Privacy Policy

1. Who We Are

Memorifolio is an event photo-sharing service operated as an independent product. For privacy enquiries, contact us at hello@memorifolio.net.

2. What Information We Collect

We collect only what is necessary to run the service:

• Event details — event name, host name, event date, and an optional welcome message entered when creating an event.
• Photos and videos — files uploaded by guests to the shared album.
• Uploader name — an optional name guests provide when uploading ("so the host knows who shared the photos"). This is entirely voluntary and can be left blank.
• Browser storage — we use your browser's localStorage to remember that you are the host of your event on your own device. No cookies are set. No cross-site tracking occurs.

3. How Photos Are Stored

Photos and event data are stored on Amazon Web Services (AWS) S3, currently in the Asia Pacific (Sydney) region. AWS is a globally trusted cloud infrastructure provider that maintains its own rigorous security and compliance certifications (ISO 27001, SOC 2, and others).

Each event album is accessible only via a unique, randomly generated event ID included in the album link. There is no public directory of albums — only people with the specific link can view or contribute to an album.

AWS is a data sub-processor on our behalf. For EU users, AWS provides Standard Contractual Clauses (SCCs) which provide adequate protection for data transferred outside the EEA under GDPR.

4. How Long We Keep Your Data

Event albums and all associated photos are retained for 12 months from the date the event was created, after which they are permanently and automatically deleted.

The event host can delete individual photos at any time from within the album. If you wish to request early deletion of an entire event album, contact us at hello@memorifolio.net with the event link.

5. Who Can See Your Photos

• Anyone with the album link can view photos in the album. The host controls who receives this link.
• Anyone with the upload link can add photos to the album. This link is shared by the host, typically via QR code at the event.
• The event host can delete photos from the album.
• Memorifolio does not view, analyse, sell, or share your photos with any third party, other than AWS as infrastructure provider.

6. Children's Privacy

Memorifolio is not directed at children under 13. Event photos may include images of children — for example, at birthday parties or family events. By uploading photos containing images of children, you confirm you have the consent of the child's parent or guardian to share those images within the event album.

If you believe photos of a child have been uploaded without appropriate consent, contact us at hello@memorifolio.net and we will remove them promptly.

7. Your Rights (GDPR & Privacy Laws)

If you are located in the European Economic Area (EEA), United Kingdom, or other regions with applicable privacy laws, you have the following rights:

To exercise any of these rights, email hello@memorifolio.net. We will respond within 30 days.

8. Lawful Basis for Processing (GDPR)

We process personal data on the following lawful bases:

• Consent — guests explicitly tick a consent checkbox before uploading photos, confirming the photos are theirs to share and consenting to storage in the event album.
• Legitimate interests — event hosts provide minimal details (name, event name, date) to create and manage their album, which is necessary to deliver the service.

9. Security

All data in transit is encrypted via HTTPS/TLS. Photos stored on AWS S3 are protected by AWS's infrastructure security. Event albums are accessible only via unique randomly-generated IDs — there is no public index or searchable directory of events.

No security system is perfect. We recommend event hosts share album links only with intended guests.

10. Changes to This Policy

We may update this policy as the product evolves. The "Last updated" date at the top of this page will always reflect the most recent version. For material changes, we will update this page and note what changed.