Privacy Policy

WEBGram collects the following information to provide our event photography services:

• Account information — your name and email address when you sign up.
• Photos — images you upload to event galleries.
• Face data — when you use “Find Yourself,” we process a selfie to match your face against event photos. Face data is used only for matching within that event and is never sold, shared with third parties, or used for surveillance.
• Device identifiers — for guest sessions (no-login access), we store a random device ID to maintain your session.
• Payment information — processed securely by Stripe. We never see or store your card details.

Face matching (“Find Yourself”) is our headline feature, and we take its privacy implications seriously:

• Consent-first — face search only runs after you explicitly consent. You will see a clear notice before your first search explaining what happens.
• Purpose-limited — face data is used exclusively to find photos of you within the specific event. It is never used for identification, advertising, or profiling.
• No third-party sharing — your face data is never shared with, sold to, or made available to any third party.
• Deletion — you can request deletion of all face data at any time from your account settings or by contacting us. Event organisers can also clear face data when an event ends.

This approach complies with the Australian Privacy Act 1988 (including APP 3, 6, and 11) regarding sensitive information (biometric data). For EU visitors, processing is based on explicit consent per GDPR Article 9(2)(a).

• Photos and data are stored on secure cloud infrastructure (AWS) with encryption at rest and in transit.
• Access to data is restricted to the event organiser and participants. Admin access is limited to platform operators for support and maintenance.
• We retain event data for 60 days after the event date at no charge. After that, retention requires the organiser to maintain a token balance. Events without a balance are locked, and data is permanently deleted 14 days after locking.

You have the right to:

• Access — request a copy of the data we hold about you.
• Delete — request deletion of your photos, face data, or entire account. Use the Delete My Data page or email us.
• Withdraw consent — you can stop using face search at any time. Previously matched results remain visible in the event gallery, but we will delete your face embeddings on request.
• Report content — if a photo violates your privacy or is inappropriate, use the report button on any photo in the gallery. The event organiser will review and can remove it.

For privacy questions, data requests, or concerns:

Contact form or email [email protected]

We aim to respond to all privacy requests within 30 days.