Privacy Policy

Effective date: October 14, 2026

This Privacy Policy explains how Vigbo Development LLC («Vigbo», «we», «us» or «our») collects, uses, shares and protects personal information when you visit our websites at vigbo.pro and its subdomains, create an account or use our client gallery, website and online store services (the «Services»), and what choices and rights you have. Capitalized terms not defined here have the meanings given in our Terms of Service.

1. Who is responsible for your information

Vigbo as controller. We are responsible (the «controller») for personal information about our customers, the people who visit our own websites and the people who contact us.

Vigbo as processor. Our customers — photographers and other businesses — use the Services to share photos with and sell to their own clients. For personal information about those clients and visitors of our customers' galleries, websites and stores («End Users»), the customer is the controller and we process the information on the customer's behalf and according to its instructions (as a «processor» or «service provider»). If you are an End User, please read the privacy notice of the photographer or business whose gallery or website you visit and contact them about your information; we will help them respond to your request.

2. Information we collect

2.1. Information you give us

• Account information: name, email address, password, business name, country, and the gallery address you choose.
• Billing information: your Plan, purchases, billing address and transaction history. Card and PayPal details are entered directly with our payment processors; we receive only limited information, such as the card brand and the last four digits.
• Your Content: photos, videos, texts and other materials you upload, including information embedded in files, such as camera data and, if present, location data (EXIF).
• Communications: messages you send to our support team, survey answers and other information you choose to give us.

2.2. Information collected automatically

• Device and usage information: IP address, browser and device type, operating system, language, pages viewed, actions in the Services, dates and times, referring pages, and error reports.
• Cookies and similar technologies: see Section 9.

2.3. End User information we process for our customers

• Email address and name an End User enters to access a gallery, save favorites, leave a review or receive notifications.
• Photo selections, downloads, comments and orders, including the delivery name, address, phone number and email for prints and photo products.
• Device and usage information as described above.
• If the customer turns on AI Face Search for a gallery, face templates and face images created from the photos in that gallery (see Section 6).

2.4. Information from third parties

We receive information from payment processors (such as payment status), from services you connect to your Account (such as cloud storage you import photos from), and, if you sign in with a third-party account, the basic profile information that service shares with us under your settings.

3. How we use information

We use personal information to:

• provide, maintain and support the Services, including creating your Account, storing and delivering Your Content, and processing payments and orders;
• send you service messages, such as confirmations, invoices, renewal reminders, security alerts and support replies;
• send you news and offers about Vigbo, where permitted by law (you can unsubscribe at any time);
• understand how the Services are used and improve them, mostly using aggregated or de-identified information;
• protect the Services and our users, prevent fraud, abuse and security incidents, and enforce our Terms;
• comply with legal obligations, such as tax, accounting and sanctions laws, and respond to lawful requests from authorities.

We do not use Your Content or End User information to train generative artificial intelligence models, and we do not use End User information for our own marketing.

4. Legal bases (EEA, UK and Switzerland)

If the GDPR or a similar law applies, we process personal information on these legal bases:

• Contract — to provide the Services you signed up for and to process payments;
• Legitimate interests — to secure and improve the Services, prevent fraud and abuse, communicate with customers about our services and handle disputes, where these interests are not overridden by your rights;
• Consent — for marketing emails where consent is required, for non-essential cookies, and in other cases where we ask for it; you can withdraw consent at any time;
• Legal obligation — to comply with tax, accounting and other laws.

5. How we share information

We do not sell personal information and do not share it for cross-context behavioral advertising. We share personal information only as follows:

• Service providers who process information for us under contract: cloud hosting and storage, payment processing (such as Stripe and PayPal), email delivery, customer support chat (such as Crisp), error monitoring (such as Sentry) and analytics.
• Print and fulfillment partners who produce and ship orders, receiving the delivery details and photos needed for the order.
• Our customers — we share End User information with the photographer or business whose gallery, website or store the End User uses.
• Other users — content you choose to publish or share, such as galleries and websites, is available to the people you share it with or to the public, according to your settings.
• Legal and safety — when we believe in good faith that disclosure is required by law or legal process, or is necessary to protect the rights, property or safety of Vigbo, our users or others.
• Business transfers — in connection with a merger, acquisition, reorganization or sale of assets, subject to this Privacy Policy.
• With your consent or at your direction.

6. AI Face Search

AI Face Search is an optional feature that our customers can turn on for individual galleries. It is off by default. When it is on, we automatically detect faces in the photos of that gallery and create face templates (numerical representations of facial features) and small face images. We use them only to group photos of the same person within that customer's account and to let gallery visitors find photos by selecting a person. We do not use face templates to identify people by name, we do not use them for any other purpose, and we do not sell or share them except with our service providers that help us run the feature.

Face data is kept only while the gallery exists and is deleted when the gallery is permanently deleted from the Services. The customer is responsible for informing the people in the photos and obtaining their consent where required by law. The feature may not be used for people located in the State of Illinois. If you want your face data removed from a gallery, contact the photographer or write to us at [email protected].

7. International data transfers

We and our service providers process information in several countries, which may be different from the country where you live and may not provide the same level of data protection. When we transfer personal information from the European Economic Area, the United Kingdom or Switzerland to countries that are not recognized as providing adequate protection, we rely on the Standard Contractual Clauses approved by the European Commission (and the corresponding UK and Swiss instruments) or another lawful transfer mechanism, together with additional safeguards where appropriate.

8. How long we keep information

• Account information — while your Account is open, and for up to 30 days after it is closed, unless we need to keep it longer for the purposes below.
• Your Content and End User information — until you delete it, until the storage period you set for a gallery expires, or until your Account is closed. Deleted galleries remain in Trash for 30 days before permanent deletion. Copies may remain in backups for a limited period before they are overwritten.
• Billing and transaction records — for as long as required by tax and accounting laws.
• Support communications and logs — for as long as needed to resolve the request and protect the Services, and then deleted or de-identified.
• Information needed for legal claims or compliance — for as long as required by law or necessary to establish, exercise or defend legal claims.

9. Cookies and similar technologies

We use cookies and similar technologies that are necessary for the Services to work (for example, to keep you signed in and remember your settings) and to understand how the Services are used and fix errors. Where the law requires consent for non-essential cookies, we ask for it. You can control cookies in your browser settings; blocking necessary cookies may prevent parts of the Services from working.

Our customers may add their own analytics or other tools to their galleries and websites; those tools are controlled by the customer and covered by the customer's privacy notice.

Do Not Track and Global Privacy Control. Our websites do not respond to Do Not Track signals because there is no common standard for them. We do not sell personal information or share it for cross-context behavioral advertising, so there is nothing to opt out of; where the law requires it, we treat a Global Privacy Control signal as a request to opt out of such sale or sharing.

10. Your rights and choices

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict certain processing, to withdraw consent, and to not be discriminated against for exercising your rights. You can update most Account information in your Account settings.

To exercise your rights, write to [email protected] from the email address of your Account, or describe how we can verify your identity. You may use an authorized agent where the law allows. We will respond within the time required by applicable law. If we decline your request, you may ask us to reconsider by replying to our decision, and you may have the right to appeal or to contact your data protection authority or state attorney general.

If you are in the European Economic Area, the United Kingdom or Switzerland, you have the right to lodge a complaint with your local data protection authority.

If you are an End User of one of our customers, please send your request to that customer; if you contact us, we will forward your request to them where possible.

Marketing emails. You can unsubscribe from marketing emails at any time using the link in each email or in your Account settings. We will still send you service and billing messages.

11. Children

The Services are intended for adults and are not directed to children under 18. We do not knowingly collect personal information from children under 13 (or under 16 in the EEA and the UK). If you believe a child has given us personal information, contact us at [email protected] and we will delete it.

Our customers may upload photos of children, for example family or school photography. In that case the customer is responsible for obtaining the consent of the parents or guardians where required, and we process those photos only on the customer's behalf.

12. Security

We use administrative, technical and physical safeguards designed to protect personal information, including encryption in transit, access controls and monitoring. No service is completely secure, and we cannot guarantee the security of information. If a security incident affects your personal information, we will notify you and the authorities as required by law.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page with a new effective date and, if the changes are material, notify you by email or in your Account before they take effect.

14. Contact us

If you have questions about this Privacy Policy or our privacy practices, or want to exercise your rights, contact us: