Data & security

Where data lives

• Photos and videos are kept in Cloudflare object storage and delivered through Cloudflare’s network, so galleries open quickly wherever your guests are.
• Account details, event information and invoices are kept in our database.
• Payments are handled by Razorpay. Card, UPI and bank details never touch our servers.
• Every connection to SnapUp is encrypted, and passwords are stored only as one-way hashes.

Guest privacy

• A selfie is used for one thing: finding that guest’s photos in the one event they were invited to. It is turned into a numerical signature and matched; the signature is kept only for that browsing session.
• When a photographer offers pre-registration, the guest’s name, contact detail and selfie are kept until the event is deleted, so their photos can be sent when the gallery is published.
• Faces are never matched across different photographers’ events, never used for advertising, and never sold.
• Galleries open only through their own unguessable link or QR code, and the photographer can add a PIN.
• Anyone in a photo can ask for it to be hidden or removed — through the photographer, or by writing to us.

Export your originals

• Your photos are yours. You can download a single file or the whole event as a ZIP at any time while your plan is active.
• If a plan runs out, originals stay downloadable for 7 more days. Previews stay viewable for 30 days after that. Then they are deleted.
• Deleted files cannot be brought back, so keep your own copy of anything you cannot afford to lose.

Deleting things

• Deleting an event removes its photos, videos and the face signatures computed from them.
• Each event can be given a retention period, after which it is removed automatically.
• You can ask us to delete your whole account and everything in it.