Privacy rights and regulatory contact

Your rights

Depending on the legal basis and your circumstances, you may request access, correction, erasure, restriction, objection or portability, and withdraw consent without affecting earlier lawful processing.

• Signed-in users can download account and personal metadata from Profile. Image binaries are excluded; the export explains photo metadata and retention.
• Signed-in users can create and explicitly confirm an account-deletion request, then cancel it during the seven-day grace period.
• Guest photo workspaces remain controlled by their private owner or recovery capability, which provides separate export and deletion controls.

Identity, timing and retained records

We may request proportionate identity evidence before disclosing or deleting data. Confirmed account deletion enters an operator-reviewed queue; it is not an immediate hard delete. Some payment, tax, fraud-prevention, security or legal-claim records may have to be retained, restricted and documented.

Complaint

The operator is established in Málaga, Spain. You may complain to the Spanish Data Protection Agency (AEPD) or the supervisory authority where you live, work or believe an infringement occurred. Contacting us first is optional.