Privacy policy

For host account data and platform operations, PhotoChapter is the controller. For event content and attendee data uploaded by a host or guests, the event host generally decides why that data is used and is the controller; PhotoChapter processes it to provide the service. Contact us at [email protected]. The publisher identity and address in the legal notice must be completed before public launch.

We process account and contact details, event settings, guest display names, photos and videos, technical logs, security data, cookies, and payment status. Do not upload special-category data or content about people without a lawful basis.

We use data to create and operate events, authenticate users, store and deliver media, prevent abuse, provide support, meet legal duties, and protect our service. The legal bases are contract performance, legal obligations, our legitimate interests in security and service operation, and consent where required (for example, optional cookies or marketing).

Access is limited to authorised PhotoChapter personnel, the relevant host and guests according to the event settings, and vetted service providers. Media is stored in private object storage and is delivered through time-limited links. See the Subprocessors page for the current list and transfer safeguards.

We retain data only for as long as needed to run the event, meet contractual and legal duties, resolve disputes, and protect the service. Hosts can request deletion of an event; legal, security, and accounting records may be retained where required. Retention periods must be published before launch.

You may request access, rectification, erasure, restriction, objection, portability, or withdrawal of consent where applicable by emailing [email protected]. We may need to verify your identity. You may also lodge a complaint with the French data-protection authority, the CNIL.