock event-specific photo albums and show nearby events, PXI may request your location while you use the app (when-in-use). Location is used to check your latitude and longitude against a ~1km Haversine radius around the event venue (for example at ticket scan / check-in) and to rank nearby events in Discover. We do NOT request Always/background location permission and we do NOT continuously track your location when the app is closed. Aggregate spatial metadata may be retained for safety and fraud prevention for up to 90 days.

2.4 Media & Content Data

We collect content you actively create or upload: Photos and videos uploaded to Event Albums, The Wall, The Vault, or The Circle. Voice notes you record in direct messages, group chats, or event album threads (audio files and duration metadata; typically capped at about 60 seconds). Metadata: upload timestamp, event association, media type, file size. Analog Engine processing parameters: ZSL (Zero Shutter Lag), Halation, Film Grain shader settings applied at render time. These parameters are PXI's proprietary aesthetic layer; the underlying raw photo remains yours. Captions, comments, reactions, and text messages you post. Number of retakes before posting (used to improve camera experience, not stored permanently). Uploaded media may be scanned by automated systems (for example NSFW safety classifiers) to enforce Community Standards.

2.5 Usage, Engagement & Gamification Data

App interactions: album joins, ticket scans, photo uploads, reactions, shares, comment posts, messages sent. Odyssey/Gamification data: XP earned per action, Stamp tier achieved, Leaderboard position, event attendance history. Event-specific behavior: Hype Gate activity, Grace Time uploads, Circle content views, check-in confirmations. Device and network data: device type, OS version, browser/app version, IP-based approximate location (city-level), and push notification tokens. PXI does not use the advertising identifier (IDFA/GAID) for tracking. Crash logs, error diagnostics, and performance monitoring data. When you take a screenshot within the app (we may notify the relevant album host).

2.6 Event & Ticketing Data (Attendees)

Ticket purchase records and order history. RSVP and attendance status. Payment confirmation numbers (NOT full card details — those are held by Stripe). Event check-in timestamp and location confirmation. Contacts: with your permission, we may read your device contacts on-device to suggest people you may already know on PXI (Circle suggestions) and to help you invite friends. We do not upload or permanently store your full address book on PXI servers; only the connections or invites you choose to act on create server-side records.

2.7 Vendor, Host & Organizer Data

If you register as a Tier 3 Vendor/Host, we additionally collect: Legal name, business name (DBA), address, EIN/tax identification number. Bank account/payout information (processed via Stripe Connect; PXI does not store raw bank details). Government-issued ID (when required for identity verification for high-volume payouts). Event proceeds history, fee records, chargeback history. Staff delegation records (who you assigned as Co-host, Photographer, Promoter, or Bouncer). Messaging Service communication logs (for SMS/event blast compliance).

2.9 In-App Messaging & Voice Notes

PXI includes direct messages, group chats, and event album threads. When you use these features we process: message text; voice notes (audio recordings you create with the microphone, typically up to about 60 seconds) and their duration; shared media, GIFs, stickers, and event cards you attach; conversation participant IDs; delivery/read metadata; and report/block actions.

• Voice notes and chat media are stored on our cloud storage providers (for example Cloudflare R2) so recipients can play them, subject to the retention rules in Section 5.
• Messages are visible to conversation participants. Event album threads may be visible to other attendees of that event.
• You can block or report users. We review reports under our Community Standards and may remove content or restrict accounts. Automated classifiers may scan uploaded images for prohibited content; voice notes and text are primarily moderated reactively via user reports.
• This section covers in-app chat. SMS/text messages with carriers are covered separately in Section 2.8 and Terms §12.

2.10 Music Match (Apple Music)

Music Match is an optional feature. It uses the sound you pick in the app and the events you save, join and attend. If you also connect Apple Music, we receive your library songs, recently played and heavy rotation (artists, genres and related metadata) solely to score how well your taste overlaps with events. Apple Music data is never used for advertising, never shared with organizers or other third parties, and never used to identify you. We do not change anything in your music library. Spotify connections made before October 6, 2026 are treated the same way until you disconnect them; new Spotify connections are no longer offered.

• Connecting Apple Music is an affirmative opt-in through Apple's own authorization, after PXI shows what it reads.
• You may disconnect at any time; disconnecting deletes your Music Match profile/taste data stored by PXI.
• Music providers process your account data under their own privacy policies when you authorize the connection.

4.1 With Other Users (by Design)

• Your profile photo, display name, and Odyssey rank are visible to users in shared event albums you join.
• Photos you upload to an Event Album are visible to other verified attendees of that event.
• The Wall (public archive): visible to all PXI users.
• The Vault: private (visible only to you).
• The Circle: ephemeral (visible only to your Circle contacts; auto-deleted after 24 hours).
• Hype Gate content: visible only to ticket-verified pre-event attendees.
• Photos you are tagged in remain visible to album participants even after you leave the album. You may request removal by contacting privacy@pxispace.com.
• Screenshots: we may notify the relevant album host when another user takes a screenshot within a private album.

4.2 With Event Hosts and Venue Partners

Event hosts (the organizers of events) and venue partners (venues where events on PXI take place) are held to the same privacy standard. Neither ever receives your email address or phone number.

• What they can see about you: your display name, username, profile photo, how many of their events you attended, when you last checked in, the ticket tier you chose, and your Odyssey engagement tier. A host sees this for its own events. A venue partner sees it for events held at its venue, whoever organized them.
• When you are not shown by name in audience lists: if you opt out of personalized sharing (see Section 6.1), or you are in a region where we need your permission first and have not given it, you are counted in totals but your name, username and photo are not shown in the audience lists and insights that hosts and venue partners use.
• At the door: when your ticket is scanned, the host and their door staff see your name, username and profile photo so they can check you in. This applies only to tickets for their own event and is not affected by your sharing choices, because it is needed to let you in.
• Aggregate analytics for venues: venue partners also see totals for events at their venue: attendance, tickets sold, photo and video volume, check-ins by hour of day, the share of first-time and returning guests, and age bands and cities. They also see where in the venue photos were taken and which entrances guests were scanned at, drawn as a heat map of the room and as entrance totals across events. All of these are totals: they never identify who took a photo or who came through which door. Age and city figures are withheld when too few people attended for them to stay anonymous.
• Contacting you — the masked relay: hosts and venue partners cannot see or export your contact details, and cannot send you anything themselves. When one of them wants to reach their past guests, they write the message and choose an audience; PXI sends it, from PXI's own systems, to the people who opted in. They are told how many people it reached, never who. Every message says "Sent via PXI on behalf of" the host or venue, carries PXI's postal address, and carries a one-click unsubscribe link (email) or the STOP keyword (SMS) that stops the channel immediately. Your address and number never leave PXI.
• Venues and events held there: a venue partner's audience is everyone who attended an event held at that venue, including events that happened before the venue joined PXI, and whoever organized them. PXI attaches a past event to a venue only when PXI staff confirm the match. Nothing about you moves between venues: a night you spent at one venue is never visible to another.
• No revenue to venues: venue partners do not receive ticket prices paid, revenue, payouts or fees for events at their venue.
• How venue access is granted: a venue partner receives access only when PXI staff grant it. It cannot be requested or taken from within the app, and when PXI withdraws it, access ends immediately.
• Hosts and venue partners are contractually bound by PXI's Vendor Agreement, may use this information only in connection with their events and venue, and may NOT sell or license your personal data to third parties.

4.4 With Service Providers

Stripe, Inc. (payments), Cloudflare (Edge middleware, CDN, R2 storage for photos, videos, and voice notes), facial geometry processing on PXI servers for Face Matching, Analytics providers (aggregated, non-PII data only), Apple's Apple Music API when you connect Apple Music to Music Match, and SMS/Push notification providers (including Twilio, Inc., which processes mobile numbers and message content solely to deliver messages on our behalf).

SMS consent & mobile numbers — no third-party marketing sharing: Mobile phone numbers collected for SMS/text messaging, and the associated opt-in consent records, will not be shared, sold, rented, or otherwise disclosed to third parties, affiliates, or any other entities for those parties' marketing or promotional purposes. We share mobile numbers only with our SMS delivery provider as a data processor necessary to transmit messages you requested, or when required by applicable law.

4.5 Legal Obligations & Business Transfers

We may disclose your information: (i) as required by law, court order, or valid legal process; (ii) to protect the safety of users or the public; (iii) in connection with a merger, acquisition, or sale of assets (with reasonable prior notice to users).

4.7 No Sale of Personal Data; Mobile Information

We do not sell personal information. We do not sell, rent, or share mobile phone numbers or SMS consent data with third parties or affiliates for marketing or promotional purposes. Message and data rates may apply to SMS communications. Message frequency varies as described in Section 2.8.

6.1 All Users

Access and download a copy of your data: Settings > Privacy > Download My Data. Correct inaccurate profile data at any time within Settings. Delete your account and associated data: Settings > Account > Delete Account. Revoke biometric consent: Settings > Apps > Face Matching. Disconnect Music Match from the Music Match / music connect screen or Settings. Opt out of marketing email: Settings > Notifications > Marketing, or click Unsubscribe in any email. Opt out of SMS at any time by replying STOP to a PXI text message, or via Settings > Notifications > SMS; reply HELP for SMS help. Opt out of personalized sharing, which stops you being shown by name in the audience lists of event hosts and venue partners (door check-in is not affected) and stops audience insight profiling: use the Cookie settings link in the footer of any page, send a Global Privacy Control signal, or email privacy@pxispace.com. You will still be counted in totals. Report content or request removal of tagged photos: In-app report button or privacy@pxispace.com.

6.2 California Residents (CCPA / CPRA)

California residents have the right to: Know, Access, Delete, Correct, Opt-Out of Sale/Sharing, and Limit Use of Sensitive Personal Data. We do not sell personal data for money. We do use advertising cookies from Google, Meta, TikTok and X for remarketing and conversion measurement, which counts as “sharing” for cross-context behavioral advertising under the CPRA. To opt out, use the Cookie settings link in the footer of any page, or send a Global Privacy Control signal from your browser — we honour GPC automatically. Biometric data is Sensitive Personal Data under CPRA, is collected only with explicit consent, and is never used for advertising. Submit any other request to privacy@pxispace.com with subject line: CCPA Request.

6.3 EU / UK Residents (GDPR)

EU/UK residents have rights to: Access, Rectification, Erasure, Restriction of Processing, Data Portability, Objection, and the right to lodge a complaint with your local Supervisory Authority. Legal bases for PXI's processing: contractual necessity, legitimate interest, and consent. Contact privacy@pxispace.com or our EU/UK data representative.