Privacy Policy

This Privacy Policy explains what personal data we collect when you use the Service, how we use it, with whom we share it, and your rights regarding your data. We strive to be transparent and to collect only what we need to provide a reliable service.

1. Who We Are

The data controller for personal information processed through the Service is FOP Serhiienko Oleh Mykolayovych (Ukrainian: ФОП Сергієнко Олег Миколайович), an individual entrepreneur registered in Ukraine, trading under the "Gallery4you" brand. You can reach us at privacy@gallery4you.com with any questions about this policy or your personal data. Payments are processed by Paddle.com Market Limited as an independent data controller under its own privacy policy; we receive only the minimum billing metadata required to reconcile your subscription.

2. Data We Collect

We collect three broad categories of data:

Account Data

• Name, email address, and password (stored as a cryptographic hash).
• Billing metadata received from Paddle (billing country, last 4 digits of card, invoice reference) — we never see full card numbers.
• Profile preferences such as language, studio name, and public profile settings.

Gallery Content

• Photographs you upload, along with captions, categories, and related metadata.
• Client-gallery settings you configure, such as passwords and expiry dates.
• Logs of who opens, downloads, or shares a gallery (where you enable such tracking).

Technical Data

• IP address, browser type, device type, and general location inferred from IP.
• Usage analytics: pages viewed, features used, approximate time spent.
• Cookies and similar technologies strictly necessary for authentication and session handling.

3. How We Use Your Data

We use your data for the following purposes:

• To operate the Service, authenticate you, and deliver features you request.
• To bill and collect fees (via Paddle), prevent fraud, and comply with legal obligations.
• To improve the Service — for example, by understanding which features are most useful.
• To communicate with you about service updates, security issues, and (with your consent) product announcements.

4. Sharing Your Data

We do not sell your personal data. We share it only with the following categories of recipients:

• Subprocessors — infrastructure providers (hosting, CDN, email), strictly bound by data-processing agreements.
• Merchant of Record — Paddle.com Market Limited, which acts as the seller and payment processor for all purchases and processes billing and tax data under its own privacy policy.
• Legal authorities — where required by law, subpoena, or to protect the rights, safety, and property of Gallery4you or others.

5. Storage & Security

Your data is stored on secure servers in the European Union. We use encryption in transit (TLS) and at rest, follow the principle of least privilege for access, and maintain industry-standard operational safeguards. No online service can be guaranteed to be 100% secure, but we work continuously to protect your information.

6. Data Retention

We keep your account and gallery data as long as your account is active. When you cancel, we retain your data for 30 days to allow recovery and then permanently delete it, except where we are legally required to keep certain records (for example, invoices for tax purposes).

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate or incomplete information.
• Erasure — request deletion of your data, subject to legal retention requirements.
• Portability — receive your data in a structured, machine-readable format.
• Objection & withdrawal — object to processing or withdraw consent at any time.

8. Konto und Daten löschen

Sie können Ihr Gallery4you-Konto und alle damit verbundenen personenbezogenen Daten jederzeit löschen. Es gibt drei Wege, die Löschung anzufordern:

• Selbstbedienung aus dem Dashboard — Melden Sie sich an, öffnen Sie Einstellungen → Konto und wählen Sie „Mein Konto löschen". Die Löschung erfolgt sofort und kann nicht rückgängig gemacht werden.
• E-Mail — Schreiben Sie an gallery4you.support@gmail.com von der bei Ihrem Konto registrierten Adresse. Wir bestätigen Ihre Identität und schließen die Löschung innerhalb von 30 Tagen ab.
• Anmeldung über Facebook / Google / Instagram — Der Widerruf des Zugriffs von Gallery4you im Sicherheits-Dashboard Ihres Anbieters deaktiviert die Anmeldung. Um das gespeicherte Konto anschließend zu löschen, nutzen Sie eine der oben genannten Methoden – der bloße Widerruf entfernt Ihre hochgeladenen Galerien nicht.

Bei der Löschung entfernen wir Ihr Profil, hochgeladene Galerien, Fotos, Thumbnails und verknüpfte Social-Provider-IDs dauerhaft. Anonymisierte Abrechnungsdaten können bis zu 7 Jahre aufbewahrt werden, sofern dies das Steuer- und Buchhaltungsrecht vorschreibt.

9. Cookies

We use a small number of strictly necessary cookies required for authentication and to remember your language preference. We do not use third-party advertising cookies. You can block cookies in your browser, but doing so may impair essential features.

10. Children

Gallery4you is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, please contact privacy@gallery4you.com and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised version on this page, update the "Last updated" date, and notify you by email when changes are material.

Contact: For any questions about these policies, please email gallery4you.support@gmail.com.