Privacy Policy

What we collect. Couple accounts: email, name, and password (stored hashed). Guests: the photos, videos, voice notes, and messages they choose to share, an optional name, and standard technical logs (IP address, used only for abuse prevention and rate limiting).

Why. Solely to provide the service — collecting your event's media and showing it to you and the people you share your gallery with. We do not sell data or use it for advertising.

Where. Media is stored in Amazon S3 (EU, Ireland region) and metadata in a Neon PostgreSQL database. Sub-processors: Amazon Web Services (storage), Neon (database), Vercel (hosting), Stripe (payments), Upstash (rate limiting). All access to media is via expiring signed links; galleries are protected by an access code chosen by the couple.

Roles. For guest-uploaded content, the couple is the data controller and OurCandids the processor. Guests should direct requests about their content to the couple, who can delete any item from their dashboard; we also honour deletion requests sent to us directly.

Retention. Media is kept for the gallery period included in the event's plan and then permanently deleted from storage. Account data is deleted on request.

Your rights. Under GDPR you can request access, correction, deletion, or a copy of your data at any time — contact us at the support address shown on the site.

Draft — this page must be reviewed by a legal professional before commercial launch.