Privacy Policy

Effective Date: 1 November 2026

Status: Private Preview

Picsto is a private photo and video storage service designed with privacy at its core. This Privacy Policy explains what information we collect, how we handle your data, and how we protect your privacy.

1. Information We Collect

We collect only the minimum data necessary to provide and secure our service:

• Account Information: Basic details provided during sign-up or invitation (such as your email address and authentication credentials).
• User Content: Photos, videos, and associated metadata (such as original file names, capture dates, and camera properties) uploaded to your library.
• System-Generated Data: Previews, thumbnail assets, face groupings, and search index entries derived from your media to power your personal library features.
• Technical & Log Data: Standard technical logs (including IP addresses) maintained strictly to monitor performance and maintain service security.

2. How We Use Your Data

We use your data solely to operate, maintain, and deliver the Picsto service. Specifically:

• To render your media library, generate previews, organize face groups, and enable fast search.
• To manage your account and process support requests.
• To protect our infrastructure and enforce service security.

3. What We Never Do

• No Selling or Renting: We do not sell, rent, monetize, or trade your personal data or media to third parties.
• No Advertising or Profiling: We do not display ads, serve targeted content, or build behavioral profiles based on your library.
• No AI Training: We do not use your photos, videos, face data, or file details to train artificial intelligence models.
• No Unauthorized Sharing: Your content remains private to your account and is never shared with other users unless you explicitly initiate a share.

4. Facial Grouping & Media Processing

Picsto processes supported media to perform automated features such as face grouping and content indexing. All media processing occurs within our secure production environments. Facial data and index features are treated as strictly confidential system data and are never shared or exported to outside entities.

5. Data Storage & Security

• Encryption: Your content and system metadata are encrypted in transit using industry-standard protocols (TLS/HTTPS) and at rest across our storage infrastructure. Our server can decrypt your files, which it needs to make previews and show them to you.
• Infrastructure: We host and back up data using established cloud service providers.
• Backups: We maintain encrypted, redundant system backups to protect against hardware failure or disaster recovery events.

6. Service Providers

We engage trusted third-party service providers to perform specific operational functions on our behalf—such as cloud hosting, domain connection security, transactional email delivery, and storage redundancy. These providers process data only to provide their service to us.

7. Cookies & Local Storage

One essential cookie keeps you signed in, and local browser storage holds only your preferences (such as display theme). We do not use third-party tracking, advertising, or cross-site analytics cookies.

8. Data Retention & Deletion

• Content Deletion: When you delete a photo, video, or asset within the application, it is removed from your active library.
• Backup Lifecycle: Deleted items are removed from our encrypted backups as they rotate, within about two years.
• Account Deletion: To request full account deletion, contact us at [email protected]. Upon account termination, your data will be permanently purged from our primary systems.

9. Your Rights & Contact Information

You have the right to access, update, or request the deletion of the personal information we hold about you.

For privacy inquiries, account deletion, or access requests, please contact us at:

Email: [email protected]

We aim to respond to all valid privacy and data requests within 30 days.

This document describes our current data handling practices during the Picsto private preview phase and may be updated as the service evolves.