Privacy Policy
Last Updated: August 4, 2026
This policy is in English. If translated, the English version controls.
1. Introduction
This Privacy Policy explains how Gregory Kirkendall, trading as PixBack ("PixBack," "we," "us," or "our"), collects, uses, stores, and protects personal data in connection with the PixBack desktop application (the "Software").
We are committed to data minimization: we collect only what is necessary to provide the Software, manage your license, and (if you opt in) tell you about new products. We do not sell, rent, or share your personal data with third parties for their own marketing purposes, and we do not collect or store your photos or videos.
This Policy is designed to comply with the EU/UK General Data Protection Regulation ("GDPR") and applies to all users of PixBack, regardless of location.
2. Who We Are (Data Controller)
Data Controller: Gregory Kirkendall, trading as PixBack
Contact: privacy@getpixback.com
For the purposes of GDPR, Gregory Kirkendall is the controller responsible for your personal data described in this Policy.
3. What Data We Collect
We collect the minimum data necessary for the purposes below. We do not collect, store, or have access to the content of your photos or videos — these transfer directly between your local device and your Google Photos account.
3.1 Google Account Profile Data
When you connect your Google account to PixBack via Google OAuth, we retain:
- Your Google account name
- Your Google account email address
This is used solely to identify your account for license management and to associate your purchase with your device authorization.
3.2 Purchase and License Data
When you purchase PixBack, we retain:
- Date and time of purchase
- License key issued to you
- SKU / product identifier of the item purchased
This data is used solely to validate your license, provide support, and manage renewals or upgrades.
3.3 Marketing Preference (Opt-In Only)
If you explicitly opt in during setup or checkout, we retain your email address for the purpose of sending you occasional communications about new PixBack products, features, or services. This is off by default — you must actively check a box to enable it, and you may withdraw consent at any time (see Section 8).
3.4 What We Do Not Collect
We do not collect, store, or transmit:
- The content of your photos or videos
- Your Google Photos album structure or metadata beyond what is transiently necessary to perform the transfer
- Your Google account password (authentication is handled entirely via Google's OAuth flow; we never see or store your password)
- Any data not listed in Sections 3.1–3.3
4. How We Use Your Data
| Data | Purpose | Legal Basis (GDPR Art. 6) |
|---|---|---|
| Name, email (Google profile) | License validation, account identification, customer support | Performance of a contract (Art. 6(1)(b)) |
| Purchase date, license key, SKU | License management, renewals, fraud prevention, support | Performance of a contract (Art. 6(1)(b)); legal obligation for tax/accounting records (Art. 6(1)(c)) |
| Email (marketing) | Sending opt-in product/service updates | Consent (Art. 6(1)(a)) |
We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects on you.
5. Google User Data — Limited Use Disclosure
PixBack's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:
- We access Google Photos data solely to perform the backup/upload functions you direct within the Software.
- We do not use Google user data for serving advertisements.
- We do not allow humans to read Google user data unless we have your affirmative consent for specific messages, doing so is necessary for security purposes, to comply with applicable law, or the data has been aggregated and anonymized.
- We do not transfer Google user data to any third party except as necessary to provide or improve the Software's core functionality, to comply with applicable law, or as part of a merger or acquisition, and only with equivalent privacy protections in place.
6. Data Sharing and Third Parties
We do not sell your personal data. We do not share it with third parties for their independent marketing purposes. We use a limited number of service providers strictly to operate PixBack:
| Third Party | Purpose | Data Involved |
|---|---|---|
| Google (Google Photos API) | Enables the backup transfer you initiate | OAuth token exchange only, at your direction; no storage by us |
| Paddle.com Market Limited | Payment processing, merchant-of-record, tax compliance | Purchase/billing data (Paddle acts as an independent controller for payment data under its own privacy policy) |
| Keygen (license management infrastructure) | Issuing and validating license keys | License key, email, SKU |
We require these providers to handle data securely and only for the purposes described.
7. Data Retention
- License and purchase data (email, name, license key, purchase date, SKU) is retained for as long as your license is active, plus a reasonable period afterward as required for accounting, tax, and legal record-keeping obligations (typically up to 7 years, in line with standard Australian financial record-keeping requirements).
- Marketing opt-in data is retained until you withdraw consent or unsubscribe, at which point your email is removed from marketing communications (we may retain a minimal suppression record to ensure we don't re-contact you in error).
- We do not retain any photo or video content, as none passes through or is stored on infrastructure we control.
8. Your Rights (GDPR)
If you are located in the EEA, UK, or a jurisdiction with similar protections, you have the right to:
- Access — request a copy of the personal data we hold about you
- Rectification — correct inaccurate or incomplete data
- Erasure — request deletion of your data, subject to our legitimate need to retain license/purchase records for legal or accounting purposes
- Restriction — request that we limit processing of your data in certain circumstances
- Portability — receive your data in a structured, commonly used format
- Object — object to processing based on legitimate interests (not applicable here, as we do not rely on this basis) or to direct marketing at any time
- Withdraw consent — for marketing communications, at any time via the unsubscribe link in any email or by contacting us directly
To exercise any of these rights, contact us at privacy@getpixback.com. We will respond within the timeframes required by applicable law (generally one month under GDPR).
You also have the right to lodge a complaint with a supervisory authority in your country of residence if you believe your data has been mishandled.
9. International Data Transfers
Because PixBack is operated from Australia and uses service providers (Google, Paddle, Keygen) that may process data outside your home country, your data may be transferred internationally. Where we transfer personal data from the EEA/UK to countries without an adequacy decision, we rely on appropriate safeguards such as Standard Contractual Clauses, or the transfer mechanisms our service providers (Google, Paddle) have in place under their own GDPR compliance programs.
10. Data Security
We take reasonable technical and organizational measures to protect your data, including:
- Storing license and purchase data in access-controlled infrastructure
- Using OAuth for Google authentication rather than handling your Google password directly
- Limiting data collection to what is strictly necessary (see Section 3.4)
No system is 100% secure, and we cannot guarantee absolute security of data transmitted over the internet.
11. Children's Privacy
PixBack is not directed at children under 16, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Material changes will be communicated through the Software or via email where practicable. The "Last Updated" date at the top reflects the most recent revision.
13. Contact Us
For any questions, requests, or concerns about this Privacy Policy or your personal data, contact:
Gregory Kirkendall privacy@getpixback.com