getgatherqr← GetGatherQR

GETGATHERQR · INFORMATION & SUPPORT

Privacy policy

What we collect, why we use it, and how you can ask for help with your data.

1. Who is responsible

Rienda Rahmawati, based in Indonesia, operates GetGatherQR and is responsible for the personal information we process to provide it. Contact support@getgatherqr.com for privacy questions or requests.

2. Information we process

  • Account information provided through email or Google sign-in, including your email address, account identifier and profile information returned by the sign-in provider.
  • Album names, dates, sharing settings, photos, optional captions and records connecting content to its album.
  • Technical information necessary to operate and secure the service, such as IP addresses, request times, browser information, authentication sessions, errors and abuse-prevention counters.
  • Support messages and, when purchases are enabled, payment transaction identifiers, purchase status and entitlement dates. Polar collects payment information directly; our application does not store full payment card numbers.

3. Why we use information

We use information to create and manage accounts and albums, authenticate hosts, accept uploads, display photos according to sharing settings, provide downloads, activate purchased access, answer support requests and prevent abuse. Where data protection law requires a legal basis, these purposes rely on performing our service contract, legitimate interests in security and support, legal obligations, or consent where required.

4. Who can see photos

Hosts can access their albums. Anyone with an enabled guest link can open the guest page and can see the gallery if the host allows it. This is link-based sharing, not an invitation-only identity check. Guests and hosts may download and keep copies. Please obtain appropriate permission before sharing photos of other people, especially children.

Photos are stored in private object storage and delivered using temporary signed links. Links already issued may remain valid for up to 10 minutes after a host changes access. Uploaded images are resized and converted to JPEG without embedded EXIF metadata.

5. Service providers and international processing

We use Supabase for authentication, database and photo storage, Vercel for application hosting, Google if you choose Google sign-in, and Polar for checkout when enabled. These providers process information needed for their services. Information may be processed outside your country, including by the operator in Indonesia and by our providers in their service regions. Applicable transfer safeguards must be used where required by law. We may also disclose information when legally required or necessary to protect users and the service. We do not sell your photos or personal information.

6. Browser storage

Browser storage is used to remember your language, maintain sign-in and keep album references or authentication flow information. Authentication and payment providers may use cookies or equivalent storage for their own flows. Clearing site storage may sign you out and remove locally remembered album references. GetGatherQR does not currently add advertising trackers or marketing analytics.

7. Retention and deletion

Free album access lasts 7 days from creation; paid album access lasts 12 months from activation. Album content is eligible for automated permanent deletion 30 days after the applicable access period ends. A host can delete an album sooner. Account information remains until account deletion is requested, subject to identity verification and any necessary security or legal retention.

Support, security and transaction records are retained only as needed for their purpose and applicable obligations. Copies in provider backups may remain until those backups expire. Deletion from GetGatherQR does not remove copies downloaded by other people or records Polar must retain independently.

8. Your choices and requests

Hosts can change sharing settings and delete albums. Depending on applicable law, you may request access, correction, deletion, a portable copy, restriction or objection, withdraw consent where processing relies on it, or complain to your data protection authority. Email support with enough information to locate the album or account; we may verify your identity or authority before acting. If you appear in a guest photo, contact the host or our support team. Do not email passwords, card details or identity documents unless a secure verification process is specifically arranged.

9. Updates

We will update this page when our data practices change and communicate material changes through available contact details where appropriate. The date above identifies this version.