Privacy Policy

1. Data Controller

Cloud Ninja Consulting ApS
VAT number: DK46044118
Eventfoto.it is the data controller for the processing of personal data collected through the service.
Contact: support@eventcam.dk

2. What information do we collect?

• Host and event details: host email address, event name, event code, private host token, selected locale, opening time, plan, and any optional event access code.
• Uploaded content: photos, videos, optional cover image selections, and metadata such as file type, size, upload time, and optional guest name.
• Guest session identifiers: an anonymous session id used to keep uploads tied to the same guest device and to enforce plan limits.
• Payment and billing references for paid plans: Stripe session, customer, payment intent, and invoice references needed to activate and document the purchase.
• Access and login data: dashboard/admin authentication sessions, event unlock cookies for PIN-protected events, and host verification cookies for download/admin actions.
• AI tagging output for paid plans: if a paid event uses AI tagging, image-derived tags are stored on the upload records.

3. Purpose of processing

• To create and operate the event, including guest uploads, gallery access, QR sharing, host login, downloads, and cover management.
• To enforce plan rules, rate limits, PIN protection, and host verification for sensitive actions.
• To send transactional emails such as confirmation emails, login links, download codes, receipts, and first-upload notifications.
• To process payment, activate paid features, and retain the references needed for accounting and support.
• To generate image tags for paid events where AI tagging is enabled.

4. Retention and deletion

The live product currently sets event expiry from the selected plan, not from a separate user-chosen retention period.

• Free plan: event expiry is currently set to 7 days.
• Paid plan: event expiry is currently set to 180 days.

When an event has expired, it is treated as closed in the service and uploads stop working normally. You should not rely on storage beyond the expiry date and should download any content you need before then.

We may delete expired events, uploaded files, cover assets, and related event records as part of operational cleanup or manual support/admin deletion. Deleted content cannot be restored.

Host email addresses and service metadata are kept for as long as needed to operate the event and handle support. For paid purchases, billing references may be retained longer where required for bookkeeping or by our payment provider.

5. Sharing with third parties

We do not share your information with third parties except the following data processors:

• Supabase Inc. – database, authentication, and file storage.
• Vercel Inc. – application hosting and delivery.
• Brevo – transactional emails such as confirmations, login links, and notifications.
• Stripe – payment processing, invoices, and payment-related metadata for paid plans.
• OpenAI – image tagging for paid events when AI tagging is used.
• Google – consent-based website analytics through Google Analytics 4 if you accept analytics cookies.

6. Legal basis

We process personal data because it is necessary to provide the service you request, secure the platform against abuse, handle paid purchases priced at USD 15 on the current brand, and comply with applicable legal obligations.

7. Your rights

You have the right to access, rectification, erasure, and data portability. Contact us at support@eventcam.dk to exercise your rights.

You may also lodge a complaint with the Danish Data Protection Agency (Datatilsynet).

8. Cookies and browser storage

We use necessary cookies and related browser storage needed for login, event unlocking, host verification, and guest session continuity. If you consent, we also load Google Analytics 4 for anonymized traffic measurement. We do not use advertising cookies or marketing pixels.