Privacy Policy

1. Controller

The controller for data processing on this website and in the Fivora application is extrain.io GmbH, Am Kniebrecher 21, 66606 Sankt Wendel, Germany, email: hello@fivora.io.

2. Our principle

Fivora is built privacy-first: no ads, no tracking, no sharing for advertising, and no training of AI models on your content. We process only the data required to run the service, on servers in the EU (Germany).

3. Data we process

Account data (hosts): email address and display name, managed via our self-hosted sign-in service (Keycloak, OIDC).

Event content: photos and videos uploaded by you and your guests, plus the display name a guest chooses on joining. EXIF/location data is stripped during processing.

Payment data: for paid plans we process payments via Stripe. Card details are handled solely by Stripe and not stored by us; we keep only a customer reference and payment status.

Technical data: server logs and — for error detection — anonymised error reports via our self-hosted monitoring (Sentry).

4. Purposes and legal bases

Providing the service and performing the contract (Art. 6(1)(b) GDPR): account, event galleries, uploads, payments.

Legitimate interest (Art. 6(1)(f) GDPR): secure and reliable operation, abuse and error detection.

Legal obligations (Art. 6(1)(c) GDPR): e.g. retention of invoicing data under commercial and tax law.

5. Recipients / processors

We use carefully selected providers as processors (Art. 28 GDPR): hosting/infrastructure (Hetzner, Germany/EU), payments (Stripe), transactional email such as password resets (Resend). Sign-in and error monitoring run on our own EU infrastructure.

6. Retention

Event content is stored for the retention period of the respective plan and deleted afterwards. Account data is kept for the lifetime of the account. Invoicing and payment data is subject to statutory retention periods.

7. Your rights

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21), as well as the right to lodge a complaint with a supervisory authority. Contact hello@fivora.io.

8. Contact

For any privacy questions, reach us at hello@fivora.io.