Privacy policy

Your photo stays yours

When you add a photo to a campaign, cropping and resizing happen in your browser. The image is processed on your device and the finished poster is generated there too.

We do not claim ownership of your photo or of the poster you create. We will never use either in our own advertising, on our website, or in a sales deck unless you tick the explicit opt-in box on the campaign page. That box is off by default and we do not pre-tick it.

What we store, and for how long

Campaign owners need to know how their campaign performed, so we keep a small amount of data about each poster. We keep as little as we can and delete it on a schedule the campaign owner sets.

• A poster identifier and the time it was created.
• A coarse region derived from your IP address - district level, never a precise location. The IP itself is discarded after the region is derived.
• Device type and browser family, so we can fix rendering problems.
• The text you typed into the poster fields, because it is printed on the poster.
• The generated poster image, retained for the window the campaign owner chose. The default is 90 days.

What we never do

We do not sell personal data. We do not run third-party advertising networks on campaign pages, so no ad-tech cookies are set while a participant makes a poster. We do not build cross-campaign profiles of individuals, and we do not run facial recognition or any biometric analysis on uploaded photos.

Cookies

Campaign pages set one short-lived cookie to prevent abuse and to avoid counting the same person twice in a campaign's numbers. It expires in 30 days and contains no personal information. Analytics cookies for the marketing site are only set after you accept them in the consent banner.

Participants under 18

Many campaigns run in schools and colleges, so we treat this seriously. Campaigns aimed at participants under 18 must be marked as such by the organiser, which disables all promotional reuse permanently, shortens the default retention window to 30 days, and removes the opt-in box entirely.

We do not knowingly collect data from children under 13. If you believe a child's image was uploaded, write to privacy@campx.studio and we will remove it and confirm within 72 hours.

Your rights

Wherever you live, you can ask us for a copy of your data, ask us to correct it, or ask us to delete it. If you are in the EU, UK or California, you also have the statutory rights to restrict or object to processing and to data portability.

You do not need an account to exercise any of this. Every generated poster carries a reference, and quoting it in an email to privacy@campx.studio is enough for us to locate and delete the record. We respond within 30 days and usually much sooner.

Data location and processors

Data is stored in Indian data centres by default. Enterprise customers can pin storage to a specific region. We publish our sub-processor list and will give 30 days' notice before adding a new one.

Contact

For anything on this page, write to privacy@campx.studio. For a signed data processing agreement, write to legal@campx.studio.