Privacy Policy

What this policy covers

This Privacy Policy explains what personal data is processed when you use the services offered through Ricordly (“we”, “the platform”), why we process it, and what rights you have. It covers both event owners and guests who upload photos via a QR code.

Who is the data controller?

Data controller: Ricordly. Email: support@ricordly.com.

What data do we collect?

• Event owners: full name, email address, billing name and email, event details (name, date, type).
• Guests uploading photos: uploaded photos, an optional name and note, and a device/browser fingerprint generated at upload time to prevent abuse.
• Technical data: IP address, browser information, session cookies, Cloudflare Turnstile verification result.
• At checkout: billing name, email address, and the transaction result relayed to us by the payment provider. Your card details never pass through our servers; they are processed directly by the payment provider.

Why do we process this data?

• Providing the service: creating events, generating QR codes, storing and displaying photos.
• Security: preventing quota abuse, automated requests, and misuse.
• Completing payments and billing.
• Responding to support requests.
• Complying with legal obligations.

Who do we share data with?

Your data is only shared with the service providers necessary to operate the platform: our database and authentication infrastructure (Supabase), our photo storage infrastructure (Cloudflare R2), our bot/abuse protection (Cloudflare Turnstile), and our payment provider (iyzico) for transactions. These providers' servers may be located in Turkey or abroad; in that case, data is transferred in accordance with applicable law. Your data is never sold to third parties for marketing purposes.

Are photos used for advertising or AI training?

No. Uploaded photos are stored solely to be shown to and downloaded by the event owner. Photos are never used for advertising, marketing examples, or AI/model training.

How long do we keep data?

Event photos are kept for the upload and retention period specified in the purchased package, after which they are automatically deleted. Account and billing information is retained for as long as required by applicable law (e.g. tax regulations).

Cookies

The platform uses strictly necessary cookies to maintain your session (sign-in, guest upload session). We do not use third-party advertising or tracking cookies.

Your rights

For your rights under Law No. 6698 on the Protection of Personal Data (KVKK), please see our KVKK Disclosure Notice.

Contact

For questions about this policy, contact us at support@ricordly.com.