Privacy Policy

1. Introduction and User Consent

Welcome to Papzi's Privacy Policy. This policy describes how Papzi ("we," "our," or "us") collects, uses, and shares your information when you use our website Papzi.com (the "Website") and our event photo distribution service (collectively, the "Service"). This Privacy Policy applies to all users, including event hosts, photographers, and guests who interact with our Service.

When you create an account, you will be asked to affirmatively agree to this Privacy Policy by checking a box before your account can be created. If you do not agree with our policies and practices, please do not check that box or use our Service. By agreeing to this Privacy Policy, you consent to the collection, use, and sharing of your information as described in this policy. You also acknowledge that you are responsible for ensuring the accuracy of any personal information you provide to us and that you have the authority to provide consent for any data you submit on behalf of others, including guests or event participants.

2. Information We Collect

Personal Information

  • Names and email addresses of event hosts, photographers, and guests
  • Wedding details (date, location, couple's names)
  • Account login information
  • Payment information (for paid services), including credit card details or other financial data for paid services (all payment information is processed securely by third-party payment processors and is not stored directly by us)

Photos and User Content

  • Photos uploaded by users
  • Comments, ratings, and other user-generated content
  • Metadata associated with photos, such as timestamps, geolocation data, and technical details about the photos

Automatically Collected Information

  • Device information (e.g., IP address, browser type, operating system)
  • Usage data (e.g., pages visited, features used)
  • Location data (if permitted by your device settings)

Information from Third Parties

  • Information from social networks (if you connect your account)
  • Information from event hosts about their guests

We do not collect sensitive personal information (such as race, religion, health information, or sexual orientation) unless it is voluntarily provided by you in relation to the event or through uploaded content. By submitting such information, you consent to its processing as part of our Service.

3. How We Use Your Information

We use your information to:

  • To Provide, Operate, and Improve the Service: Your information is used to ensure the functionality of our Service, including the distribution of photos, user account management, and maintaining the overall quality of the Service. This includes troubleshooting, data analysis, testing, research, and addressing user feedback to enhance user experience and optimize performance.
  • To Process, Organize, and Distribute Photos: We use your photos and related user content to facilitate photo sorting, recognition, and distribution to designated recipients, based on the event host’s instructions. Facial recognition technology is used to streamline photo identification and categorization, as permitted by the users.
  • To Facilitate AI-Powered Photo Sorting and Identification: We leverage AI technology to identify individuals in photos for the purpose of organizing and distributing images in a personalized and efficient manner. This technology is used solely within the scope of the Service and does not share or disclose biometric data to unauthorized third parties.
  • To Communicate with You: We may use your contact information to send transactional messages, such as updates, alerts, notifications, and other service-related communications. This includes responding to your inquiries, providing support, and notifying you of changes to the Service, policies, or any security issues. You may also receive marketing communications based on your preferences, which you can opt out of at any time.
  • To Process Payments and Prevent Fraud: We collect payment information to process transactions for paid services and may use third-party payment processors to securely handle this data. We also use your information to detect, prevent, and respond to potential fraud, unauthorized transactions, or other security risks.
  • To Personalize Your Experience: Your information helps us tailor the Service to your individual preferences, including personalized content, suggestions, and recommendations. This may involve the use of cookies and other tracking technologies to remember your preferences and optimize your interaction with the Service.
  • To Ensure Legal and Regulatory Compliance: We use your information as necessary to comply with applicable laws, regulations, legal processes, or government requests. This includes enforcing our terms of service, protecting the rights, privacy, and safety of users, and complying with contractual obligations or audits.
  • To Conduct Analytics and Research: We may analyze user data and behavior to improve the Service, develop new features, and understand user needs. Aggregated or anonymized data may be used for research purposes without identifying individual users.
  • SMS and Mobile Data: We do not sell or share mobile or personal data with third parties, affiliates, or partners for marketing or promotional purposes. We only share data with third parties when it is strictly necessary to deliver our service and only under binding agreements that ensure confidentiality. Under no circumstances will mobile data be shared or sold for advertising or promotional use.
  • To Protect Our Rights and Prevent Harm: We may use your information to investigate, prevent, or take action regarding suspected or actual illegal activities, security breaches, violations of our policies, or harm to our users, the public, or Papzi. This includes cooperation with law enforcement or regulatory authorities as required.

4. Information Sharing and Disclosure

We may share your information with:

  • Service Providers: We may share your personal information with third-party service providers who perform functions on our behalf, such as payment processing, cloud storage, data analysis, customer support, marketing services, and other operational services. These service providers are contractually obligated to protect your information and use it solely for the purpose of providing services to Papzi.
  • Event Hosts and Other Users: As part of the core functionality of our Service, your photos, names, and other relevant user content may be shared with event hosts and other designated users (e.g., guests or photographers) in accordance with the settings chosen by the event host. The information shared is limited to what is necessary to facilitate the distribution and organization of event photos.
  • Third Parties with Your Consent or at Your Direction: We may share your personal information with third parties when you have given explicit consent or when you direct us to do so. For example, if you choose to connect your account with a social media platform, we may share certain information with that platform as permitted by your account settings.
  • Business Transfers:In the event of a merger, acquisition, bankruptcy, or sale of all or a portion of our assets, we may transfer your information to the acquiring or merging company as part of the transaction. If such a transfer occurs, the acquiring company will assume the rights and obligations regarding your personal information as described in this Privacy Policy.
  • Enforcement of Our Terms and Policies: We may share your information to enforce our Terms of Service, Privacy Policy, or other agreements, including investigations of potential violations. This includes sharing information with third parties (e.g., auditors, consultants) if necessary to protect the security and integrity of the Service.
  • Third-Party Integrations:If you choose to use third-party integrations with the Service, such as linking your account to a third-party app or social media account, we may share your information with the third party to enable the integration. Please review the privacy policies of those third parties for more details on how they handle your data.
  • Advertising Partners and Analytics Providers: We may share information with third-party advertisers or analytics providers in a way that does not directly identify you, such as sharing aggregated or pseudonymized data. This helps us measure and improve the effectiveness of our marketing efforts, understand how users interact with our Service, and serve relevant advertisements.

We do not sell your personal information to third parties.

5. Facial Recognition Technology

Our Service utilizes advanced facial recognition technology to identify individuals in photos for the purpose of organizing and distributing images efficiently. We recognize that this involves sensitive biometric data, and we are committed to handling it responsibly. Here's how we protect and manage facial recognition data:

  • Creation of Facial Signatures: When you upload reference photos, our system creates a unique facial signature based on the biometric characteristics in the image. This facial signature is a mathematical representation of a face, not an actual image, and cannot be reverse-engineered to recreate the original photo.
  • Limited Use for Identification: Facial signatures are used exclusively for identifying individuals in photos uploaded to our Service for sorting and distribution purposes. This data is not used for any other purpose outside of the Service functionality and is not shared with unauthorized third parties.
  • No Sharing or Selling of Biometric Data: We do not sell, trade, or disclose your facial recognition data to third parties for any reason, including marketing or advertising. The biometric data collected through our facial recognition feature remains private and is only accessible to authorized users within the scope of the event's photo distribution process.
  • Opt-Out and Control: Users have the option to opt-out of facial recognition features at any time. If you opt-out, we will cease collecting facial recognition data from your photos and will delete any previously stored facial signatures. Event hosts are responsible for informing their guests of the facial recognition feature and ensuring that proper consent is obtained.
  • Data Retention and Deletion: Facial recognition data is retained only for as long as it is necessary to provide the Service. Once the event's photo distribution process is complete, or upon request, facial recognition data will be securely deleted. We take steps to ensure that this data is permanently removed from our systems.
  • Compliance with Biometric Privacy Laws: The event host is responsible for obtaining all legally required consents from event guests before uploading their images to the Service, including any consents required under biometric privacy laws such as the Illinois Biometric Information Privacy Act (BIPA). By checking the box to agree to these terms, event hosts confirm they will obtain such consents before uploading guest photos.

6. Children's Privacy

Our Service is not intended for children under 18. We do not knowingly collect personal information from children under 18. If we become aware that we have inadvertently collected personal information from a child under 18 without proper consent, we will take immediate steps to delete such information from our records. If you are a parent or guardian and believe we might have any information from or about a child under 18, please contact us at help@papzi.com. We will promptly investigate and take appropriate action to remove the child's information.

Parents can create profiles for their children under 18, but must manage these profiles themselves and provide consent for the use of their children's information. Parents or guardians are solely responsible for monitoring their child's use of the Service and ensuring that the child's information is handled in compliance with this Privacy Policy. By creating a profile for a child, you consent to the collection, use, and sharing of the child's information as described in this policy.

7. Your Rights and Choices

You have the right to:

  • Access Your Information: You have the right to request a copy of the personal information we hold about you. This includes details on how your data is being used, shared, and stored.
  • Correct Your Information: If any of your personal information is inaccurate or incomplete, you have the right to request corrections or updates to ensure your data is accurate.
  • Delete Your Information: You may request the deletion of your personal information under certain circumstances, such as if the information is no longer necessary for the purposes for which it was collected or if you withdraw your consent.
  • Object to or Restrict Processing: You have the right to object to the processing of your personal information for certain purposes, such as direct marketing or profiling. You may also request that we restrict the processing of your data in situations where you contest its accuracy or where you need the data to be maintained for legal claims.
  • Data Portability: Where technically feasible and required by law, you may request to receive a copy of your personal data in a structured, commonly used, and machine-readable format. You may also request that we transfer your personal information to another service provider where applicable.
  • Withdraw Consent: If we are processing your personal information based on your consent, you have the right to withdraw that consent at any time. This withdrawal will not affect the lawfulness of processing based on consent before its withdrawal. However, it may affect your ability to fully use certain features of the Service.
  • Opt-Out of Marketing Communications: You may opt out of receiving marketing communications from us at any time by following the unsubscribe instructions included in our emails or by contacting us directly. Please note that you may still receive transactional or service-related communications, which are necessary for providing the Service.

To exercise these rights, please contact us at help@papzi.com. We will respond to your request within a reasonable timeframe, and no later than as required by applicable law. We may need to verify your identity before processing your request to ensure that your personal information is protected.

Please be aware that certain rights may be subject to limitations based on local law or specific contractual agreements, and we will inform you if any such limitations apply when responding to your request.

8. Data Retention and Security

We retain your information for as long as necessary to provide our Service and comply with legal obligations. We implement industry-standard security measures to protect your data, including encryption and secure cloud storage. The specific retention periods depend on the nature of the data and the purposes for which it is processed. For example:

  • User account information is retained for the duration of your account's active status and for a reasonable period afterward if necessary to comply with legal obligations or resolve disputes.
  • Photos and event data are retained based on the event host's plan: 1 month from the Event Creation Date for free plan events, and 3 months from the Event Creation Date for paid plan events. After this period, the event is marked as expired and the data is permanently deleted.
  • Payment information is retained only for the duration necessary to complete transactions and comply with financial regulations.

Once we no longer require your information for legitimate business or legal purposes, we will securely delete, anonymize, or otherwise dispose of it in accordance with applicable laws and industry standards. If you request the deletion of your personal data, we will process the request in accordance with our data deletion policy, except where retention is required for legal reasons.

We are committed to protecting your personal information and take appropriate technical and organizational measures to safeguard your data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data both in transit and at rest, secure cloud storage, regular security audits, and access controls to restrict who can access sensitive information.

While we strive to implement industry-standard security measures, it is important to understand that no method of transmission over the Internet or method of electronic storage is completely secure. We cannot guarantee the absolute security of your data, and you acknowledge that you provide your personal information at your own risk.

9. Cookies and Tracking Technologies

We use cookies and similar technologies to collect information and improve our Service. You can control cookies through your browser settings. We use both session and persistent cookies for purposes including:

  • Keeping you signed in
  • Understanding how you use our Service
  • Remembering your preferences

10. Third-Party Services

Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. Please review the privacy policies of any third-party services you access through our Service. We do not endorse or assume any responsibility for the content, privacy practices, or actions of these third parties. When you access a third-party service through our Service, you do so at your own risk. Please note that any information you provide to third-party services is governed by their respective privacy policies and not by this Privacy Policy.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers, in compliance with applicable laws. By providing your information to us, you consent to the transfer of your information to countries outside of your home country, including the processing of your data in those jurisdictions. If you have any questions or concerns about how your information is transferred and protected internationally, please contact us at help@papzi.com

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes that materially affect your rights or our obligations, we will notify you by posting the revised policy on this page and updating the "Last Updated" date at the top of the policy.In addition to posting updates, we may also notify you via email or through in-app notifications if the changes are significant. It is important that you review this Privacy Policy periodically to stay informed about how we are protecting your information and your rights in relation to your personal data.

Your continued use of our Service after any changes to this Privacy Policy signifies your acceptance of those changes. If you do not agree with the updated policy, you should discontinue use of the Service and contact us to request deletion of your personal information.

13. Breach Notification

We take the security of your personal information seriously and have implemented measures to protect it. In the unlikely event of a data breach that compromises your personal information, we will take immediate action to assess the situation and mitigate any potential harm. In the case of a data breach, we will notify you as follows:

  • Timely Notification: We will notify you of any confirmed data breach affecting your personal information without undue delay, in accordance with applicable laws. Notification will be provided within a reasonable timeframe, taking into consideration the nature of the breach and the legal requirements applicable in your jurisdiction.
  • Method of Notification: We will notify you via email or through the contact information you have provided to us. In the event that the breach poses a high risk to your rights and freedoms, we may also post a notice on our website to ensure you are informed.
  • Details of the Breach: Our notification will include:
    • A description of the nature of the breach, including the type of personal information involved,
    • The estimated date of the breach and the date it was discovered,
    • A summary of the steps we are taking to address the breach and mitigate potential harm,
    • Recommendations for you to protect yourself, including any actions you may consider taking.
  • Ongoing Communication: We will provide updates as more information becomes available and as we continue to investigate the incident. If necessary, we may also provide additional resources or support to assist you in protecting your information.
  • Regulatory Compliance: We will also comply with any reporting obligations to relevant regulatory authorities regarding the breach, as required by applicable data protection laws.

We encourage you to monitor your accounts and personal information regularly. If you notice any suspicious activity, please contact us immediately at help@papzi.com.

14. Marketing

As part of our efforts to enhance your experience with our Service, we may use your personal information to send you marketing communications. This includes information about our products, services, promotions, and events that may be of interest to you. We are committed to ensuring that your preferences regarding marketing communications are respected.

15. Do Not Track Signals

Your privacy is important to us, and we are committed to providing transparency regarding our data collection practices. Some web browsers offer a "Do Not Track" (DNT) feature that allows you to inform websites that you do not wish to be tracked.

Currently, our Service does not respond to DNT signals. We are not able to guarantee that we will honor DNT requests due to the lack of a common industry standard for recognizing and honoring such signals. However, we respect your privacy and offer several ways to control your data as described in this Privacy Policy.

Please note that while these measures may help limit tracking, they may also affect your experience using our Service. Certain features may not function properly if tracking is disabled, and you may not receive personalized content or advertisements.

16. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us at help@papzi.com.