Protection of Personal Data

Last updated: 2026-05-12

1. Introduction

Your privacy matters to us. This document explains how Picvelo collects and protects personal data. We process data in accordance with the General Data Protection Regulation (GDPR). By using Picvelo, you agree to the practices described below.

2. What Data We Collect

We collect only the data necessary to provide our service:

Photographer accounts

• Login, email address, and password
• First and last name (optional)
• Payment information processed securely by Stripe — we never store your card details

Client accounts

• Gallery access credentials set by the photographer
• Name and email address
• Photo selections and activity in the gallery
• Session notes added by the photographer

Automatically collected data

• IP address, browser type, and operating system
• Activity logs (logins, gallery actions)
• Cookies (see section 5 below)

3. How We Use Your Data

We use your data to:

• Provide the service — create accounts, manage galleries, and deliver photos to clients
• Keep your account secure and prevent unauthorized access
• Send you important notifications about your galleries
• Process payments and manage your subscription
• Improve the service through anonymous usage statistics

4. How We Protect Your Data

We take security seriously. Email addresses are encrypted, passwords are securely hashed and never stored in plain text. All forms are protected against cross-site attacks, and we use secure HTTP headers and session management. Login attempts are rate-limited to prevent brute-force attacks.

5. Cookies

Cookies are small text files stored on your device that help us provide a better experience. We use the following types:

• Essential: Keep you logged in and protect your session. These are required for the service to work.
• Language: Remember your preferred interface language.
• Analytics: Help us understand how the service is used. Only activated with your consent.
• Marketing: Currently not in use. Will only be activated with your explicit consent.

You can change your cookie preferences at any time using the cookie settings at the bottom of the page.

6. Who We Share Data With

We do not sell your personal data. We only share it when necessary: with Stripe for payment processing, with our email provider for system notifications, and with authorities if required by law.

7. Your Rights

Under GDPR, you can:

• View all personal data we hold about you
• Correct any inaccurate information
• Request deletion of your data
• Restrict how we process your data
• Export your data to another service
• File a complaint with your local data protection authority

8. How Long We Keep Your Data

We keep your data only as long as needed. Account data is stored until you delete your account. Activity logs are kept for 12 months. Billing records are retained as required by tax regulations.

9. Changes to This Policy

We may update this policy from time to time. If we make significant changes, we will notify you through the service. Continuing to use Picvelo after changes means you accept the updated policy.

10. Contact Us

Have questions about your data? Reach out to us at: support@picvelo.com