Introduction
Picshare is operated by USTechService Corporation. This policy explains what information we collect when you use picshare.io, where that information lives, how long we keep it, and what rights you have over it. We've written this in plain English because legal boilerplate helps no one.
Data we collect
We collect only what we need to make Picshare work:
- Email address. Required to create and authenticate your host account.
- Name. Optional for hosts. Guests may enter a name when they upload — also optional.
- Photos and videos. Uploaded by you or your guests into an Event or Story you control.
- Basic usage data. Which pages were viewed and when, through cookieless analytics.
We do not collect phone numbers, addresses, or payment card numbers directly. Payment details, when you upgrade, are collected by Stripe.
Where your data lives
Account data and database records are stored with Supabase on US-based infrastructure. Photos and videos are stored on Cloudflare R2 object storage, also US-based. Both providers encrypt data at rest and in transit.
Retention
Your media is stored until you or the host of the gallery it belongs to deletes it. Picshare does not auto-delete photos after a fixed window. Your account and its associated records are retained until you delete the account, at which point all personal data and associated galleries are removed from our primary systems within thirty days.
Third parties
Picshare uses a small set of vetted service providers. Each receives only the data it needs to perform its function:
- Supabase — authentication and database.
- Cloudflare — object storage for media (R2) and network delivery.
- Stripe — billing and payment processing for paid plans.
- Resend — transactional email (sign-in links, receipts, waitlist notifications).
- Plausible — cookieless, GDPR-compliant page analytics. No cross-site tracking, no personal identifiers.
GDPR and your rights
If you are a resident of the European Union or the United Kingdom, you have the right to access the personal data we hold about you, to correct it, to delete it, to export it in a portable format, and to withdraw consent for processing at any time. To exercise any of these rights, email privacy@picshare.io and we will respond within thirty days.
Children
Picshare is not directed to children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has created an account, email us and we will delete it.
Changes to this policy
If we make material changes to this policy, we will email registered users at least fourteen days before the change takes effect. Minor, non-material edits will be published here with an updated date.
Contact
Privacy questions and data requests: privacy@picshare.io.
Company: USTechService Corporation, Shelby Township, Michigan, USA.