1. Introduction
AlbumDrive ("we" or "us") is committed to protecting your privacy. This policy explains how we collect, use, and protect your information.
2. Information We Collect
A. Personal Information (Organizers)
When you log in with Google, we collect:
- Email: To identify your account and communicate with you
- Name and profile picture: To personalize your experience
- Google user ID: To link your events to your account
B. Google Drive Data
We request the drive.file scope, which allows us to access ONLY files and folders created by AlbumDrive. We cannot view, read, or modify any other files in your Drive.
We create a folder called "AlbumDrive" with subfolders for each event.
C. Guest Data and Media Content
Guests who upload photos or videos do not need an account. We collect:
- Uploaded photos and videos: Processed temporarily and transferred directly to the organizer's Google Drive. For videos, the uploader's browser preserves the original and creates a compatible MP4 copy for gallery playback; both are stored in the organizer's Drive. Media becomes viewable on the public event web gallery, accessible to anyone with the direct link or QR code shared by the host (unless protected by a PIN).
- Upload timestamp: To chronologically organize the gallery.
- Device and browser type: For technical diagnostics and media performance optimization only.
We do not keep permanent copies of photos or videos on our primary servers after the transfer to Drive is complete.
D. Usage Data
We collect anonymous platform usage data to improve the service — pages visited, features used, and technical errors.
E. Cookies
We use essential cookies to keep your session active and remember language and theme preferences. We do not use intrusive tracking or third-party advertising cookies.
3. How We Use Your Information
- To provide and maintain the Service
- To transfer photos and videos to the organizer's Google Drive
- To authenticate you and protect your account
- To send transactional emails related to your event — reminders, confirmations, notifications
- To communicate about updates or support
4. Google API Policy Compliance
AlbumDrive's use complies with the Google API Services User Data Policy, including the Limited Use requirements.
We do not use Google Workspace data to:
- Train AI or ML models
- Show advertising
- Sell data to third parties
5. Service Providers
We share the minimum necessary information with these infrastructure providers to operate the Service:
- Vercel: Application hosting and serverless functions
- Firebase (Google): User authentication and database
- Cloudflare: Content Delivery Network (CDN) and secure caching proxy for high-performance thumbnail delivery and video streaming
- Resend: Transactional email delivery
- Paddle: International payment processing
- MercadoPago: Payment processing in Argentina
None of these providers are authorized to use your data for their own purposes.
6. Data Retention and Deletion
- Account data: Retained while the account is active. Upon account deletion request, your data is deleted within 30 days.
- Event deletion and disconnection: When an organizer deletes an event or disconnects their Google Drive account from AlbumDrive, web gallery access is immediately shut down and public sharing permissions on the associated Google Drive folders are automatically revoked, restoring the files to 100% private mode in the user's Google Drive account. Reconnecting Google Drive automatically restores access for non-deleted active and ended events.
- Media files: AlbumDrive does not maintain master media archives on its servers; files reside directly in the organizer's personal Google Drive.
7. Protection of Minors
AlbumDrive is not intended for children or individuals under 18 years old to create and manage accounts.
Regarding photographs and videos of minors taken during social or family gatherings:
- We require organizers and guests to hold prior, express consent from parents or legal guardians before uploading photos or videos of minors.
- We enforce a strict zero-tolerance policy against any form of child sexual exploitation and abuse (CSAM).
- If a parent or legal guardian identifies media of their child uploaded without authorization, they can request immediate removal by contacting our support team at hello@albumdrive.app.
8. Your Rights and Media Takedowns
Both organizers and individuals appearing in uploaded content have rights regarding their personal data and image:
- Access, rectification, or deletion: You may request deletion of your account data or images.
- Photo Takedowns by guests or third parties: If you appear in a photo or video and wish to have it removed, you can request deletion directly from the event host (who possesses moderation tools), or contact us directly at hello@albumdrive.app providing the event link and the specific file to be removed. We will act promptly.
- GDPR / Regional Regulations: If you reside in the European Union or applicable jurisdictions, you hold rights of access, rectification, portability, restriction, and objection.
To exercise any of these rights, contact us at hello@albumdrive.app
9. Security
We implement industry-standard technical and organizational measures:
- Encryption in transit (HTTPS/TLS)
- Sensitive token encryption (AES-256)
- Limited data access following the principle of least privilege
10. Changes to This Policy
We will notify you of significant changes via email or through a visible notice on the platform at least 7 days in advance.
11. Contact
For privacy inquiries or rights enforcement:
hello@albumdrive.app