Privacy
policy.

SnapStream is operated by SnapStream (Pty) Ltd, registration 2026/311990/07, in the Republic of South Africa. We are the responsible party for the account, matching, delivery and other processing described here under the Protection of Personal Information Act 4 of 2013 (POPIA). Our address and Information Officer are in section 13.

Event organisers also make decisions about taking photographs, uploading them, inviting guests and sharing their galleries. They are responsible for those decisions and their own privacy notices. Where we process information on an organiser's instructions, we act as its operator. Contact us or the organiser about an event photograph.

• Guests: your WhatsApp number and profile name, event memberships, consent records, submitted selfie, face templates, photo matches, favourites and sharing choices.
• Photographs: images and related file information uploaded by organisers, photographers or guests, including pictures of people who have not registered.
• Organisers and enquiries: contact and business details you supply, account credentials, event details, uploaded content, plan purchases and payment references. Payment providers collect payment details through their checkout; we do not store full card numbers.
• Conversations and AI features: messages, voice notes and transcripts, support history, relevant account or event context, and descriptions or reference material you provide when asking us to generate a design.
• Website use: cookies and browser storage, session identifiers, pages visited, gallery interactions, downloads, sponsor interactions, referral information, device/browser information, approximate country and technical or security logs, which may include IP addresses.

We receive information from you, your browser, WhatsApp and our other service providers, and people contributing to or inviting you to an event. We do not buy personal information.

We use this information to operate accounts and galleries, match and deliver event photographs, send service messages, answer enquiries, provide requested AI assistance or design features, process payments, measure use of the service, and prevent fraud and abuse.

We ask for your consent before registering your face for photo matching. This uses your selfie and numerical face templates, which are biometric information. You can withdraw that consent using the controls in section 8.

For ordinary account, transaction and support information, we rely on performing a contract or taking steps you request before one, applicable legal obligations, or legitimate interests in running, securing and understanding the service, as appropriate. You may object to processing based on legitimate interests. Registration is not consent to unrelated marketing, and we do not sell personal information or use face templates for advertising.

Providing a selfie is voluntary. Without the necessary number, consent and selfie we cannot provide personalised face matching or WhatsApp delivery. Shared-gallery access depends on the organiser's settings. Required account or payment details are needed to supply the corresponding paid service; optional fields may be left blank.

We use a face-processing provider to analyse your selfie and create face templates for comparison with event photographs. Processing an event photograph also detects and indexes faces in that photograph, including faces of people who have not enrolled. Organisers and uploaders must have a lawful basis for supplying those images.

A retained selfie may be processed again when you join another event. Matching uses event collections; joining an event enables matching for that event under your consent, not a search for you at unrelated events you have not joined. Automated age estimates help check eligibility. Where enabled, a browser selfie check uses camera images and a liveness result to help confirm that the person registering is present.

Matching is automated and may miss a photograph or return an incorrect match. Email hello@snapstream.co.za or send human on WhatsApp for help and review.

Face registration is available only to people aged 18 or older. Organisers must obtain the permissions required for photography and face matching, including appropriate consent from a parent, guardian or other legally competent person for anyone under 18. Contact us about a photograph or removal request.

Our providers include cloud hosting, storage, content delivery and face-processing services; WhatsApp and message-delivery providers; payment providers; AI model and voice-transcription providers; and analytics services. They receive information needed for the relevant feature. For example, chat assistance can use your messages, transcripts, recent conversation and account or event context; design generation can use your prompt and event title. Contact our Information Officer for details of the providers handling your information.

Authorised staff may access information for support, security, administration and rights requests. Organisers can see their event photographs, guest names and participation information; ordinary organiser views mask guests' phone numbers and do not show their registration selfies or face templates. Contacts an organiser supplies itself are available to that organiser.

Gallery visibility depends on its sharing settings. Photographs may be visible to the organiser, matched guests, other authorised viewers or people with a shared event link. Personal gallery links can grant access to whoever holds them, so keep them private. A download or a copy shared outside SnapStream is not under our exclusive control.

We may also disclose information where the law requires it or where necessary to establish, exercise or defend legal rights, subject to applicable safeguards.

Our primary application records and stored photographs are hosted in South Africa. Face processing takes place in Ireland: selfie and event images are transmitted there for analysis, and face templates are stored there. Ireland is subject to the EU General Data Protection Regulation (GDPR).

Messaging, hosting/content delivery, payments, analytics and AI providers may also process information outside South Africa, including in the United States and Europe. Their countries may have different protections from POPIA.

We remain responsible for meeting POPIA's requirements for overseas transfers. Contact our Information Officer for the recipients, destinations and safeguards relevant to your information.

• Guest registration: the routine cleanup is scheduled for 30 days after registration and covers the guest record, registered selfie, enrolment templates, photo matches, notification records and associated support conversation. Raw selfie storage also has a 30-day expiry. This is not the retention period for organiser accounts.
• Event face data: event collections are scheduled for deletion at the event's separate face-data expiry date, where set, or otherwise 30 days after gallery expiry. Where events share a collection, each event's applicable retention period must have ended. Events without either expiry date require separate deletion arrangements; contact us about the retention period for your event.
• Event photographs: gallery expiry stops access; it does not itself erase stored originals, copies or backups. Removing a guest account does not delete every event photograph containing that person. You can make a separate privacy or takedown request.
• First-party usage records: individual engagement records are scheduled to expire after 90 days.
• Other business records: organiser accounts, enquiries, billing, security logs and records held by providers have separate retention requirements. Retention must be limited to what is necessary for their purpose, a legal requirement or another lawful ground. Ask us for the period or basis applying to a particular record.

Scheduled deletion and storage expiry take time to complete. Gallery links normally last seven days; link validity, gallery access and data retention have separate time periods.

• REVOKE on WhatsApp withdraws consent to face matching and starts removal of your enrolment templates, match and notification records. Your guest account, submitted selfie and support correspondence remain until deletion or their applicable retention period. Send DELETE if you also want the guest account and selfie removed.
• DELETE on WhatsApp requests removal of your guest account, registered selfie, enrolment templates, matches, notification records and support conversation. It does not close a separate organiser account or automatically erase event photographs, billing records, technical logs, backups or copies already held by other people or providers.
• Leave an event in your gallery profile removes your membership, enrolled face data and matches for that event. It does not remove the organiser's photographs.

For organiser-account closure, an event photograph or help with a removal request, contact hello@snapstream.co.za. We will assess the request, arrange any further removal required and explain any information we must lawfully retain. Withdrawal does not make earlier lawful processing unlawful. Opting back into matching requires a new affirmative action.

You may ask whether we hold your personal information, request access, correct inaccurate information, request restriction or deletion where POPIA allows, withdraw consent, or object to processing on the grounds permitted by law. You can object to direct marketing at any time.

Send requests to our Information Officer at hello@snapstream.co.za. We may ask for proportionate proof of identity or authority to protect the information. Confirmation that we hold your information is free; any permitted access fees will be explained before they are charged. We handle POPIA requests within a reasonable time. Formal PAIA access requests normally receive a decision within 30 days, with an extension only where the Act permits and with notice. Our PAIA manual explains the process.

You can complain to the Information Regulator (South Africa), including through its eServices portal. General enquiries: enquiries@inforegulator.org.za; telephone 010 023 5200.

Sign-in cookies keep your guest or organiser session working. Browser storage also remembers preferences and temporary application state. Blocking or clearing them can sign you out or remove saved preferences; it does not delete your server-side account.

We also collect first-party usage measurements, including on galleries, using a session identifier. Some website pages load Google Analytics, which uses cookies such as _ga and identifiers to measure visits and interactions. These are analytics cookies, not essential sign-in cookies. Google may process associated browser, device and usage information outside South Africa.

You can manage cookies in your browser and use Google's Analytics opt-out browser add-on where supported. See Google's cookie information. Contact us to object to our usage processing. Browser cookie controls do not necessarily stop first-party measurements or necessary security logs.

Our safeguards include encrypted connections, access controls, signed access links and restricted administrative access. No service can promise absolute security. Where POPIA requires notification of a security compromise, we notify the Information Regulator and affected people as soon as reasonably possible, subject to lawful exceptions.

We date changes at the top of this page and draw material changes to your attention where required. If a change requires fresh consent, we ask before that processing begins. You can save or print this page and request an earlier version from our Information Officer.

Company and registration

SnapStream (Pty) Ltd, 2026/311990/07, Republic of South Africa.

Business address

160 High Level Road, Sea Point, Cape Town, South Africa.

Information Officer

Mikhail Kuschke. Contact: hello@snapstream.co.za.

Website

www.snapstream.co.za

Read our Terms & Conditions for service and payment terms.