Privacy policy
What we collect
Account: name, email, organization. Event: title, date, venue, brand assets. Guest: email (optional), uploaded photos, reactions. Telemetry: IP, browser, device class.
How we use it
To run the service. To bill you. To protect against abuse. To send transactional emails. We do not sell data, run third-party trackers in the gallery, or train ML on your content.
Retention
Galleries on Essentials: 90 days. On Pro and Agency: as long as the account is active or until the host deletes them. Billing records: 7 years (legal requirement).
Your rights
Access, correct, export, delete. One-click in Settings. For full deletion of guest content even after host removal, email privacy@scanvas.app and we'll process within 7 days.
Security
Encryption in transit and at rest. Annual penetration tests. SOC 2 Type II in progress. Mandatory MFA for production access.
International transfers
Primary hosting is EU. US transfers happen only for Stripe payouts and are covered by Standard Contractual Clauses.
Contact
privacy@scanvas.app. Postal: 17 rue de Sévigné, Paris 75004, France.