Privacy policy

Effective Date: December 7, 2025

Megatech Photos ("we", "our", "us") values your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services, including our website, applications, and related services (collectively, the "Service"). Please read this Privacy Policy carefully. By accessing or using our Service, you agree to the terms of this Privacy Policy.

1. Information We Collect

We may collect the following types of information:

1.1 Personal Information

Personal information that you voluntarily provide to us when using our Service, including but not limited to:

• Email address, phone number, and other contact details
• Account credentials (username and password)
• Uploaded photos and videos, which are end-to-end encrypted on your device prior to upload and are stored on our servers in encrypted form that we cannot read or access. Certain metadata associated with your files (e.g., file size, upload date, and file type) may be stored in unencrypted form to operate the Service.

1.2 Usage Data

Information automatically collected when you use our Service, such as:

• IP address, browser type, operating system, and device information
• Pages you visit, time and duration of your visit, clicks, and interactions
• Cookies, pixels, and similar technologies to improve user experience and analytics

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our Service
• Improve, personalize, and expand our Service
• Understand and analyze how you use our Service
• Develop new products, services, and features
• Communicate with you, including responding to inquiries and sending updates
• Ensure security and prevent fraudulent or unauthorized activity at the account and infrastructure level (we do not access the encrypted contents of your files for this purpose)
• Comply with legal obligations and enforce our terms of service

Legal Basis for Processing (GDPR)

For users in the EU/EEA/UK, we process your data under the following legal bases:

• Consent - when you opt into services or marketing
• Contract - to provide services you request
• Legitimate Interests - analytics, security, and service improvement
• Legal Obligation - compliance with applicable laws

3. Information Sharing and Disclosure

We do not sell or rent your personal information. We may share information under the following circumstances:

• With Service Providers - vendors, consultants, or others who perform services on our behalf, including cloud storage providers (e.g., AWS)
• For Legal Compliance - to comply with laws, regulations, legal processes, or enforceable governmental requests. Because your files are end-to-end encrypted and we do not hold decryption keys, any information provided in response to legal requests will be limited to account-level data and metadata (such as your name, email address, IP addresses, timestamps, and usage logs). We are unable to provide the decrypted contents of your files.
• To Protect Rights and Safety - to protect our rights, privacy, safety, or property, and that of our users or others, using account-level information and metadata. This does not include the encrypted contents of your files, which we cannot access.
• Business Transfers - in connection with mergers, acquisitions, or asset sales, information may be transferred as part of business assets

CCPA/CPRA Notice (California Residents)

• We do not sell personal information as defined under California law
• California residents may request: access, deletion, correction, or opt-out of sales/sharing (not applicable since we do not sell data)

4. Data Security

Your photos and videos are end-to-end encrypted on your device before upload. We store only encrypted ciphertext on our AWS infrastructure. We do not hold decryption keys and cannot access the contents of your files. Account information and metadata are protected using industry-standard administrative, technical, and physical security measures. No security system is infallible, but because we never possess your encryption keys, a breach of our servers would not expose the contents of your files.

5. Data Retention

• Personal information is retained only as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce agreements
• Your end-to-end encrypted photos and videos are stored on AWS as encrypted ciphertext that we cannot read. Associated metadata (file size, upload timestamps, file type) is stored separately. You may request deletion of your data at any time; we also securely delete or anonymize data when retention periods expire.
• Analytics data may be retained for up to 26 months unless otherwise required

6. Metadata & Photo Processing

• The contents of your photos and videos are end-to-end encrypted and are never accessible to us for any purpose, including AI analysis, tagging, or enhancement.
• Certain file metadata (e.g., file size, upload timestamp, file type) may be stored in unencrypted form to operate the Service. This metadata is treated as personal data and is not shared outside of service providers performing operations strictly necessary to provide the Service.
• We do not perform AI analysis, content scanning, or automated processing on the contents of your encrypted files.

7. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access and obtain a copy of your data
• Request correction of inaccurate or incomplete information
• Request deletion of your personal data, subject to legal and contractual limitations
• Withdraw consent where processing is based on your consent
• Object to certain processing activities, including marketing communications
• Request data portability, allowing transfer of your data to another service provider

To submit a request, email: [email protected]

8. Cookies and Tracking Technologies

We may use cookies, web beacons, and similar tracking technologies to enhance your experience, analyze trends, and gather demographic information. You may manage your browser settings to refuse cookies, but this may limit your ability to access certain features of our Service.

9. Third-Party Links

Our Service may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party websites you visit.

10. International Data Transfers

Your information may be transferred to, stored, and processed in countries other than your own, including AWS servers in the U.S. By using our Service, you consent to such transfers, provided appropriate safeguards are in place.

11. Children’s Privacy

Our Service is not intended for individuals under the age of 13 (or the minimum age in your jurisdiction). We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected information from a child, we will take steps to delete it promptly.

12. Breach Notification

In the event of a data breach, we will notify affected users and authorities as required by applicable laws (GDPR, CPRA, PIPEDA).

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

14. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:

• Email: [email protected]
• Phone number: +1 (647) 793-0236
• Website: www.megatechphotos.com
• Legal entity: Megatech photos

By using Megatech Photos, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and disclosure of your information as described herein.