Privacy Policy

Picnjoy creates and runs AI photo experiences for events and brands. When hired by a Customer, our team sets up the themes, access rules, and credit budget of a campaign. Participants open the campaign via link or QR Code in their phone browser, sign in with a magic link, submit a selfie, and receive generated images.

We are not a social network, stock library, or generic photo editor. The focus is running campaigns with themes defined together with the Customer, a moderated feed per campaign, and data kept separate per campaign.

The Customer is the person or company that hires Picnjoy for an experience. The Customer defines the idea, themes, access rules, and moderation together with our team, and receives reports about the campaign. The Customer does not access participants' original selfies. Picnjoy runs the platform (access, storage, image generation, payment, and delivery of the photos).

The Customer is responsible for informing participants about the experience, including when minors are under their supervision, and for lawfully using the data received in reports. Participant acceptances in the campaign flow are separate from the Customer's Terms of Service.

From a campaign participant: email (required via magic link); name only when the campaign enables name collection; records of terms acceptance and selfie-processing consent; selfie and participant-submitted attachments, processed temporarily; generated images and generation details.

From the Customer and anyone who contacts us: name, email, phone, type of event or business, and the content of the conversation with the website's AI assistant (voice or text), which may be recorded and transcribed, used to answer the request and agree on the engagement. When you use voice chat, the browser asks for microphone permission and the audio is processed to run the conversation; contracting and billing data, according to the agreed payment method; and campaign settings (themes, access rules, members, and metrics).

A participant's email authenticates campaign access (magic link), links photos to their gallery, and operates the experience. Emails from Customers and from people who contact us are used to answer requests, handle the engagement, billing, security, and service messages.

We do not sell emails or share them with third parties for spam. Marketing emails are sent only when the participant grants the optional consent described in section 7, and can be cancelled at any time.

The selfie and additional images submitted by the participant are stored temporarily, only to generate the result. When generation finishes, fails permanently, or the participant abandons the flow, these files are deleted.

After that, neither the Customer nor the Picnjoy team can access the participant's original images. Each new generation requires a new capture.

Reference images included in themes are not participant selfies: they remain theme assets and are provided or approved by the Customer.

AI-generated images remain available for viewing, download, and sharing in the participant's gallery and, if the participant approves, in the campaign feed. Picnjoy may archive images to remove them from the public feed, at the Customer's request or when necessary; after archiving, the participant cannot republish that item.

This policy does not set a single retention period for generated images: they remain as long as needed for the service and for the gallery, feed, and archive features, or until deletion or a request under applicable law.

There are three separate acceptances in the participant flow, presented by Picnjoy: (1) general terms of the experience; (2) optional consent to receive Picnjoy marketing emails, for news, offers, and promotional communications — this is not required to take part in the campaign, can be declined without affecting access, and, if granted, can be revoked at any time; (3) specific consent for selfie processing, before the camera opens. Granted acceptances are recorded with date and version.

When someone from the Picnjoy team operates the campaign camera for testing, the acceptances required by the flow may be recorded automatically, without repeating the same confirmation screen.

Participant images, generated images, and personal data are not used by Picnjoy to train artificial intelligence models. Processing uses generation providers under service agreements; your images do not enter Picnjoy's continuous learning.

Each campaign's data is kept separate. The Picnjoy team runs the campaign and accesses the information needed for operation (for example, generation status and already-generated images), without access to participants' original selfies. The Customer receives reports with participants' emails (when the campaign captures contacts), usage metrics, and the AI-generated images — never the original selfies, which are used only in internal generation processing and destroyed afterward.

Generated images are delivered securely and with authentication. Publishing to the public feed requires the participant's explicit approval and respects archiving.

When the Customer provides brand elements (logo, visual identity, or reference images) for themes, those elements are applied only within that campaign or theme. We do not use customers' brands for any other purpose.

We do not sell personal data. We use providers necessary for operations, under contract and for service purposes: payment processing (for example, Stripe, when used), cloud and storage infrastructure, AI generation providers, service email (magic link and communications), and the website's AI customer assistant (Cetrai), which processes the conversations.

We adopt appropriate technical and organizational measures, including separating data per campaign and authenticated access to images. Participant selfies are temporary, as described in section 5. Contracting, payment, campaign settings, and generated images follow the retention needed for the service and legal obligations.

Infrastructure backups may exist. Specific backup periods are not published on this page; data subject requests are handled through the contact channel below.

You may request access, correction, anonymization, portability, or deletion of personal data, as well as information about processing, to the extent provided by the LGPD and other applicable rules. Contact us at the email below. Some actions on generated images may take the form of archiving or removing visibility, depending on product capabilities and the law.

Campaigns may involve minors under the organizer's responsibility. Supervision and guardian consent are up to the Customer who organizes the event. We do not request special categories of sensitive data as a requirement to generate images.

We may update this policy. The current version will be on this page with the date of the last update.