Privacy Policy

Last updated: 14 July 2026

Yeah Works, Unipessoal Lda ("Yeah Works", "we") operates Photizy. This policy explains how we process personal data under the EU General Data Protection Regulation (GDPR). We are the controller for the data described below, except where noted.

1. Data we process

• Account data — name, email, password (hashed), business and billing details you provide.
• Photos — the images you upload, including any technical metadata they contain.
• Client data — names and email addresses your clients submit when making selections or purchases, and their order history. For this data the photographer is the controller and Yeah Works acts as processor.
• Payment data — handled by Stripe; we never see full card numbers. We store subscription status and billing metadata.
• Technical data — server logs (IP address, user agent) kept for security and debugging.

2. Why we process it

To provide the Service (contract), to bill subscriptions (contract), to send transactional email such as verification codes, order and trial notices (contract), to secure the Service (legitimate interest), and to comply with legal obligations such as accounting records.

3. Processors and recipients

We share data only with the providers needed to run the Service: Stripe (payments and subscriptions), Cloudflare (photo storage and delivery), our email delivery provider (Resend), and our hosting providers in the EU/EEA where possible. Where data leaves the EEA, transfers rely on adequacy decisions or Standard Contractual Clauses. We never sell personal data.

4. Retention

Account data and photos are kept while your account exists and are deleted when you delete your account. Records of completed sales are retained for the period required by Portuguese tax law. Server logs are kept for a short rolling window.

5. Your rights

You have the right to access, rectify, erase, restrict or object to the processing of your data, and to data portability. Write to [email protected]. You may also lodge a complaint with the Portuguese supervisory authority, the CNPD (cnpd.pt).

6. Cookies

Photizy uses only first-party cookies that are strictly necessary to operate the Service: session, authentication and CSRF cookies. We do not use advertising or cross-site tracking cookies.

7. Changes

We may update this policy; material changes will be announced by email or in the app.

Yeah Works, Unipessoal Lda · VAT PT507644387
Av. Prof. Carlos Ribeiro, 82, 2840-473 Seixal, Portugal
[email protected]