Privacy and GDPR: you are the controller
In short: you decide what to upload and who sees it, so under GDPR you are the controller. picsme stores and shows the photos on your behalf and is the processor. The binding texts are the privacy policy and the terms; this page explains them.
What this means for you
Section titled “What this means for you”- The photos are yours to manage. You choose the galleries, who gets a password and how long a gallery lives. We use the photos only to store and show them to the people you share them with.
- Tell your clients that their photos are stored with picsme. Your own privacy notice or contract with the client is the right place. Subprocessors lists the categories of providers that help us run the service; the full list is available on request.
- Labels on access passwords are written by you. When you give a client a personal password, use a first name or a role (“Anna (bride)”), not a phone number or email.
What we store
Section titled “What we store”- About your clients: nothing they type in except the gallery password. No accounts, names or emails. With a personal password you see how often it opened the gallery and downloaded photos, and the photos marked with a heart. The IP address is kept only in server memory to block password guessing. See What we know about your clients.
- About you: email, name, a one-way hash of your password, your portfolio contacts and profile photo if you add them, and the Google account ID if you sign in with Google. Daily totals for your account (opens, downloads, uploads, storage) are kept for 2 years.
- Technical logs have no IP addresses (except the address of a rejected burst of sign-in attempts, kept briefly in a local security log), passwords or request contents and are size-limited and overwritten automatically.
Deleting data
Section titled “Deleting data”Deleting a gallery or your account removes the data from the service at once; photo files are erased from storage within a day. Database backups (without photos) are kept up to 30 days, then deleted. Details: Where photos are stored.