1. Organization and album management
The organization using the installation manages accounts, workspaces, access permissions and album purposes. Before collecting content, the album manager must inform clients and guests about who can access it and how it will be used.
2. Information processed
Accounts store the username, first and last names, language preference, password hash, session information and, when enabled, two-factor authentication information. IP addresses, device/browser information, failed login attempts and session times may be processed for login security.
Album records include album names, card designs and text, files, file names and types, guest names, written and audio wishes, link settings and storage usage.
3. Who can access content?
The workspace owner and authorized members can manage albums within their permissions. Album clients use their assigned username and password to access their album; this does not remove the organization management access.
Recipients of upload or viewing links can access content according to the link settings. Copies downloaded or shared outside the system are independent of it.
4. Activity and security records
Member, album, file, link, design and album limit actions may be recorded with the account or guest/client identity, time and relevant action details. Only the workspace owner can view workspace activity records.
Guests adding content through a QR link may be associated with a guest name and related identifier even without an account. Actions through a username-and-password album link may also be recorded.
5. Retention and deletion
Content is retained according to assigned storage duration and capacity, administrator decisions and user deletion actions. Expiry may lead to deletion of content exceeding capacity; download important copies in advance.
After deletion, access is disabled and storage cleanup completes. Previously issued short-lived download links may work until they expire. The organization should separately explain its own retention and backup practices.
6. Browser data
Cookies support sessions and request security. Necessary browser information may store language preferences, the selected workspace, guest device identity and recovery of interrupted uploads.
Clearing this information may sign you out or affect device access to earlier guest uploads. It does not automatically delete files on the server.
7. Infrastructure
Files and application records are processed in the storage and database selected for the installation. Ask the organization administrator about providers, locations and retention rules.
8. Content and data requests
Send requests about access corrections, content removal, accounts or personal information to the album manager or organization administrator. Identify the relevant album and your request; do not share passwords or verification codes.