Privacy Policy

1. Our commitments at a glance

Before the legal detail, these are the principles behind Klikt:

• Your content remains yours: photos, videos and messages belong to the people who share them or to the relevant rights holders.
• We do not sell your data: we do not sell photos, videos, emails or event information to advertisers or data brokers.
• No AI training: media and biometric data processed for face finding are not used to train general AI models.
• Organizer control: the organizer can manage visibility, moderate content, delete media and delete the event.
• Scheduled deletion: media is kept for the period included in the selected plan, with a temporary backup period, then automatically deleted.

2. Data Controller

The data controller for the information you provide or that we collect is Klikt. **Privacy contact:** Email: privacy@klikt.io Address: Nantes, 44000, France

3. Data We Collect

We collect only the information needed to create, secure, display and administer event albums.

• Account Data: email address, name, login identifiers and password hash when you create an account.
• Event Data: event name, date, settings, QR code, visibility, moderation, photos, videos and shared messages.
• Guest Data: uploaded media, messages, optional form information, and technical information needed for security.
• Technical Data: logs, device type, browser, pages viewed, errors and performance data to maintain and improve the service.
• Payment Data: payment status, selected plan, invoices and transaction identifiers. Full card details are handled by payment providers and are not stored by Klikt.
• Optional Biometric Data: if AI Face Finding is enabled, we process technical face representations only to help people find their photos in the relevant album.

4. Who Can See Content?

Visibility depends on the organizer’s settings and on how the link or QR code is shared.

• Link or QR access: anyone with access to the link or QR code may potentially access the event area, depending on enabled settings.
• Organizer and moderators: authorized people may view, moderate, download or delete event content.
• Public event: when an event is public, content may be more broadly accessible to people who have the album address.
• Private event: when an event is private, Klikt limits access through available controls, but the organizer remains responsible for sharing the link and QR code.
• Practical reminder: do not share an event link or QR code with people who should not access the album.

5. How We Use Your Data

We use data only to provide, secure and improve Klikt.

• Create and host albums, display media, generate QR codes, manage slideshows and enable downloads.
• Allow organizers to moderate, hide, delete or manage shared media.
• Send service emails for account, payment, important notifications, support or security.
• Respond to support requests, resolve incidents and prevent abuse.
• Measure performance, understand product usage and improve the experience, preferably with aggregated or limited data.
• Process payments, invoices, possible refunds and plan-related checks.

6. AI Face Finding and Sensitive Data

Face finding is an optional feature designed to help guests find their own photos faster.

• Limited purpose: face processing is used only to compare a reference photo with media from the relevant event.
• No general training: we do not use this data to train, enrich or sell artificial intelligence models.
• No ad targeting: face-finding data is not used to profile guests or show targeted advertising.
• Deletion: this data follows the event retention period and can be deleted on request where technically possible.
• User choice: if you do not want to use face finding, you can simply avoid enabling the feature.

7. Children and Minors

Events may naturally include children or minors in photos and videos. We treat this content with particular care.

• Not directed to children alone: Klikt is not designed for children to use directly without adult supervision.
• Organizer responsibility: the organizer must ensure they have the necessary permissions to collect and share media depicting minors.
• Guest responsibility: guests must not upload content involving minors unless they have the right to share it.
• Removal request: a parent, legal guardian or affected person may request removal of media by contacting privacy@klikt.io.
• Enhanced protection: we may quickly remove content involving a minor if we believe it creates a risk, infringes privacy or violates our terms.

8. Service Providers

We use providers to operate Klikt. They access data only as needed for their role.

• Hosting and infrastructure: cloud services, media storage, secure file delivery and application hosting.
• Payments: secure payment providers for transactions, invoices and required tax information.
• Transactional email: email providers for account, support, security and service notification emails.
• Product analytics: tools used to understand service usage, fix errors and improve performance.
• Safeguards: we choose recognized providers and limit access to operational needs.

9. Retention, Backups and Automatic Deletion

Media is not kept indefinitely. Retention depends on the plan selected for the event and related options.

• Plan duration: event photos, videos and media remain available for the period shown in the purchased or activated plan.
• Backup period: after expiry or deletion, a temporary backup may be kept for the period described in the plan or, by default, for a limited technical period to prevent accidental deletion and support restoration where available.
• Automatic deletion: once the main retention and backup periods expire, associated photos, videos and media are automatically deleted from active systems according to our technical processes.
• Account data: account information is kept until account deletion, unless legal obligations require otherwise.
• Legal obligations: minimal billing, security or compliance data may be retained longer when required by law.

10. Your Rights

Depending on your location, you may have rights over your personal data.

• Request access to the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your data or certain media where applicable.
• Receive a copy of certain data in a structured format where possible.
• Withdraw consent for processing based on consent.
• File a complaint with a competent data protection authority.

11. Cookies and Trackers

We use essential cookies for authentication, security and service operation. We may also use analytics or product-improvement cookies or trackers where permitted. You can configure your browser to refuse certain cookies, but some features may not work properly.

12. Security

We use technical and organizational measures intended to protect media and personal data: access controls, secure storage, limited internal access, error monitoring and infrastructure best practices. No online service can guarantee absolute security, but we treat security as an operational priority.

13. Contact Us

For questions, access requests, media deletion, removal of a photo involving a minor, or any data-related request, contact privacy@klikt.io.