Privacy policy

Effective Date: December 7, 2025

Megatech Photos ("we", "our", "us") values your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services, including our website, applications, and related services (collectively, the "Service"). Please read this Privacy Policy carefully. By accessing or using our Service, you agree to the terms of this Privacy Policy.

1. Information We Collect

We may collect the following types of information:

1.1 Personal Information

Personal information that you voluntarily provide to us when using our Service, including but not limited to:

• Email address
• Account credentials (username and password)
• Uploaded photos and videos, along with their associated metadata, are end-to-end encrypted on your device prior to upload. We store only encrypted data and do not have access to file contents or associated metadata.

1.2 Usage Data

Information automatically collected when you use our Service, such as:

• IP address, browser type, operating system, and device information
• Pages you visit, time and duration of your visit, clicks, and interactions
• Cookies, pixels, and similar technologies to improve user experience and analytics
• Usage data does not include the contents of your files or any encrypted metadata.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our Service
• Improve, personalize, and expand our Service
• Understand and analyze how you use our Service
• Develop new products, services, and features
• Communicate with you, including responding to inquiries and sending updates
• Ensure security and prevent fraudulent or unauthorized activity at the account and infrastructure level (we do not access the encrypted contents of your files for this purpose)
• Comply with legal obligations and enforce our terms of service

Legal Basis for Processing (GDPR)

For users in the EU/EEA/UK, we process your data under the following legal bases:

• Consent - when you opt into services or marketing
• Contract - to provide services you request
• Legitimate Interests - analytics, security, and service improvement
• Legal Obligation - compliance with applicable laws

3. Information Sharing and Disclosure

We do not sell or rent your personal information. We may share information under the following circumstances:

• With Service Providers - vendors, consultants, or others who perform services on our behalf, including cloud storage providers (e.g., AWS)
• For Legal Compliance - to comply with laws, regulations, legal processes, or enforceable governmental requests. Because your files are end-to-end encrypted and we do not hold decryption keys, any information provided in response to legal requests will be limited to account-level information such as email address, account identifiers, and basic usage logs. We do not have access to the contents of your files or their encrypted metadata.
• To Protect Rights and Safety - to protect our rights, privacy, safety, or property, and that of our users or others, using account-level information (such as email, account identifiers, and service usage logs). This does not include the encrypted contents of your files, which we cannot access.
• Business Transfers - in connection with mergers, acquisitions, or asset sales, information may be transferred as part of business assets

CCPA/CPRA Notice (California Residents)

• We do not sell personal information as defined under California law
• California residents may request: access, deletion, correction, or opt-out of sales/sharing (not applicable since we do not sell data)

4. Data Security

Your photos and videos are end-to-end encrypted on your device before upload. We store only encrypted ciphertext on our AWS infrastructure. We do not hold decryption keys and cannot access the contents of your files. Account information is protected using industry-standard administrative, technical, and physical security measures. We do not have access to file contents or metadata in any form. No security system is infallible, but because we never possess your encryption keys, a breach of our servers would not expose the contents of your files. This includes both file contents and associated metadata, which remain encrypted and inaccessible to us at all times.

4.1 Account Recovery and Encryption Notice

Megatech Photos uses end-to-end encryption where encryption keys are derived from your account credentials and/or securely stored on your device. As a result, we do not have access to your encryption keys and cannot decrypt your data.

If you forget your password, your data cannot be recovered by us. However, if you have securely stored your recovery key, you may use it to reset your password and regain access to your account and encrypted data.

If both your password and recovery key are lost, your account and all associated encrypted data will be permanently inaccessible and cannot be recovered by Megatech Photos.

You are solely responsible for securely storing your password and recovery key.

5. Data Retention

• Personal information is retained only as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce agreements
• Your end-to-end encrypted photos and videos are stored on AWS as encrypted ciphertext that we cannot read. All associated metadata is end-to-end encrypted on the user’s device before upload and is not accessible to us in any form. You may request deletion of your data at any time. We also securely delete or anonymize data when retention periods expire.
• Analytics data may be retained for up to 26 months unless otherwise required

6. Metadata & Photo Processing

• The contents of your photos and videos, along with all associated metadata, are end-to-end encrypted on your device before upload.
• We store only encrypted data and have no ability to access or process it in any form.
• We do not perform AI analysis, content scanning, or automated processing on your files or metadata.

7. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access and obtain a copy of your data
• Request correction of inaccurate or incomplete information
• Request deletion of your personal data, subject to legal and contractual limitations
• Withdraw consent where processing is based on your consent
• Object to certain processing activities, including marketing communications
• Request data portability, allowing transfer of your data to another service provider

To submit a request, email: [email protected]

8. Cookies and Tracking Technologies

We may use cookies, web beacons, and similar tracking technologies to enhance your experience, analyze trends, and gather demographic information. You may manage your browser settings to refuse cookies, but this may limit your ability to access certain features of our Service.

9. Third-Party Links

Our Service may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party websites you visit.

10. International Data Transfers

Your encrypted data and account-level information may be transferred to, stored, and processed in countries other than your own, including AWS servers in the U.S.

11. Children’s Privacy

Our Service is not intended for individuals under the age of 13 (or the minimum age in your jurisdiction). We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected information from a child, we will take steps to delete it promptly.

12. Breach Notification

In the event of a data breach, we will notify affected users and authorities as required by applicable laws (GDPR, CPRA, PIPEDA).

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

14. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:

• Email: [email protected]
• Phone number: +1 (647) 793-0236
• Website: www.megatechphotos.com
• Legal entity: Megatech photos

By using Megatech Photos, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and disclosure of your information as described herein.