POVOPrivacy Policy
Last updated: [date]. Contact: [email].
Data we collect
- Hosts: email address; order and payment records (amount, status, Mayar reference).
- Events: event name, date, settings, and uploaded photos with the optional display name a Guest enters and the upload time.
- Guests: an optional display name, kept in the Guest's browser and sent with photos. No account, email or phone number.
- Analytics: anonymous event counts (for example event created, first photo uploaded, upload failed) with a coarse browser family such as "ios-safari". No names, emails, IP addresses or photo content.
- Technical: IP address is used briefly for rate limiting.
- Cookies: one session cookie for signed-in Hosts, and browser local storage for language and guest name. No advertising or third-party tracking cookies.
Purpose
To run the service, process payments, prevent abuse, and understand usage in aggregate.
Who we share data with
Cloudflare (hosting, database, photo storage), Resend (sign-in email), Mayar (payments). We do not sell data.
Who can see photos
Anyone with the event link; that event's Host; and the service operator as described in Terms section 10. Photos are not available at a public address without the event link.
Retention
Photos and event data: deleted automatically 30 days after the event date. Payment records: [how long, per tax and accounting duties]. Sign-in tokens and sessions: expire automatically. Anonymous analytics: [how long].
Photos of other people
Guests and Hosts must make sure people shown in a photo reasonably know it is shared in the event gallery. Contact us to request removal of a photo.
Your rights
Under the Indonesian PDP Law you may request access, correction or deletion of your data, and withdraw consent. Contact [email]. We respond within [timeframe]. A Host can delete photos or the event at any time from the manage page.
Children
The service is not meant for children under [age]. [Review with a lawyer.]
Security
Photos are kept in private storage and reached through long random event links; sign-in tokens and sessions are stored only as hashes. No system is 100% secure.
Changes
Changes are published on this page.