Privacy Policy

This Privacy Policy explains what personal data we collect when you use the Service, how we use it, with whom we share it, and your rights regarding your data. We strive to be transparent and to collect only what we need to provide a reliable service.

1. Who We Are

The data controller for personal information processed through the Service is FOP Serhiienko Oleh Mykolayovych (Ukrainian: ФОП Сергієнко Олег Миколайович), an individual entrepreneur registered in Ukraine, trading under the "Gallery4you" brand. You can reach us at privacy@gallery4you.com with any questions about this policy or your personal data. Payments are processed by Paddle.com Market Limited as an independent data controller under its own privacy policy; we receive only the minimum billing metadata required to reconcile your subscription.

2. Data We Collect

We collect three broad categories of data:

Account Data

• Name, email address, and password (stored as a cryptographic hash).
• Billing metadata received from Paddle (billing country, last 4 digits of card, invoice reference) — we never see full card numbers.
• Profile preferences such as language, studio name, and public profile settings.

Gallery Content

• Photographs you upload, along with captions, categories, and related metadata.
• Client-gallery settings you configure, such as passwords and expiry dates.
• Logs of who opens, downloads, or shares a gallery (where you enable such tracking).

Technical Data

• IP address, browser type, device type, and general location inferred from IP.
• Usage analytics: pages viewed, features used, approximate time spent.
• Cookies and similar technologies strictly necessary for authentication and session handling.

3. How We Use Your Data

We use your data for the following purposes:

• To operate the Service, authenticate you, and deliver features you request.
• To bill and collect fees (via Paddle), prevent fraud, and comply with legal obligations.
• To improve the Service — for example, by understanding which features are most useful.
• To communicate with you about service updates, security issues, and (with your consent) product announcements.

4. Sharing Your Data

We do not sell your personal data. We share it only with the following categories of recipients:

• Subprocessors — infrastructure providers (hosting, CDN, email), strictly bound by data-processing agreements.
• Merchant of Record — Paddle.com Market Limited, which acts as the seller and payment processor for all purchases and processes billing and tax data under its own privacy policy.
• Legal authorities — where required by law, subpoena, or to protect the rights, safety, and property of Gallery4you or others.

5. Storage & Security

Your data is stored on secure servers in the European Union. We use encryption in transit (TLS) and at rest, follow the principle of least privilege for access, and maintain industry-standard operational safeguards. No online service can be guaranteed to be 100% secure, but we work continuously to protect your information.

6. Data Retention

We keep your account and gallery data as long as your account is active. When you cancel, we retain your data for 30 days to allow recovery and then permanently delete it, except where we are legally required to keep certain records (for example, invoices for tax purposes).

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate or incomplete information.
• Erasure — request deletion of your data, subject to legal retention requirements.
• Portability — receive your data in a structured, machine-readable format.
• Objection & withdrawal — object to processing or withdraw consent at any time.

8. How to Delete Your Account & Data

You may delete your Gallery4you account and all personal data associated with it at any time. We offer three ways to request deletion:

• Self-service from your dashboard — Sign in, open Settings → Account, and choose "Delete my account". The deletion runs immediately and cannot be undone.
• Email — Write to gallery4you.support@gmail.com from the address registered on your account. We confirm your identity and complete the deletion within 30 days.
• Facebook / Google / Instagram logins — Revoking access to Gallery4you from your provider's security dashboard disables login. To delete the stored account afterwards, use either method above — provider revocation alone does not erase your uploaded galleries.

When the deletion runs we permanently remove your profile, uploaded galleries, photos, thumbnails, and linked social-provider identifiers. Anonymised billing records may be retained for up to 7 years where required by tax and accounting law.

9. Cookies

We use a small number of strictly necessary cookies required for authentication and to remember your language preference. We do not use third-party advertising cookies. You can block cookies in your browser, but doing so may impair essential features.

10. Children

Gallery4you is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, please contact privacy@gallery4you.com and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised version on this page, update the "Last updated" date, and notify you by email when changes are material.

Contact: For any questions about these policies, please email gallery4you.support@gmail.com.