GDPR Information

1. Controller

Cloudivex LLC, doing business as ImageAlbums, is the controller for personal data processed through ImageAlbums unless a separate written agreement says otherwise.

For privacy or GDPR requests, email [email protected].

2. Personal Data We Process

• Account data such as name, email address, password hash, plan, role and sign-in method.
• Album data such as photos, captions, album titles, descriptions, public slugs, templates and design settings.
• Guest album claim tokens used to connect a temporary album to an account.
• Operational data such as view counts, storage usage, security logs and error information.
• Support, copyright and abuse report information that you choose to send us.

3. Lawful Bases

• Contract: to create accounts, host albums, display galleries and provide dashboard features.
• Legitimate interests: to secure the service, prevent abuse, debug issues and improve product reliability.
• Consent: where a feature asks for optional permission.
• Legal obligation: where we must preserve, disclose or remove data to comply with applicable law.

4. GDPR Rights

Where GDPR applies, you may have the right to:

• Be informed about how your personal data is used.
• Access personal data we hold about you.
• Correct inaccurate or incomplete personal data.
• Request deletion of personal data, subject to limited exceptions.
• Restrict processing in certain situations.
• Receive portable data that you provided to us.
• Object to processing based on legitimate interests.
• Avoid decisions based only on automated processing that legally or similarly significantly affect you.

5. How to Make a Request

Email [email protected] with the subject line "GDPR Request". Include the email address connected to your account and describe what you want us to do.

We may ask for information to verify your identity. We aim to respond within one month where GDPR applies. If a request is complex or we receive many requests, we may take longer where the law allows and will explain the delay.

6. Retention

Registered account and album data is kept while the account remains active. Guest albums remain active for 10 calendar days and are archived if unclaimed. Support, report, backup and security records may be retained as needed for legal, safety, dispute or operational reasons.

7. International Transfers and Processors

ImageAlbums may use infrastructure, database, object storage, authentication and support providers located outside your country. Where required, we use appropriate safeguards for international transfers and limit provider access to what is needed to operate the service.

8. Security and Complaints

We use safeguards such as HTTPS, password hashing, HTTP-only cookies, access controls and restricted admin tooling. No system is perfectly secure, so please use strong passwords and share album links carefully.

If you believe we have not handled your request properly, you may contact us again or complain to your local data protection authority.