Chính sách Bảo mật

CandidCrowd is an online event photo and video sharing service operated from Hanoi, Vietnam.

For privacy-related questions or requests, contact:

Where applicable, CandidCrowd acts as the controller of personal information collected directly through the Service.

In some situations, an event host determines how guest content is collected or subsequently used.

Host account information

When you create a CandidCrowd account, we may collect:

• name;
• email address;
• profile image;
• account identifiers;
• authentication provider;
• account creation date;
• login and security information.

Authentication may be provided by Clerk and identity providers such as Google or Apple.

Event information

When a host creates or manages an event, we may collect:

• event name;
• event date;
• event type;
• expected guest count;
• event settings;
• event theme;
• QR source information;
• event configuration.

Guest information

Guests do not need to create an account.

When a guest opens or contributes to an event, we may process:

• anonymous guest/session identifier;
• IP address;
• browser type;
• device type;
• operating system;
• approximate network information;
• access timestamps;
• upload timestamps;
• QR source or referral source;
• security and abuse-prevention information.

We do not require guests to provide their real name or email address merely to upload event media.

Photos and videos

We process photos and videos uploaded to events. This may include:

• the media itself;
• file name;
• file type;
• file size;
• image dimensions;
• video duration;
• technical metadata required to process and deliver the file.

Uploaded files may contain metadata generated by the camera or device used to create them. Where practical, CandidCrowd may remove unnecessary metadata from optimized media versions.

Usage information

We may collect product usage information including:

• pages visited;
• event opens;
• QR scans;
• upload attempts;
• completed uploads;
• failed uploads;
• gallery interactions;
• feature usage;
• error information;
• security logs.

Payment information

If you purchase a paid plan, payment and billing information may be handled by a third-party payment processor.

CandidCrowd does not intend to store complete payment card numbers. We may retain:

• transaction identifier;
• plan purchased;
• transaction amount;
• transaction date;
• billing status;
• invoice information.

We use information to:

• create and manage host accounts;
• authenticate users;
• create and operate events;
• receive guest uploads;
• store and display photos and videos;
• generate guest links and QR codes;
• operate event galleries;
• provide Live Wall functionality;
• calculate event participation metrics;
• provide upload status and reliability features;
• process payments;
• provide support;
• prevent fraud and abuse;
• maintain security;
• diagnose errors;
• improve product reliability;
• send important service communications;
• comply with applicable law.

Where permitted by law, we may also send marketing communications to account holders. Marketing emails will include an unsubscribe mechanism.

Where GDPR, UK GDPR, or similar privacy laws apply, we may rely on the following legal bases:

Contract

We process information where necessary to provide CandidCrowd to account holders and customers.

Legitimate interests

We may process limited information where reasonably necessary for securing the Service, preventing fraud, preventing abuse, diagnosing technical failures, improving reliability, and understanding aggregate product usage.

Consent

We rely on consent when required, including for optional marketing, optional analytics cookies, future biometric features, or other processing where applicable law requires consent.

Legal obligations

We may process or retain information where required by law.

Event media frequently contains people other than the person uploading it.

Hosts and uploaders are responsible for ensuring that their collection and use of event media is lawful and appropriate.

If you appear in content stored on CandidCrowd and believe that the content violates your privacy or other rights, contact:

privacy@candidcrowd.com

Please provide enough information for us to locate the relevant event or media.

CandidCrowd does not currently use facial recognition to identify guests.

CandidCrowd does not intentionally create biometric identity profiles from event photos as part of the current product.

If facial-search or biometric functionality is introduced in the future, we will update this Privacy Policy and implement additional notices, controls, and consent mechanisms where required.

CandidCrowd does not sell personal information for money.

We may share information with service providers necessary to operate the Service, including providers for authentication, infrastructure, cloud storage, media processing, email delivery, error monitoring, analytics, payment processing, and customer support.

Current infrastructure may include:

Clerk

Used for host authentication and account management.

Cloudflare

Used for infrastructure, security, content delivery, and Cloudflare R2 object storage.

Google and Apple

Used when users choose Google or Apple authentication.

Service providers receive only the information reasonably necessary for the applicable service.

Depending on an event's settings:

• the host may view uploaded media;
• the host may download uploaded media;
• the host may see contribution statistics;
• other invited guests may view media;
• uploaded media may appear on a Live Wall.

CandidCrowd does not make private event media publicly searchable by default.

CandidCrowd serves users internationally.

Some of our service providers may process information outside Vietnam or outside the country in which a user lives.

Where required by applicable privacy law, appropriate safeguards will be used for international transfers.

We do not keep personal information longer than reasonably necessary.

Free event media

Media associated with free events is normally retained for up to 30 days after the event date.

Paid event media

Media associated with paid consumer events is normally retained for up to 12 months after the event date.

Deleted or expired events

When an event is deleted or expires, active media may remain in a deletion queue for up to 30 days.

Encrypted backup copies may remain for up to an additional 60 days before being overwritten or permanently deleted.

Account information

Account information is normally retained while the account remains active. Following a valid account deletion request, account data normally enters a deletion process within 30 days.

Security logs

Security, fraud-prevention, authentication, and abuse-prevention logs may be retained for up to 24 months.

Support communications

Customer support communications may be retained for up to 3 years after the issue is resolved where reasonably necessary for support history or dispute resolution.

Transaction and accounting records

Transaction, invoice, tax, and accounting records may be retained for up to 10 years where required for accounting, taxation, audit, or legal obligations.

We use technical and organizational measures intended to protect personal information. Measures may include:

• HTTPS encryption;
• private object storage;
• access controls;
• authentication;
• short-lived signed media upload URLs;
• secure session management;
• logging;
• rate limiting;
• abuse prevention;
• restricted administrative access.

Event media stored using Cloudflare R2 is kept in private storage unless specific delivery access is granted.

No online service can guarantee absolute security.

CandidCrowd may use cookies and similar technologies.

Essential cookies

Essential cookies may be used for authentication, session management, fraud prevention, security, and core product functionality. These are necessary for the Service to operate.

Optional cookies

CandidCrowd may later use optional analytics or marketing tools. Where applicable law requires consent, optional cookies will not be activated until the user has provided the required consent. Users will be able to change applicable cookie preferences.

CandidCrowd may collect privacy-conscious product analytics to understand page usage, event creation, upload success, conversion funnels, and technical failures.

We will not intentionally use event photos themselves for advertising profiling.

If third-party advertising or behavioral analytics tools are introduced, this Privacy Policy and relevant consent controls will be updated.

CandidCrowd may introduce optional automated features such as:

• duplicate detection;
• blur detection;
• image quality ranking;
• event categorization;
• highlight selection.

Where these features process event media, the processing will be limited to providing requested CandidCrowd functionality.

CandidCrowd does not currently use customer event photos to train a general-purpose public AI model.

If this practice changes, we will provide appropriate notice before doing so.

Depending on where you live, you may have rights to:

• access personal information;
• obtain information about processing;
• correct inaccurate information;
• request deletion;
• restrict certain processing;
• object to certain processing;
• request data portability;
• withdraw consent;
• opt out of marketing.

To exercise a privacy right, contact: privacy@candidcrowd.com

We may need to verify your identity before completing a request. We aim to respond within the timeframe required by applicable law.

If you uploaded media as a guest and want it removed, you may:

• use an available guest deletion function;
• contact the event host; or
• contact privacy@candidcrowd.com.

If you appear in media uploaded by someone else and believe that it should be removed, contact privacy@candidcrowd.com. We may request information necessary to identify the relevant event and content.

Where applicable California privacy law applies, eligible users may have rights including:

• the right to know;
• the right to access;
• the right to correct;
• the right to delete;
• the right to opt out of certain sales or sharing;
• the right not to be discriminated against for exercising privacy rights.

CandidCrowd does not currently sell personal information for money. CandidCrowd does not currently share personal information for cross-context behavioral advertising.

If these practices change, this Policy and applicable controls will be updated.

CandidCrowd is not designed as a service directed specifically to children.

Account holders must be at least 18 years old or the age of legal majority where they live.

Photos and videos uploaded to events may contain children because children may attend real-world events. Hosts and uploaders are responsible for ensuring that content involving minors is collected and shared appropriately.

Hosts may request deletion of:

• their account;
• individual events;
• associated event media.

Deleting an event may permanently remove guest media associated with that event after the deletion period. Before deleting an event, hosts should download any media they wish to keep.

Certain limited records may remain where necessary for fraud prevention, security, dispute resolution, accounting, taxation, or compliance with law.

If we become aware of a personal-data breach, we will investigate and take reasonable steps to contain and remediate the issue.

Where applicable law requires notification to affected individuals or regulatory authorities, we will provide the required notification.

CandidCrowd may contain links to external websites or services. CandidCrowd is not responsible for the privacy practices of external services. Their use is governed by their own privacy policies.

We may update this Privacy Policy as CandidCrowd develops.

Material changes will be communicated where appropriate.

The latest revision date appears at the top of this page.

If you have concerns about how CandidCrowd handles personal information, contact:

privacy@candidcrowd.com

Depending on where you live, you may also have the right to submit a complaint to an applicable data protection or consumer protection authority.

For privacy questions, deletion requests, data-access requests, or other privacy matters:

For general product and billing support: