Privacy Policy

Data controller

Daniele Stumpo, Ekenknick 7, 22523 Hamburg, Deutschland. For any request about your data, write to support@getconvivio.com. We are not required to appoint a data protection officer.

What data we process

• Organizer account: email, password (stored in protected form by our authentication provider), organization name.
• Guest data entered by the organizer or by guests themselves through the reply form: names, answers to the form questions (defined by the organizer), chosen language, times the invitation was opened.
• Content uploaded to the gallery and guestbook: photos, videos, audio/video messages, with the uploader's optional name.
• Event contacts and locations entered by the organizer (names, photos, phone, email, addresses).
• Technical data: IP address (in infrastructure logs and for anti-abuse limits), a random device identifier stored in the browser for photo reactions (guests don't need an account), and aggregatable public-area events (such as opening the homepage or the demo and clicking the main buttons). These events contain no URL, email or identifier, use no cookies, and are not sent when the browser signals Do Not Track or Global Privacy Control.
• Purchase data: amount, package purchased, email and billing address, connection country, card issuing country, and the timestamp/version of consent to immediate performance of the digital service. Payments are handled by Stripe: card details never reach or stay on our systems. The country data documents where tax is due, as required by EU rules on digital services. If the checkout asks for a phone number, we keep only the international prefix (e.g. +49), never the number.
• Contact form: name, email and the text of your message. We use them only to reply to you; the message goes to our mailbox and is not stored in our databases (legal basis: Art. 6(1)(b) and (f) GDPR).

Why we process it (purposes and legal bases)

• Providing the requested service — creating the event, showing the invitation, collecting replies, hosting the gallery, sending service emails (Art. 6(1)(b) GDPR, performance of a contract). An account cannot be created without an email and password; guests don't have to provide any data beyond what they choose to enter.
• Security, abuse prevention and improvement of the public area — upload limits, per-IP request limiting, technical logs and aggregated events without identifiers (Art. 6(1)(f) GDPR, legitimate interest in a secure and understandable service).
• Legal obligations — tax and accounting obligations on purchases (Art. 6(1)(c) GDPR).
• Service communications — purchase confirmations, a daily summary of your event's news, gallery storage and expiry alerts, a reminder before the trial ends. No marketing emails and no newsletter.
• We make no automated decisions and do no profiling within the meaning of Art. 22 GDPR.

The organizer's role

For their guests' data (names, replies, photos of attendees) the event organizer decides what their form collects and whom to invite. When the organizer is itself subject to the GDPR (for example a company or an association), we process that data on its behalf as a processor (Art. 28 GDPR), exclusively to provide the service; a data processing agreement is available on request. For private parties the safeguards described in this policy apply in any case.

If you are a guest and want content about you removed, you can contact the event organizer (who has moderation and deletion tools) or write to us directly.

Processors and international transfers

We use a small number of providers, all bound by a data processing agreement (Art. 28 GDPR). Where a provider is based in the United States or can access data from there, the transfer relies on the EU adequacy decision for the EU-U.S. Data Privacy Framework (for certified companies) and/or on the European Commission's standard contractual clauses.

• Supabase (Supabase Inc., USA) — database, file storage and authentication; servers in the Frankfurt region (Germany).
• Vercel (Vercel Inc., USA) — website hosting; the functions that access data run in the Frankfurt region.
• Upstash (Upstash Inc., USA) — IP-based abuse protection; the IP address is kept for 24 hours at most.
• Resend (Resend Inc., USA) — sending service emails from the getconvivio.com domain.
• Stripe (Stripe Payments Europe Ltd., Ireland) — payments, receipts and invoices. For payment verification and fraud prevention Stripe also acts as an independent controller under its own privacy policy.

How long we keep data

• Gallery and guestbook content: for the retention period of the purchased package (6 or 12 months depending on the package, shown on each one at selection time), counted from the gallery activation date you choose. After expiry, following a 30-day grace period, photos, videos and messages are permanently and automatically deleted.
• What you delete manually (invitations, guests, photos…) is first hidden and recoverable, then permanently removed after the 30-day grace period following package expiry.
• Account data: for as long as the account is active. You can request deletion by writing to us.
• Purchase data and invoices: for the retention periods required by German tax and commercial law (usually 8 to 10 years).
• Aggregated public-area events: 180 days. Technical logs and anti-abuse data: for short technical periods defined by the infrastructure providers.

Your rights

You have the right of access, rectification, erasure, restriction, portability and objection (Arts. 15–22 GDPR). Exercise them by writing to support@getconvivio.com. You also have the right to lodge a complaint with a supervisory authority: the one competent for us is the Hamburg Commissioner for Data Protection and Freedom of Information; you can also contact the authority of your country of residence.

Minors

The service is aimed at adult organizers. Photos and content depicting minors may only be uploaded by those entitled to do so — typically the parents, or people with their consent. The organizer has moderation tools to remove inappropriate content.

Security

Private galleries are accessible only via links with a personal code; files are served through expiring signed links. Photos uploaded by guests are visible in the event gallery immediately after upload; the organizer can hide or delete them at any time using the moderation tools. We automatically strip EXIF metadata (including GPS position) from uploaded images.

Changes to this policy

If this policy changes substantially, we will update the date above and, for relevant changes, notify organizers by email or through the application.