Snapvyn Privacy Policy

1. Scope of This Privacy Policy

This Privacy Policy applies to event hosts, guests, uploaders, website visitors, support contacts, and individuals whose names, likenesses, or personal data appear in uploaded event content.

It covers Snapvyn’s website, event pages, galleries, QR-linked upload flows, dashboards, AI features, and related support channels. It does not apply to third-party sites or services that Snapvyn does not own or control.

2. Key Definitions

• Personal Data includes information that can identify a person directly or indirectly, such as names, email addresses, phone numbers, images, videos, device data, account details, location data, and uploaded content containing identifiable people.
• Event Host means the person, couple, planner, organization, company, hotel, photographer, or representative who creates or manages an event on Snapvyn.
• Guest means a person who scans a QR code, opens an invite link, views a gallery, uploads content, or otherwise interacts with an event on Snapvyn.
• Uploaded Content includes photos, videos, captions, comments, guestbook entries, audio, and other files submitted through the platform.
• AI Features means optional tools that help generate albums, highlight reels, stories, slideshows, or other auto-curated outputs.

3. Information We Collect

Snapvyn may collect information provided by event hosts, including account details, contact information, event names, dates, locations, descriptions, branding, privacy settings, billing details, and support requests.

When guests access an event or upload content, we may collect names, email addresses, phone numbers, consent responses, uploaded media, captions, comments, QR or invite references, upload timestamps, and device or browser details.

We also collect media-related metadata such as file names, file sizes, formats, upload dates, and sometimes camera or device metadata. Uploaded media can include people who did not personally upload the file.

• Technical and usage data can include IP address, browser type, device type, operating system, referring pages, pages visited, upload and login activity, QR scan activity, approximate location from IP, error logs, security logs, cookies, and similar technologies.
• Payment and transaction data can include customer name, billing email, billing phone number, plan type, invoice details, transaction reference numbers, payment dates, payment amounts, and payment status.
• Support information can include names, contact details, messages, screenshots, attachments, issue details, and communication history.

4. How We Use Personal Data

• To create and manage event pages, QR codes, invite links, galleries, downloads, dashboards, and album delivery features.
• To apply host-selected privacy, moderation, download, retention, and visibility settings.
• To store, compress, resize, preview, optimize, sort, moderate, export, and secure uploaded media.
• To provide optional AI-assisted outputs such as highlight reels, stories, slideshows, and auto-curated albums.
• To communicate with users about accounts, support, billing, security, event setup, gallery status, and service updates.
• To improve performance, detect abuse, prevent unauthorized access, troubleshoot issues, and maintain platform security.
• To comply with legal obligations, investigate fraud or harmful activity, enforce our terms, and protect users and the public.

5. Legal Basis for Processing

Where applicable under Sri Lankan data protection law and other relevant privacy laws, Snapvyn processes personal data based on consent, performance of a contract or requested service, legitimate interests, compliance with legal obligations, protection of vital interests, public interest, or another lawful basis recognized by applicable law.

Event hosts and uploaders are also responsible for making sure they have the rights, permissions, or lawful basis needed to upload, share, display, or process event content.

6. Guest Consent and Host Responsibilities

• Hosts should tell guests that Snapvyn is being used for event photo and video collection.
• Hosts should explain whether a gallery is public, private, moderated, downloadable, or shared.
• Hosts should display or share QR codes responsibly and use moderation tools when appropriate.
• Hosts and guests should obtain permission where required before uploading images or videos of other people.
• Extra care is expected for events involving children, private ceremonies, religious settings, corporate events, or other sensitive environments.

7. Children’s Privacy

Snapvyn may be used at events where children are present, but we do not knowingly collect personal data from children without appropriate permission from a parent, guardian, host, school, organization, or responsible adult where required.

If you believe a child’s image or personal data has been uploaded without proper permission, contact us at snapvyn@gmail.com. We may restrict access, remove content, or delete relevant data after review.

8. Sensitive Personal Data

Uploaded content can reveal religious practices, health conditions, disabilities, political or social affiliations, children’s identities, location details, private family matters, personal relationships, or biometric-style information if advanced image recognition tools are ever enabled.

Users should avoid uploading sensitive content without appropriate permission. Snapvyn may restrict or remove content that creates privacy, safety, legal, or ethical concerns.

9. Public and Private Gallery Modes

In public gallery mode, approved or uploaded content may be visible to other guests, participants, or anyone with the event link or QR access, depending on the host’s settings.

In private gallery mode, guests may only see their own uploads or limited content made available by the host, while hosts may still retain administrative access for event management.

Snapvyn may let hosts review, approve, reject, hide, or delete uploads, and we may remove content that violates our policies, the law, or other people’s rights.

10. AI Processing and Automated Features

Optional AI features may help select photos, detect duplicates or low-quality images, arrange stories, create highlight videos or reels, apply themes or transitions, generate previews, or improve presentation quality.

Snapvyn does not intentionally identify people by name from uploaded event photos unless a future feature is clearly disclosed and enabled with appropriate consent.

If facial recognition, biometric matching, face search, or selfie-based photo finding is introduced in the future, this policy will be updated and additional consent or notices may be required.

11. How We Share Personal Data

• With event hosts, who may view, download, manage, approve, delete, or otherwise use uploaded content depending on event settings.
• With guests and event participants where the event is configured as a shared or public gallery.
• With trusted service providers used for cloud hosting, storage, email delivery, payment processing, security monitoring, analytics, customer support, AI processing, media processing, backup, and infrastructure services.
• With legal or regulatory authorities when required by law, court order, legal process, or lawful request.
• During mergers, acquisitions, restructuring, investment, or other business transfers, subject to appropriate safeguards.
• To protect rights, safety, and security by investigating fraud, abuse, policy violations, or harmful activity.

12. International Data Transfers

Snapvyn operates from Sri Lanka, but our hosting, payment, email, AI, storage, and infrastructure providers may process or store data in other countries.

Where personal data is transferred internationally, we take reasonable steps to use safeguards such as contractual protections, access controls, security measures, and other lawful transfer mechanisms required by applicable law.

13. Data Retention

We keep personal data only as long as reasonably necessary for the purposes described in this policy, unless longer retention is needed for legal duties, dispute resolution, tax or accounting requirements, security, backups, or legitimate business needs.

Retention can vary based on the selected plan, the host’s settings, whether the gallery is active or expired, whether support or legal issues are ongoing, whether deletion has been requested, and whether backups are still cycling out.

• Event galleries are typically retained for the period selected by the host or allowed by the chosen plan.
• Guest uploads may be retained until the event expires, the host deletes them, or Snapvyn removes them under policy.
• Account data may be retained while the account stays active.
• Billing records may be kept as required for accounting, tax, or legal purposes.
• Support messages may be retained for service quality and dispute resolution.
• Backup copies may persist for a limited period before automatic deletion.

14. Deletion Requests and Takedown Requests

You may request deletion of personal data or uploaded content by contacting snapvyn@gmail.com. To process a request, we may need to verify identity, event relationship, event link or name, the relevant photo or video, and whether the requester is the uploader, host, or identifiable person in the content.

Deletion may be limited where the content is controlled by the host, has already been downloaded, forms part of another user’s lawful event record, must be retained by law, cannot be reasonably verified, exists in backups, or is tied to an ongoing legal, safety, fraud, or dispute issue.

15. User Rights

• Request access to personal data.
• Request correction of inaccurate data.
• Request deletion of personal data.
• Withdraw consent where processing is based on consent.
• Object to certain processing or request restriction of processing.
• Request more information about how personal data is used.
• Request a copy of certain personal data where applicable.
• Lodge a complaint with a relevant data protection authority.

16. Cookies and Similar Technologies

Snapvyn may use cookies, local storage, pixels, analytics tools, or similar technologies to keep users signed in, remember event access, improve performance, understand usage patterns, detect errors, prevent abuse, secure accounts, and measure marketing performance.

Users can manage cookies through browser settings, but disabling them may affect how the platform works.