1. Introduction

This Privacy Policy describes the policies and practices of 36Pix Inc. (“36Pix”, “we”, “us”, “its”, or “our”) regarding the handling of images and limited business information in connection with the image processing services we provide.

36Pix provides commercial image processing services to professional photography businesses. Our services include, but are not limited to:

• Color correction 
• Background removal 
• Glasses glare correction 
• Facial shine correction 
• Cropping and other image enhancements 

36Pix does not provide photography services directly to schools, parents, or individual students.

36Pix is committed to safeguarding all data entrusted to us and to operating in accordance with industry best privacy practices and laws as applicable.

2. Scope of This Policy

This Privacy Policy applies to:

• Images submitted to 36Pix by its commercial clients for processing 
• Limited business contact information related to our clients 
• Information collected through our website and business systems 

This Policy does not apply to:

• Data collection practices of our clients 
• Photography activities performed by third parties 
• Online storefronts operated by our clients

3. Nature of the Data We Receive

36Pix receives digital image files from its commercial clients.

These images may contain photographs of individuals (including students), but:

• 36Pix does not collect the images directly from individuals. 
• 36Pix does not receive student names, student IDs, grades, or other identifying metadata. 
• File names are not used for identification purposes. 
• 36Pix does not require or request personal information to perform its services. 

Images are processed solely to apply contracted image enhancement services and are returned to the client.

4. Client Business Information

36Pix maintains limited business information necessary to operate its services, such as:

• Company name 
• Business contact name 
• Business email address 
• Business phone number 
• Billing information 

This information is used strictly for account management, service delivery, and invoicing purposes.

5. Role of 36Pix

36Pix acts solely as a service provider / data processor to its commercial clients.

• We process images strictly according to client instructions
• We do not determine the purpose or means of image collection
• We do not use images for independent commercial purposes
• We do not sell, rent, or disclose images to third parties

Our clients remain responsible for obtaining any required consents from individuals appearing in the images.

6. Image Retention and Deletion

For standard image processing services:

• Images are retained for a maximum of fourteen (14) days after receipt
• This retention period allows clients to review, request revisions, or re-download processed images  
• After 14 days, images are permanently deleted and are not recoverable

7. Data Security

36Pix uses commercially reasonable technical and organizational safeguards to protect data against unauthorized access, disclosure, alteration, or destruction.

Security measures include:

• Secure file transfer protocols (SFTP) 
• HTTPS encryption across all websites and management systems 
• Secure cloud hosting environments (including AWS infrastructure) 
• Firewall protection and access controls 
• Role-based access restrictions 
• Password-protected systems 
• Regular monitoring of system access 

While no method of transmission or storage is 100% secure, we maintain industry-standard safeguards appropriate to the nature of the data we process.

8. Data Breach Notification

In the event of a confirmed security breach affecting client-submitted images or business information, 36Pix will:

• Promptly investigate the incident 
• Notify affected clients without undue delay 
• Provide relevant information to support their compliance obligations

9. Website Data

When visiting our website, we may collect limited non-personal information such as:

• IP address 
• Browser type 
• Pages visited 
• Basic usage statistics 

This information is used for security monitoring and site improvement purposes only.

10. Cookies

Our websites may use essential cookies necessary for functionality and secure login sessions.

We do not use cookies for behavioral advertising or profiling.

Users may disable cookies in their browser settings; however, certain site features may not function properly.

11. Google Analytics (with anonymization function)

Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. Google uses the data collected to track and monitor the use of our Service. This data is shared with other Google services. Google may use the collected data to contextualize and personalize the ads of its own advertising network.

You can opt-out of having made your activity on the Service available to Google Analytics by installing the Google Analytics opt-out browser add-on. The add-on prevents the Google Analytics JavaScript (ga.js, analytics.js, and dc.js) from sharing information with Google Analytics about visits activity.

For more information on the privacy practices of Google, please visit the Google Privacy & Terms web page: https://policies.google.com/privacy?hl=en

12.  reCAPTCHA

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

13. Disclosure of Information

36Pix does not sell, rent, or trade images or business information.

We may disclose limited information:

• To cloud service providers necessary for hosting and secure storage 
• When required by law, court order, or lawful governmental request

14. Data Minimization

36Pix follows principles of data minimization:

• We only receive images necessary to perform contracted services
• We do not request or collect unnecessary metadata
• We retain data only for the time required to complete the service

15. Children’s Data

36Pix does not directly collect data from children.

Any images containing minors are submitted by our commercial clients. 36Pix processes such images solely as a service provider acting under client instructions.

16. International Data Transfers

36Pix may use secure cloud infrastructure located in the United States or other jurisdictions appropriate for service delivery.

All transfers are conducted using encrypted channels and secure hosting environments.

17. Changes to This Policy

Effective Date: February 17, 2026

36Pix may update this Privacy Policy from time to time. The updated version will be posted on our website with a revised effective date.

18. Contact Information

For questions regarding this Privacy Policy, please contact us at:

36Pix Inc. 
9350 de l’Esplanade Ave.
Montréal, QC H2N 1V6
1-514-448-7788
info@36pix.com