Privacy Policy
Last updated: 13 October 2026
This policy explains what personal data Galleria (“we”, “us”) collects when you use our website and services, why we collect it and what rights you have. Galleria is operated from the Republic of Armenia.
1. Who this applies to
Photographers who create an account (“photographers”) and people who view or download a gallery shared by a photographer (“clients”).
For the photos in a gallery, the photographer decides what is uploaded and who receives the link. The photographer is responsible for those photos, and we process them on the photographer’s behalf.
2. Data we collect
Account data: your name, email address, a securely hashed password (or your Google account ID and email if you sign in with Google), your plan, and the studio details you add in Settings (studio name, phone, email, website, Instagram, WhatsApp).
Photos and galleries: the files you upload, their technical data (size, dimensions, capture time from the file), gallery titles, dates and chapters.
Download activity: when a client enters a download code or downloads photos, we record the gallery and code used, the time, the browser type and a one-way hash of the IP address. We never store the raw IP address.
Payment data: Paddle processes payments. We receive the plan, the billing status and Paddle’s customer and subscription IDs. We never receive or store card numbers.
Technical data: our hosting providers keep standard server logs (such as IP address and request time) for security and troubleshooting.
3. Why we use it
To provide the service: your account, storing and showing galleries, sorting photos into chapters, preparing downloads and ZIP files.
To handle subscriptions and payments through Paddle.
To keep the service secure, prevent abuse and fix problems.
To answer your questions and send important messages about your account.
We do not sell personal data, we do not show advertising, and we do not use your photos to train AI models. Automatic sorting runs on our own servers.
4. Cookies
We use only cookies the site needs to work: a login cookie that keeps you signed in, a temporary cookie during Google sign-in, a cookie that remembers a client’s download code for a gallery (30 days), and a cookie that remembers your light or dark theme. We do not use advertising or tracking cookies.
5. Who processes data for us
We use trusted providers to run the service. They process data only to provide their service to us:
Railway (application hosting and job queue, USA), Neon (database, USA), Cloudflare R2 (photo storage), Paddle (payments and invoices, Merchant of Record), Google (only if you choose “Continue with Google”), Google Fonts (fonts loaded by your browser).
Some providers are located outside Armenia and outside your country. We rely on their standard contractual safeguards for these transfers.
6. How long we keep data
Account data and galleries: as long as your account exists.
Photos you delete: removed from storage straight away.
ZIP files: deleted automatically 30 days after they are prepared.
Download activity: kept while the gallery exists.
Payment records: kept as long as tax and accounting laws require.
When an account is deleted, its galleries, photos and personal data are deleted, except records we must keep by law.
7. Your rights
You can ask us to access, correct, export or delete your personal data, or object to its processing. Most data can be changed in Settings, and photos and galleries can be deleted from your dashboard. For anything else, write to us; we answer within 30 days.
Clients who want photos of themselves removed from a gallery should first contact the photographer who shared it. If that is not possible, write to us.
8. Security
Connections are encrypted (HTTPS), passwords are stored only as secure hashes, galleries are reachable only through their link, and access to our systems is limited. No system is perfectly secure, but we work to protect your data and will inform affected users of a serious breach.
9. Children
Accounts are for adults (18 or older). Galleries may contain photos of children, for example from a birthday or a newborn shoot; the photographer is responsible for having the parents’ permission to upload and share them.
10. Changes
We may update this policy. The date at the top shows the latest version. For important changes we will notify photographers by email or in the dashboard.
Questions about this page? Write to us: support@imagegallery.ai