Privacy Policy

This Privacy Policy explains what information Galrivo collects from you, how we use it, and what rights you have over it. We have written this in plain language on purpose. If anything is unclear, just get in touch.

Who we are

Galrivo is a web application that lets anyone turn the photos and videos in their Google Drive into shareable galleries. We are the data controller for personal information collected through our service at galrivo.com.

What information we collect

Information you give us directly

• Your name and email address when you create an account
• The display name you choose for your galleries (for example your name, family name, or studio name)
• A password (stored as a one-way hash, which means we cannot read it)
• Gallery settings such as titles, descriptions, passwords, and expiry dates
• Optional profile details you add for your public studio profile: a tagline, an “about” description, a location and (if you add one) a studio address, a contact email, phone number, website, Instagram handle, and a featured Instagram post link. For locations you pick from our place suggestions we also store the map coordinates so we can link or show a map

Information from Google

When you connect your Google account, we receive a sign-in credential that lets us access only the specific files you pick using Google's file picker (Google's drive.file permission). We do not gain access to anything else in your Drive. We use this access only to read those files and display them in your galleries; we never modify, move, rename, or delete anything. We store this credential in encrypted form. We do not receive or store your Google password.

When you sign in with Google, or when you connect a Google Drive, we also receive your Google account's name, email address, and profile picture. We use these to identify the account and to label the Drive you connected.

For each gallery we store the IDs of the files you picked, your gallery settings, and the cover image's thumbnail link from Google so we can show you a preview tile. We do not store the files themselves. When a gallery is viewed, thumbnails load from Google directly, and full-size photos, videos, and downloads are streamed from your Drive through Galrivo on demand and never saved on our servers.

Your public studio profile

You can turn on a public profile at your chosen web address (for example yourname.galrivo.com). Anything you add to it and choose to show, your display name, tagline, about text, location, contact details, social links, a map of your studio, or a featured Instagram post, becomes publicly visible to anyone who visits that address. You control whether the profile is public or private, and which galleries appear on it, from your dashboard. If you do not want a contact detail shown publicly, leave it off your profile or keep your profile private.

Information collected automatically

• Your IP address. We store it with your login sessions and gallery-access sessions for security, and we store it only as an irreversible hash in our gallery view and download logs
• Your browser type and device type, used for security and to understand how the app is used
• Gallery view counts and access times, shown to you in your dashboard
• Login timestamps and the device you logged in from, for security purposes

Information about people who view your galleries

When someone opens a gallery you have shared, we log the visit, and any download or password attempt, along with their IP address and browser/device type. We also place a session cookie in their browser so they do not have to re-enter a gallery password on every visit. We use this only to run the gallery, show you view counts, and keep galleries secure.

What we do NOT collect or store

• Your actual photos, videos, or any files from your Google Drive
• Any access to files in your Drive that you have not explicitly picked for a gallery
• Your Google Drive file metadata beyond what is needed to display your gallery
• Payment card information. Galrivo is currently free; if we add paid plans, card details will be handled entirely by a third-party payment processor and never stored by us
• Your contacts or address book

How we use your information

• To provide, maintain, and improve the Galrivo service
• To authenticate you and keep your account secure
• To display your galleries and serve photos and videos from your Google Drive to authorised viewers
• To send you account-related emails (security alerts, receipts)
• To respond to your support requests
• To comply with legal obligations

We do not sell your data. We do not use your data for advertising. We do not share it with third parties except as described in this policy.

Who we share data with

Google

We use the Google Drive API to read the files you picked when a gallery is accessed. This is the core function of the service. The privacy practices of Google are governed by the Google Privacy Policy.

Infrastructure providers

We use third-party cloud infrastructure to host the service (servers, databases). These providers process data on our behalf under strict data processing agreements and do not have access to your data for their own purposes.

Maps and location lookups

When you search for a location or studio address, we send what you type to the Google Places service to suggest matching places, and store only the place you pick and its coordinates. If you choose to show a map of your studio on your profile, that profile page also embeds a Google Maps view of those coordinates. Google may collect data as described in the Google Privacy Policy.

Website and Instagram on your profile

If you add a website, your profile shows a small link card using a favicon fetched by the visitor's browser from Google's public favicon service (our servers do not fetch your site). If you add an Instagram handle or link and switch it on, the profile shows a Follow card, or, for a public post or reel, embeds it using Instagram's own embed code loaded by the visitor's browser. Embedded Instagram content loads directly from Instagram and may set cookies and collect data under Instagram's own policies.

Legal requirements

We may disclose your information if required by law, court order, or to protect the rights and safety of our users or the public.

Google API Services User Data Policy

Galrivo's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In plain language, that means:

• We use the Google account data we receive (your profile, and the specific files you explicitly pick) only to provide and improve the user-facing gallery features of Galrivo.
• We do not transfer this data to anyone else except as needed to run the service (for example, our cloud hosting provider), or where required by law.
• We do not use Google user data for advertising of any kind, including retargeting, personalised, or interest-based advertising.
• We do not allow humans to read your Google user data, except (a) with your explicit consent (for example to help debug an issue you reported), (b) when necessary for security or to comply with the law, or (c) in aggregated, anonymised form for internal statistics that cannot identify you.

Data retention

We keep your account data for as long as your account is active. If you delete your account, we delete your personal data within 30 days, except where we are required to keep it for legal or accounting purposes.

Gallery view logs are retained for up to 12 months for security and analytics purposes, then automatically deleted.

Your rights

Depending on where you live, you may have rights including the right to access, correct, export, or delete your personal data. To exercise any of these rights, contact us at the address below. We will respond within 30 days.

• Access: You can see most of your data directly in your account settings
• Correction: Update your name, display name, and any profile or contact details any time in your dashboard
• Deletion: Delete your account from settings or by emailing us
• Portability: Email us and we will send you a copy of your data
• Objection: Email us if you believe we are processing your data improperly

Cookies

We use a small number of cookies to keep you logged in and to remember your preferences. See our Cookie Policy for details.

Security

We take reasonable technical and organisational measures to protect your data. Your Google sign-in credentials are stored with industry-standard encryption. Gallery passwords are stored as one-way hashes. All data is transmitted over HTTPS.

No method of transmission over the internet is 100% secure. We cannot guarantee absolute security, but we will notify you promptly if we become aware of any breach affecting your account.

Changes to this policy

If we make significant changes to this policy, we will notify you by email and update the date at the top of this page. Continued use of Galrivo after any changes means you accept the updated policy.