Privacy Policy

Last updated: Dec 31, 2025

This Privacy Policy explains how BuildAGallery, operated by Ivan Gavrilov ("we"), processes personal data.

1. Who We Are

• Controller: Ivan Gavrilov
• Address: Viktorine Strasse 4, 4780 Sankt Vith, Belgium
• Email: [email protected]

2. Data We Collect

Account Data

• Name
• Email address
• Encrypted password

Uploaded Content

• Photos, videos, and audio files
• Metadata and AI-generated text (transcriptions, titles, summaries)

Technical Data

• IP address
• Log data
• Usage statistics

3. Purpose of Processing

We process data to:

• provide and operate the Service
• manage accounts and subscriptions
• generate AI features on request
• ensure security and prevent abuse

4. Legal Basis

Processing is based on:

• contract performance
• legitimate interests (security, analytics)
• legal obligations

5. Storage & Infrastructure

Data is hosted on DigitalOcean infrastructure in Frankfurt, Germany (FRA1).

Weekly backups are performed.

6. AI Processing & Sub-Processors

We use the following third-party providers to operate our service:

• DigitalOcean (Cloud infrastructure and data storage)
• Paddle.com (Payment processing, billing, and tax compliance)
• OpenAI (Audio transcription and text generation features)

These providers act as sub-processors. Content is processed only to provide requested features.

7. Payment Processing

We do not collect or store your payment card details. All payments are processed by Paddle, our Merchant of Record. Your payment information is provided directly to Paddle, and their use of your personal information is governed by their Privacy Policy: https://www.paddle.com/legal/privacy.

8. Cookies and Similar Technologies

BuildAGallery uses essential cookies required for authentication, security, and basic functionality, such as maintaining user sessions and storing user preferences (e.g. language or theme).

We do not use advertising or tracking cookies.

We use Plausible Analytics to collect anonymous usage statistics. Plausible does not use cookies and does not track users across websites.

By using the Service, you consent to the use of essential cookies.

9. Analytics

We use Plausible Analytics, self-hosted, which does not use tracking cookies.

10. Data Retention

Data is retained as long as your account remains active, or as required by law. You may request deletion at any time.

11. Your Rights (GDPR)

You have the right to:

• access your data
• correct inaccuracies
• request deletion
• restrict or object to processing
• data portability

Requests can be sent to [email protected].

12. Security

We implement appropriate technical and organizational measures to protect data.

13. Changes

We may update this policy. Changes will be posted on the website.