Privacy policy

Last updated October 17, 2026

Fotelie, Cyprus, is responsible (the controller) for the personal data of photographers who use Eide. For the data of a photographer’s clients — names, emails, favourites, comments, and the people in the photos — the photographer is the controller and Eide processes it on their behalf (as a processor, under Article 28 GDPR).

What we collect

Account data: your name, email, password (stored hashed), studio name, logo and contacts.
Content: the photos you upload, their metadata (camera, date; GPS is removed from previews), galleries and settings.
Your clients’ data, when they use a gallery: the name and email they give to save favourites, their favourites and comments.
Usage: views and downloads per gallery. Visitors are counted with a daily-changing anonymous code; we do not store their IP address with it.
Billing: your plan and invoices. Card details are handled by Stripe and never reach us.

Why, and on what basis

To provide Eide under our contract with you (Art. 6(1)(b) GDPR).
To keep it secure, prevent abuse and improve it, a legitimate interest (Art. 6(1)(f)).
To keep invoices as the law requires (Art. 6(1)(c)).

Where it is kept, and who helps us

Photos are stored in the European Union. We use carefully chosen processors: cloud storage and delivery (Cloudflare), email delivery, and payments (Stripe). Where data leaves the EU, it is protected by the EU Standard Contractual Clauses or an adequacy decision.

How long

As long as your account exists. Galleries you delete are removed with their files after 7 days in the trash; invoices are kept as long as tax law requires.

Your rights

You may ask to access, correct, delete or receive a copy of your data, object to or restrict its use, and complain to a supervisory authority (in Cyprus: the Commissioner for Personal Data Protection). Write to [email protected]. Clients of a photographer should contact the photographer first; we will help them answer.