Privacy Policy
Last updated 15 July 2026
1. Who we are
Snaptagious ("we", "us") provides an event photo-sharing platform: hosts create an event and guests join via a QR code to add photos, videos and audio to a shared gallery.
The data controller is Deep Sukhman Singh, a sole trader based in the United Kingdom, registered with the UK Information Commissioner's Office under registration number ZC196459. A postal address is available on request. For any privacy matter, contact privacy@snaptagious.com.
When a business host (e.g. a company or club) runs an event, that host is the controller of their guests' data and we act as their processor; we are the controller for our own account and billing data.
Children.Some events — youth sports especially — involve photos of children. Where an event involves children, the host organising it (the club, school, coach or parent) is the controller responsible for having the appropriate consent to photograph and share those images; we process that content on the host's behalf to provide the gallery. A parent or guardian who wants a child's image removed can ask the host, or contact privacy@snaptagious.com and we'll help.
2. What we collect
- Host account details (name, email) via email, one-time code, Google or Apple sign-in.
- Event details a host creates (name, type, date, branding).
- Guest details entered on joining (name, optional phone number and/or email).
- Photos, videos and audio that guests upload to a gallery.
- Payment details are entered directly with Stripe; we never see or store card numbers.
- Basic technical/usage data needed to run and secure the service.
3. Legal bases (UK & EU GDPR)
- Contract — to operate the event and gallery a host has signed up for.
- Consent — for optional marketing/SMS. Consent can be withdrawn at any time.
- Legitimate interests — to secure the platform, prevent abuse, and moderate content for safety.
- Legal obligation — to meet tax, accounting and other statutory duties.
4. How we use information
To run the gallery; moderate uploads for safety using automated AI review; run opt-in features such as the scavenger hunt; process payments; and send event-related messages such as a gallery-expiry reminder. Automated moderation may hide unsafe content; it does not produce legal or similarly significant effects, and a host can review decisions.
5. Data retention & deletion
- Gallery media — deleted when the event gallery expires (the period set by the host's package).
- Guest records — removed with the event on expiry.
- Host account & billing records — kept while the account is active and as needed for legal/accounting duties, then deleted.
Hosts and guests may request earlier deletion at any time (see §8).
6. Sub-processors we use
We share data only with the providers below, each under a data processing agreement and only as needed to run the service:
| Provider | Purpose | Region |
|---|---|---|
| Supabase | Database & authentication | EU |
| Cloudflare R2 | Photo/video/audio storage & delivery | EU/Global |
| Vercel | Application hosting | Global (US) |
| OpenAI | Automated photo moderation | US |
| Stripe | Payments | Global (US) |
| Twilio | SMS / WhatsApp messages | Global (US) |
| Resend | US | |
| Gelato | Photo-book & print fulfilment (name + address) | EU |
7. International transfers
Some providers process data outside the UK/EU (notably in the US). Where they do, transfers are protected by UK/EU Standard Contractual Clauses, the UK International Data Transfer Addendum, and/or the EU-US Data Privacy Framework, as applicable.
8. Your rights
You have the right to access, correct, delete, restrict or object to the processing of your personal data, to data portability, and to withdraw consent at any time. Exercise any of these by emailing privacy@snaptagious.com.
If you are unhappy with how we handle your data you can complain to the UK Information Commissioner's Office (ico.org.uk), or your local EU supervisory authority.
9. Security
Data is encrypted in transit; access is restricted; a guest sees only their own uploads. We use reputable, security-certified providers (see §6). No system is perfectly secure, but we take reasonable measures to protect your data.
10. Cookies
We use only essential cookies needed to sign you in and keep your session — no advertising or third-party tracking cookies.
11. Changes & contact
We may update this policy; the "last updated" date above shows the latest version. Questions or requests: privacy@snaptagious.com.