Privacy Policy

This Privacy Policy describes how Snappora ("we", "us", "our") collects, uses, and shares information when you visit www.snappora.com, use our QR-card photo album service, or interact with our team via Instagram or email.

1. Information we collect

Information you give us

• Event details — couple names, event date, venue, guest count, and any branding preferences you share when requesting a quote or setting up an album.
• Contact information — name, Instagram handle, email address, and any messages you send us.
• Payment information — handled by our payment processors (Xendit in Indonesia, PayPal internationally); we never store card numbers on our servers.

Information from your guests

• Photos and video wishes uploaded by guests to your event album. These are stored on your behalf as the event host.
• Device metadata attached to media (timestamp, format). Location data is never displayed in albums; original files may retain the metadata the camera embedded, so downloads can include it.

Information collected automatically

• Standard server logs (IP address, browser type, pages viewed) for security and analytics.
• Cookies limited to what the service needs to work: your sign-in session, a short-lived upload-security check for guests, and language preference. We set no advertising or cross-site tracking cookies. You can disable cookies in your browser; signing in and uploading may stop working.

2. How we use information

• To provide and operate the Snappora service (hosting your album, generating QR cards, delivering downloads).
• To respond to your messages and provide customer support.
• To send transactional updates (event reminders, quote confirmations, download links).
• To improve the service through aggregate, non-identifying analytics.
• To comply with legal obligations and protect against fraud or abuse.

We do not sell your personal information. We do not use guest-uploaded photos for marketing without explicit written permission.

3. How we share information

We share information only with:

• Service providers — media storage and processing (Cloudinary), database hosting (Neon), deployment infrastructure (Vercel), transactional email (Resend), realtime updates (Ably), error monitoring (Sentry), bot protection (Cloudflare), and payment processors (Xendit, PayPal) — strictly to operate the service.
• You and your event team — within the album dashboard, in accordance with the permissions you set.
• Authorities — when required by Indonesian law, court order, or to protect rights, safety, and property.

4. How long we keep information

• Active albums — for the album period included in your package (3, 6, or 12 months from the event date, depending on the tier).
• Downloaded ZIPs — share links remain active per your plan; raw files stay accessible to you via dashboard download for the album lifetime.
• Account & billing records — retained as required by Indonesian tax and accounting law (typically 10 years).

You can request earlier deletion of your album and related personal data at any time — see Section 6.

5. Security

We use industry-standard practices to protect your data, including HTTPS in transit, encryption at rest with our cloud providers, private unguessable album links, login-protected dashboards, and two-factor authentication for operator accounts. No system is 100% secure; you remain responsible for keeping your account credentials confidential.

6. Your rights

Subject to Indonesian Personal Data Protection Law (UU PDP No. 27/2022) and applicable regulations, you may:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data (subject to legal retention requirements).
• Withdraw consent for processing not required for the service.
• Export your album content as a ZIP at any time.

To exercise these rights, email privacy@snappora.com — see Section 8.

7. International transfers

Some of our service providers operate servers outside Indonesia. By using Snappora, you consent to your information being transferred to and processed in those jurisdictions, which may have different data-protection laws than your home country.

8. Contact

9. Changes

We may update this policy from time to time. Material changes will be announced at the top of this page. The "Last updated" date at the top reflects the most recent revision.