Privacy Notice

We process wedding photos and face-derived signals only to curate your album shortlist. Contact hello@phophoandtoto.com for access, correction, or erasure requests.

1. What we process

Account data (Google email, user id), wedding photos you upload, face-derived data for clustering, and product analytics without filenames or email in events.

2. Purpose

Album curation only — not advertising or sale.

3. Retention

Originals 30 days; failed workspace 7 days; review artifacts 45 days; exports 7 days.

4. Your rights

Access, correction, erasure, and grievance via hello@phophoandtoto.com (72h acknowledgement).

5. Subprocessors

Vercel, Supabase, Cloudflare R2, Sentry, PostHog, and your cloud GPU worker provider. Regions documented in ops/legal/privacy-notice-v1.md.

6. Security

TLS, encryption at rest via providers, per-user access control, private bucket, signed upload URLs.

7. Children

18+ only.

Terms of Service · Back to home