Privacy policy

Who is responsible

[Company name]
[Registered address]
[VAT number]
[Contact e-mail]

What we process and why

• Photos you upload, which can show you, your family and children, to produce your calendar (performance of the contract).
• Names and dates you add (birthdays, anniversaries, optional birth year) to print them in the calendar.
• Your e-mail address, if you choose to sign in, to send sign-in links and keep your saved calendars and orders together.
• Contact, shipping and payment details to take payment, have the calendar printed and delivered, and meet our accounting obligations.

We do not use your photos for any other purpose, do not sell them and do not use them to train AI models. Photos are only sent to an AI service if you actively choose an AI style for a photo; you will be asked to confirm this first, and Classic photos never leave our own processing.

Retention

• Photos and print files of an order are deleted automatically 30 days after delivery.
• Photos of calendars that were never ordered are deleted automatically after 14 days.
• If you sign in, your saved calendars are kept until you delete them, or automatically after 90 days without changes.
• Birthdays you save in your account are kept until you remove them under “My calendars”, or until your account is deleted. As a guest they are only remembered in your own browser.
• You can delete your photos at any time with “Delete my photos” in the editor, or a saved calendar from “My calendars”.
• Invoice and order records are kept as long as accounting law requires.

Processors

• Vercel Inc.: hosting and encrypted file storage in the Frankfurt (EU) region.
• Supabase Inc.: sign-in and database (saved calendars, orders) in the Frankfurt (EU) region.
• Stripe Payments Europe Ltd.: payment processing. We never see your card details.
• Gelato: printing and shipping; receives the print file and your shipping address.

Where a processor or its sub-processors handle data outside the European Economic Area, this is covered by the European Commission's Standard Contractual Clauses or an adequacy decision.

Cookies

We only use strictly necessary storage: your language choice, your calendar draft (kept in your own browser) and, if you sign in, a session cookie that keeps you signed in. No tracking or advertising cookies.

Your rights

You can ask for access, correction, deletion, restriction, portability or object to processing by e-mailing us. You can also lodge a complaint with your data protection authority (in Belgium: the Gegevensbeschermingsautoriteit / Autorité de protection des données).