Privacy Policy

Welcome to Vinci Gallery (the Service). We value your privacy and are committed to protecting your Personal Data in accordance with Law No. 27 of 2022 concerning Personal Data Protection (UU PDP) in Indonesia.

This Privacy Policy explains how we collect, use, disclose and protect your information when using our services connected to Google Drive.

We collect the following data to provide the Service:

• Identity information: name and email address provided during account registration.
• Google access data: OAuth access and refresh tokens used to read the Google Drive folders you select. We never receive or store your Google password.
• Photo data: copies of the images in the folders you choose to sync, converted and stored on our servers so galleries load quickly.
• Usage data: technical information such as IP address, device type and how you interact with the galleries.

Your Personal Data is processed for the following limited purposes:

• Synchronising your Google Drive folders into web galleries.
• Converting images to AVIF format for faster loading.
• Providing technical support and responding to your enquiries.
• Complying with legal obligations under Indonesian regulations.

Under UU PDP, you have the following rights as a Data Subject:

• Right to obtain information about our identity and the purpose of processing.
• Right to access and obtain a copy of your Personal Data.
• Right to update or correct inaccuracies.
• Right to terminate processing, erase and/or destroy your Personal Data.
• Right to withdraw consent at any time.

We implement technical and organisational measures to protect Personal Data from unauthorised access, disclosure, alteration or destruction. Access to the Service requires authentication, and each account can only reach its own galleries, invoices and connected Google accounts.

Passwords are stored only as salted bcrypt hashes and are never recoverable. Google OAuth tokens are stored in our database with access restricted to the synchronisation service.

Photos and gallery data are retained for as long as your account is active. Disconnecting a Google account removes its stored tokens, and deleting a gallery removes its synced photos from our servers.

If you have questions about this Privacy Policy or wish to make a request regarding your data rights, please contact us at: