Your data is yours. We are just the custodian.
Your selfie is processed and deleted within seconds. Your photos sit in Europe, backed up and replicated. Delete one by mistake and you have 30 days to undo it. We hid nothing in the fine print.
The whole page, at a glance.
Your data stays in Europe.
Our servers run on Hetzner (Germany / Finland). Data is processed and stored within EU borders.
Your selfie is deleted automatically after the match.
We do not keep the selfie frame we process for matching; we delete it within seconds.
A number, not a photo.
A match is made from a "face signature" (an irreversible string of numbers), not from your photo.
A child's face = parental consent.
Biometric processing for anyone under 18 only happens with consent from a parent or guardian.
30-day undo.
A photo you delete stays recoverable for 30 days; your archive is never buried.
You are in control.
Exercise your rights to access, delete, and export with one tap; every access is logged.
Your data stays in Europe.
- Your photos and data are processed on Hetzner (Germany / Finland) infrastructure; never transferred outside the EU.
- Every frame is backed up and replicated. A disk can fail, your archive will not.
- No photo is ever buried in cold storage — every frame is accessible at any moment, in full resolution.
- From 100 GB to 5 TB depending on your plan; usage is right in front of you.
Subprocessors: hosting (Hetzner, EU) · email · payments (Stripe). Current list: subprocessor list.
Your face is not scanned — it is matched, then forgotten.
Scan
You take a selfie with your camera. That frame is processed only for matching, in that moment.
Match
A face signature is extracted from your face — not a photo, but an irreversible string of numbers.
Delete✓
Your selfie frame is deleted within seconds. We do not keep it.
- Process your selfie only to match it
- Use the face signature only to find your gallery
- Delete the signature whenever you ask
- Log every operation
- Keep your selfie
- Use your face for ads or profiling
- Sell your signature to third parties
- Take your data outside the EU
A child's face = parental consent.
- If a face under 18 is to be processed biometrically, only with parental / guardian consent.
- If consent has not been given, no matching is done for that face.
- A parent can ask for the child's face data to be deleted at any time.
- The event owner can limit minors' sharing.
Deleted it? Undo. Your archive is not buried.
Every access is on the record.
You (guest)
You only see your own matching frames.
Event owner / organizer
Manages the gallery of their own event.
Photographer (sub-user)
Performs only the actions defined in the permission matrix.
SAV team
Does not routinely look at your content; only with permission and logging, on a support request you open.
Three frameworks, one standard: respect for you.
KVKK (Turkey)
Law no. 6698. Duty to inform, explicit consent, VERBİS.
GDPR (EU)
The European General Data Protection Regulation. Lawful basis, data subject rights, 72-hour breach notice, portability.
DSGVO (Germany)
Germany's implementation of the GDPR (including BDSG). Handled separately for EU corporate customers.
Whichever country you are in, we apply the most protective standard.
You decide over your data.
Access
See which of your data we hold.
Rectification
Correct incorrect information about you.
Erasure
"Forget me" — we delete your data.
Portability
Export your data in a machine-readable format.
Objection / restriction
Object to specific processing.
Withdraw consent
Withdraw your face-data consent the moment you want.
How? Start with one tap from account settings, or write to [email protected]. We respond to requests within the legal time frame.
Got an issue? Write to us directly.
These fields will be filled once the legal entity details are finalized.
Our promise is clear: your data is yours, we are the custodian.
We stand behind you while you do the rest. Let's get started.