1. Overview
Albumly respects your privacy. This policy explains what information we collect, how we use it, and the choices you have when using our digital album platform — including creator accounts at app.albumly.io, studio accounts at studio.albumly.io, and public album pages on albumly.io.
For privacy questions, contact contact@albumly.io.
2. Information we collect
Information you provide
- Account data: name, email address, password hash, account type (creator or studio), and profile details.
- Album content: photos, videos, captions, album titles, themes, sharing settings, PINs, and custom domain configuration.
- Billing data: plan, subscription status, and payment history. Card details are processed by Stripe; we do not store full card numbers.
- Communications: support messages and marketing preferences.
- Guest contributions: content submitted when guest upload is enabled.
Information collected automatically
- Usage data: features used, album views, timestamps, and actions in the product.
- Device and log data: IP address, browser type, operating system, referral URLs, and error logs.
- Cookies: used for sessions, preferences, and security (see Section 9).
Information from third parties
- Sign-in providers: if you use Google OAuth, we receive your name, email, and provider account identifier as allowed by your provider settings.
- Stripe: transaction confirmations and billing metadata.
3. How we use information
We use your information to:
- Provide, host, and secure your digital albums and account
- Process uploads, generate previews, and deliver albums you publish
- Authenticate users and process subscriptions
- Send transactional email (verification, receipts, security alerts)
- Enforce plan limits, prevent abuse, and comply with law
- Improve reliability and diagnose errors
We do not sell your personal information. We do not use your private album photos for advertising.
4. Legal bases (EEA / UK)
Where GDPR or similar laws apply, we process data based on contract (to provide the service), legitimate interests (security and product improvement), consent (where required), and legal obligation.
5. Sharing
We share data only with service providers that help us operate Albumly under appropriate safeguards, including cloud storage (such as AWS S3 or Cloudflare R2), Stripe (payments), Resend (email), Google (optional sign-in), and infrastructure vendors — or when required by law.
Content you publish to a public album is visible to visitors with the link. Private albums and PIN-protected galleries are only accessible to people you share credentials with.
6. Controller and processor roles
Albumly is the controller for account and billing data. For photos and personal data in a digital album, the creator or studio who owns the album typically decides what is collected and who can access it; Albumly processes that content on their instructions to host and deliver the album.
7. Retention and deletion
We retain account and album data while your account is active. If you delete your account through settings, we will delete or anonymize personal data within a reasonable period, subject to legal retention requirements and backup cycles. Billing records may be retained as required for tax and fraud prevention.
8. Your rights
Depending on your location, you may have rights to access, correct, export, delete, restrict, or port personal data. You can export account data and request account deletion from your account settings. Contact contact@albumly.io to exercise other rights. California residents have additional rights under CCPA/CPRA; we do not sell personal information.
9. Cookies
We use cookies to keep you signed in, remember preferences, and understand product usage. You can control cookies in your browser; blocking essential cookies may affect login and core functionality.
10. Security
We use industry-standard measures including encrypted transport (HTTPS), hashed passwords, access controls, and secure cloud storage. No method of transmission or storage is completely secure; use a strong password and protect album PINs.
11. Children
Albumly is not directed at children under 16. We do not knowingly collect personal information from children under 16. Contact us if you believe we have.
12. International transfers
We may process data in the United States and other countries where we or our providers operate. Where required, we use appropriate safeguards for cross-border transfers.
13. Changes
We may update this policy from time to time. Material changes will be communicated through the platform or by email. See also our Terms of Service.
14. Contact
For privacy, legal, or support questions, contact contact@albumly.io.