1. Introduction
like.photos ("we", "us", "our", or the "Service Provider") is operated by Oleksandr Liashenko, Individual Entrepreneur (FOP) registered under the laws of Ukraine, and provides the like.photos website and service. This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use our service and the choices you have associated with that data.
2. Information Collection and Use
We collect several different types of information for various purposes to provide and improve our service to you.
Types of Data We Collect:
- Account information: Email address (used as your login), name, password (stored as a salted hash, so we never see your actual password)
- Photo files and previews: The photos you upload, their resized preview versions, original filenames, and file size. We do NOT extract or store EXIF metadata (camera info, GPS coordinates), we strip it during processing.
- Client interactions: Email addresses of clients you invite, their photo selections (which photos they liked), messages they leave for you
- Subscription data: Active plan, billing period, invoice history, the last 4 digits and card brand of your payment card, and a payment token issued by Monobank that allows us to charge your card for subscription renewals. We never receive or store full card numbers, CVV codes, or card expiry dates. You can revoke the payment token at any time by cancelling auto-renewal in your account settings.
- Service usage: IP address, browser type, referring URL, pages visited, errors encountered. Used to debug issues and improve the Service.
- Cookies: See section 6b below for full details.
3. Use of Data
like.photos uses the collected data for various purposes:
- To provide and maintain our service
- To notify you about changes to our service
- To allow you to participate in interactive features
- To provide customer care and support
- To gather analysis or valuable information to improve our service
- To monitor the usage of our service
- To detect and prevent fraudulent transactions and other illegal activities
4. Legal Bases for Processing (GDPR)
Where the GDPR applies to you, we process your personal data on the following legal bases:
- Performance of a contract (Art. 6(1)(b)): account creation, providing access to the Service, storing and delivering your galleries, processing payments, issuing invoices, and providing support.
- Legal obligation (Art. 6(1)(c)): retaining accounting and tax records as required by Ukrainian law.
- Legitimate interests (Art. 6(1)(f)): keeping the Service secure, preventing fraud and abuse, debugging errors, and improving the Service. We balance these interests against your rights and do not use your data for advertising or profiling.
- Consent (Art. 6(1)(a)): where we ask for it explicitly, for example if we introduce optional analytics in the future. You may withdraw consent at any time.
5. Security of Data
The security of your data is important to us, but remember that no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security.
6. Photo Storage and Retention
Photos and projects are retained according to your subscription plan. The exact retention period for active and archived projects on each plan is published on the Subscription page at like.photos/Subscription and shown in your account settings.
- Active projects: Retained while your subscription is active
- Archived projects: Retained for the period defined by your plan, then permanently deleted. You can extend retention for an individual project before it expires, and we notify you by email before deletion.
- Deleted projects: Permanently removed from our systems and not recoverable
- Photos are stored in secure cloud infrastructure (Cloudflare R2)
Account data: If you delete your account, your account record, galleries, and uploaded photos are permanently deleted within 30 days. Invoices and payment records are retained for 3 years as required by Ukrainian accounting and tax law.
6b. Cookies We Use
- Authentication cookies (essential): Keep you logged in. Expire after 30 days of inactivity. Cannot be disabled while using the Service.
- Preference cookies (essential): Remember your settings like theme and language. Expire after 1 year.
- Client gallery tokens (essential): When clients open a shared gallery link, a small token is stored in their browser so they don't have to re-enter the access code. Expires when the gallery does.
We do NOT use third-party tracking cookies (Google Analytics, Facebook Pixel, etc.). We do NOT sell your data to advertisers. If we add analytics in the future, we will update this list and request your consent first.
7. Data Sharing and Sub-Processors
We do not sell or trade your personal information. We share data only with the following sub-processors that help us operate the Service:
- Cloudflare (R2 storage): Stores your uploaded photo previews and ZIP archives. Servers in EU/US. Privacy policy
- Brevo (email): Sends transactional emails (verification codes, notifications). Servers in EU (France). Privacy policy
- Monobank (payments): Processes subscription payments. Servers in Ukraine. Privacy policy
- Base44 (platform): Application hosting and database. Privacy policy
All sub-processors have signed Data Processing Agreements with us where required. We may add or change sub-processors with notice on this page. If you have specific concerns about any sub-processor, contact us before subscribing.
International transfers: Some of our sub-processors may process data outside the European Economic Area, including in the United States. Where this happens, the transfer is covered by an appropriate safeguard under Chapter V of the GDPR, either the EU-US Data Privacy Framework where the provider is certified, or Standard Contractual Clauses approved by the European Commission. You may request details of the safeguards applied by contacting privacy@like.photos.
8. Client Access to Photos
When you share a gallery with clients via a share link or access code, those clients can view and select photos you've shared. Client data is stored securely and used only to facilitate the selection and delivery process.
9. GDPR and Data Rights
If you are located in the European Union, you have the following rights:
- Right to access your personal data
- Right to rectify inaccurate data
- Right to erasure (with exceptions)
- Right to restrict processing
- Right to data portability
- Right to object to processing
- Right to withdraw consent at any time, where processing is based on consent
- Right to lodge a complaint with a supervisory authority
If you believe we have not handled your personal data lawfully, you have the right to lodge a complaint with the data protection supervisory authority in the EU Member State of your habitual residence, place of work, or place of the alleged infringement.
To exercise these rights, please contact us at the address below.
10. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top of this document.
11. Legal Entity and Contact
like.photos is operated by:
Oleksandr Liashenko, Individual Entrepreneur (FOP), RNOKPP 3229607811,
Apt. 12, 89A Saksahanskoho St., Kyiv, 01032, Ukraine
For privacy inquiries, data access requests, or to exercise your GDPR rights, contact:
Email: privacy@like.photos
Response time: within 30 days