Privacy policy.

Komos (komos.ca) is a service, operated from Québec, that allows an organizer ("host") to create an event, to display a QR code, and to receive the photos and videos sent by guests, without the guests creating an account.

This policy forms part of the terms of use and the guest terms. It describes how we process personal information, including with respect to Law 25 (Québec).

Person responsible for processing: the Komos team. Contact: info@komos.ca.

When you create an organizer account, we may process:

• email address and password (stored securely);
• identifiers supplied by Google if you choose "Continue with Google" (name, email, Google identifier);
• title and settings of the events you create;
• payment information required through Stripe (we do not store the full card number);
• transactional emails (password reset, confirmation related to the Service).

Host accounts are intended for people aged 18 and over. We do not knowingly create a host account for a minor.

Guests do not have a Komos account. When they scan the QR and send media, the following may be processed:

• uploaded photos and videos (original files);
• technical metadata tied to the upload (file type, size, date);
• an optional name or caption if entered voluntarily;
• an optional email, only if the guest enters it and checks consent to receive communications from Komos (offers and news). This consent may be withdrawn at any time;
• optional guestbook messages, if the host enables this feature;
• aggregated participation indicators (scans, uploads) to help the host follow the event;
• technical session identifiers (abuse prevention, resuming an upload), without creating an account.

This content is intended for the host of the event and the people to whom the host gives access (gallery, live wall, export). An event may include photos of people of any age who are present on site; this is not a collection of data about children for marketing purposes.

If you are a host and you send us information about other people (guests, people appearing in the media, messages), you confirm that you have the right to do so and to authorize Komos to process it in order to provide the Service, in accordance with this policy.

The host decides who receives the QR or the link. Komos processes the media in order to provide the Service to the host; we do not use these faces for advertising profiling.

We use this data to:

• provide and secure the service;
• enable payment and the activation of an event;
• display the gallery and the live wall;
• allow the host to export the originals (ZIP);
• prevent abuse, fraud and prohibited content;
• respond to support requests and to legal obligations;
• measure visits and payments related to our advertising, only if you accept this on the banner.

We do not use guest photos for targeted advertising, or to train facial AI models. We do not sell personal information.

Technical providers process data on our behalf, including: hosting (Vercel), database (Supabase), media storage (Cloudflare R2), authentication and transactional emails, payment (Stripe), Google login if you use it, and advertising measurement (Meta) if you accept the banner. Each one acts under its own policies and our contractual instructions.

Some of these providers are located outside Québec or Canada (often in the United States). In those cases, the information may be communicated outside Québec. We rely on recognized providers and on reasonable contractual measures. A payment through Stripe is also subject to the Stripe policy.

Host accounts and event media are retained for as long as the service is in use and the event has not been closed / deleted using the available tools, or for longer if the law so requires (accounting, disputes). The host may export the originals. Sessions and technical logs are retained for a limited period related to security and diagnostics. Backup copies may persist for a time after a deletion.

We use cookies or local storage necessary for the host session (login). On the guest path, technical identifiers may be used for participation / abuse prevention, without creating an account. There is no third party advertising on the guest path.

On the rest of the site, a banner distinguishes essential cookies (always active: login, security, payment, remembering your choices), audience measurement and marketing (Meta pixel). The latter two start only after your agreement. You can change your mind: Change my choice. Stripe may set its own cookies during payment.

If Komos or its assets were transferred (sale, merger), the information necessary for continuity of the Service could be transferred with them, subject to this policy or to equivalent protection, and in compliance with applicable law.

Depending on where you live (in particular in Québec under Law 25), you may request access to, rectification of, or deletion of your personal information, subject to the legal exceptions. Contact us at info@komos.ca. Guests who wish to remove a photo may also contact the host of the event, who has tools to hide or delete the media.

We apply reasonable measures (HTTPS, host access control, server secrets). No system is infallible: avoid sending content you do not wish to share with the host and the people who have access to the album.

This policy may be updated. The date at the top of the page indicates the version in force. If there is an important change, we will seek to inform hosts of it by email or through the site.