Privacy Policy

1. Introduction

This Privacy Policy explains what personal information Snaploom (“we,” “us,” “our”) collects when you use snaploom.net, its camera pages, galleries and dashboard (the “Service”), why, who we share it with, and the choices you have. Snaploom is run by Siddhartha Dwivedi in Lalitpur, Bagmati, Nepal, who is the data controller for creators' account data.

Snaploom has two kinds of users. Creators have an account and run camera pages. Guests open a creator's camera page from a link or QR code, with no account. For the photos guests upload, the creator decides how they are used, and we process them on the creator's behalf.

2. Summary

• Guests do not sign up. A photo is sent only when the guest taps to upload it.
• Uploaded photos go to the creator who runs the page, and are stored for them.
• We do not sell personal information, show ads, or use photos to train AI.
• We use a small set of service providers to host, email, take payments and fix errors (section 6).
• Creators can download their photos and delete their account at any time.
• Questions or requests: support@snaploom.net.

3. Information We Collect

From creators

• Account details: name, email address, and a password (stored only as a secure hash by our authentication provider). If you sign in with Google, we receive your name, email address and profile picture from Google.
• Camera pages: page names and addresses, themes, colours, fonts, logos, captions, settings such as moderation, public galleries, event close times and webhook URLs.
• Photos: photos captured and uploaded on your pages, including by your guests.
• Billing: your plan, amounts, currency, discount codes, referrals and receipts. For QR or bank payments, the transaction reference you enter. Card payments are handled by our payment processor: we receive confirmation that you paid, never your card number.
• Messages: what you send us through the contact form or by email, and your email preferences (for example, if you unsubscribe from product emails).
• Consent record: the date and version of the Terms you accepted at sign-up.

From guests

• Photos you upload. Photos stay on your phone until you tap to upload. Once uploaded, a photo is stored for the creator of that page and can be seen by them, and by anyone they share it with or if they publish their gallery.
• A device identifier and your IP address, used only to limit how many photos one phone or network can upload per minute, so one person cannot flood an event. These rate-limit entries expire within hours.
• Your choice on the welcome screen, saved in your browser so we do not ask again on that page.

We do not ask guests for a name, email or phone number, and we do not use face recognition or any other biometric processing on photos.

From everyone, automatically

• Usage and device data: pages visited, clicks, scrolls, browser, device type, country and referring page, through third-party analytics, only if you accept them on our cookie banner (section 6 and our Cookie Policy).
• Error reports: when something breaks, technical details of the error and browser are sent to our error-monitoring provider. They do not include photos, session recordings, or names and emails.
• Server logs: our hosting provider records requests, including IP address, for security and troubleshooting.
• Counts: an anonymous tally of photos captured per page and in total, which identifies no one.

4. How We Use Information

• To run the Service: accounts, camera pages, polaroid rendering, galleries, embeds and webhooks.
• To take and confirm payments, apply discounts and referrals, issue receipts and handle refunds.
• To send service emails: sign-in codes, plan confirmations and reminders, storage and photo-removal notices, and alerts about photos waiting for review.
• To send occasional product news and offers to creators, which you can stop at any time with the unsubscribe link in each email.
• To answer support requests and messages.
• To keep the Service secure: prevent abuse, spam, fraud and attacks, and fix errors.
• To understand how the Service is used and improve it.
• To meet legal, tax and accounting obligations.

5. Legal Bases for Processing (GDPR)

If you are in the European Economic Area, the United Kingdom or Switzerland, we rely on these legal bases:

• Contract: to provide the account, pages, storage and plans a creator signs up for.
• Legitimate interests: to secure the Service, rate-limit uploads, fix errors and send creators product news, where these interests are not overridden by your rights.
• Consent: for third-party analytics, which run only if you accept them on our cookie banner, and anywhere else we ask for it. You can withdraw consent at any time, on the Cookie Policy page for analytics, without affecting earlier processing.
• Legal obligation: to keep records the law requires, such as payment records.

For guest photos, the creator of the camera page is the controller and is responsible for their own legal basis for collecting photos at their event; we act as their processor. We collect only what the Service needs, keep it no longer than necessary, and protect it as described in section 9.

6. Who We Share Information With

We do not sell or rent personal information. We share it only with the creator a guest's photo belongs to, and with service providers that work on our behalf, each only for its job and bound to protect the data:

We may also share information:

• Where a creator chooses: a public gallery or embed shows that page's photos to anyone with the link, and a webhook sends photo details to the address the creator sets.
• When required by law, or to protect the safety and rights of guests, creators, the public or Snaploom.
• In a business transfer, if Snaploom is sold or merged; the new owner would be bound by this policy.

Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

7. International Data Transfers

Snaploom is run from Nepal, and our providers store and process data in other countries, including the United States and the European Union. When personal data from the EEA, UK or Switzerland is transferred to a country without an adequacy decision, we rely on our providers' Standard Contractual Clauses or another safeguard the law recognises. Ask us at support@snaploom.net for details.

8. How Long We Keep Information

• Accounts are kept until you delete them. An account that is never confirmed is removed after 24 hours.
• Photos are kept until the creator deletes them or their account, within their plan. Photos taken during an Event pass are removed 90 days after the creator's last paid plan ends, after two email warnings (see the Terms, section 15).
• Deleting an account immediately removes its profile, pages, photos and billing records from our live systems. Copies in backups are overwritten on their normal cycle, within 90 days.
• Rate-limit entries expire within hours; error reports and analytics are kept for the periods those providers set, no longer than about a year.
• Emails you send us are kept as long as needed to help you and keep a record of the conversation.

9. How We Keep Information Safe

Data is encrypted in transit (HTTPS). Database rules keep each creator's pages, photos and billing separate, so one account cannot read another's. Uploads are rate limited, photo files are checked before they are stored, and only Snaploom's administrator can see accounts in the admin tools. No system is perfectly secure; if a breach affects your personal information, we will tell you and the relevant authorities as the law requires.

10. Children

Creator accounts are for people 18 and over, and we do not knowingly create accounts for children. Guests of any age may appear in or take photos at events; the creator running the event is responsible for any parental consent it needs. If you believe a child's information or photo should be removed, contact us at support@snaploom.net and we will act on it promptly.

11. Your Rights

Depending on where you live, and in particular under the GDPR and UK GDPR, you have the right to:

• Access the personal information we hold about you, and get a copy;
• Correct information that is inaccurate or incomplete;
• Delete your information (creators can delete their account in the dashboard);
• Restrict or object to certain processing, including product emails;
• Portability: receive your data in a common format (creators can download all their photos from the gallery);
• Withdraw consent at any time, where we rely on it; and
• Complain to your data protection authority.

We do not make automated decisions that have legal or similarly significant effects on you.

Guests: your photo belongs to the creator's event, so please ask the creator first to remove or share it. If they do not respond, or you cannot reach them, contact us and we will help.

California and other US states

Residents of California and other states with privacy laws have the right to know what personal information we collect and how we use and share it, to access, correct and delete it, and not to be treated differently for using these rights. In the last 12 months we collected the categories described in section 3: identifiers (name, email, IP address), commercial information (plans and payments), internet activity (usage data), and photos. We do not sell or share personal information for cross-context behavioural advertising, and we honour Global Privacy Control signals as a request not to.

Financial incentives. Our referral programme and discount codes are offers tied to your account: a referral links your account to the friend who signed up through your invite. Taking part is optional, and you can stop at any time by not sharing your link or contacting us.

How to use your rights

Email support@snaploom.net from the address on your account. We may ask you to confirm it is you. We reply within 30 days, and will tell you if we need longer. If we decline a request, you can ask us to reconsider by replying to that email.

12. Changes to This Policy

We will update this policy when the Service or the law changes, and change the date at the top. If a change is material, we will tell creators by email or in the dashboard before it takes effect.

13. Contact Information

For questions about privacy or this policy, contact:

Snaploom
Siddhartha Dwivedi
Lalitpur, Bagmati, Nepal
Email: support@snaploom.net