Privacy, with clarity.

Taggz is an event-photo platform operated by The Mok Company. In this notice, “Taggz”, “we”, “us”, and “our” refer to the people and systems operating the Taggz platform.

This notice explains how we handle personal data when you visit taggz.app, create or join an event, upload or access event photos, use payment features, or choose to use face recognition and face matching. An event host may make their own choices about an event and its access settings. Where a host independently determines why attendee or event data is used, their own privacy information may also apply.

We collect the data needed to run the service and protect it. What we collect depends on how you use Taggz.

• Account and event information, such as your name, email address, phone number, role, event details, invitations, and access settings.
• Event media and related information, such as photos you upload or access, file and upload details, event association, and access activity needed to operate galleries.
• Face-recognition data, only when you choose to enroll or use face matching. This can include your enrollment selfie and a derived face template or embedding used to compare your face with faces detected in relevant event photos.
• Payment and billing records, such as payment status, transaction references, and receipts. Card details are handled by the payment provider during checkout and are not intended to be collected as full card details by Taggz.
• Technical and security information, such as browser, device, IP-address, log, and error information needed to secure, operate, and diagnose the platform.
• Privacy-conscious website analytics information, such as visits to our public marketing pages and limited interaction information used to understand website traffic and improve Taggz. Analytics are enabled by default, and you can turn them off at any time in Cookie Preferences. Our implementation is designed to exclude contact-form message content, names, email addresses, face data, event codes, private links, account identifiers, and photo identifiers.

We use personal data to provide the platform, set up and manage events, authorize access, deliver galleries, support customers, process payments, prevent misuse, maintain security, meet legal obligations, and improve the service through privacy-conscious website analytics.

For limited website analytics, our legal basis is our legitimate operational interests in understanding traffic and improving Taggz, where that basis is available under applicable law. We apply safeguards that limit the data we send and provide an always-available opt-out. Depending on the activity, processing may instead be necessary to provide the service you request, meet a legal obligation, or rely on your consent where consent is the appropriate basis. We do not use consent as a shortcut where another lawful basis is required.

Taggz may offer an optional face-recognition feature when an event host has enabled it. When you choose to enrol, we use your enrollment image to create and maintain a face template or embedding. We compare that template with faces detected in photos from the relevant event so we can show you photos that may include you. We do not use face recognition for account authentication, advertising, employment, credit, insurance, housing, or identity-verification decisions.

Face recognition is a distinct, optional feature. You can use Taggz without enrolling, and you can remove a saved face profile from the face-enrollment area. Removing it stops future matching that depends on that profile. It does not by itself delete your account or event photos you may otherwise be entitled to access.

This privacy notice is not itself a face-recognition consent request. Before face-recognition data is collected for matching, Taggz must give you a clear, purpose-specific notice and obtain the applicable permission or consent. We do not send face-recognition data through optional analytics.

We do not sell personal data. We share data only where it is needed to provide Taggz, meet a legal obligation, protect rights and security, or complete a corporate transaction such as a reorganization.

• Event hosts, photographers, attendees, and other authorized participants, according to the access controls and settings for the relevant event.
• Service providers that help us run Taggz, including hosting, storage, communications, security, technical support, and payment processing providers. They may process data only for the services they provide to us and subject to appropriate contractual or legal safeguards.
• Authorities or other parties where disclosure is required by applicable law, a valid legal process, or is necessary to protect people, rights, property, or the integrity of Taggz.

We keep personal data only for as long as it is reasonably needed for the relevant service, event access, security, legal obligation, dispute, or recordkeeping purpose. There is not one universal retention period for every event photo or account record because hosts, event settings, and service plans can differ.

• Account information is generally kept while your account is active and for a limited period afterwards when needed for support, security, accounting, or legal purposes.
• Event photos and associated metadata are kept according to the applicable event settings, host arrangement, and service purpose. We may delete or de-identify them when they are no longer needed.
• A face-recognition profile is kept until you remove it, your account is deleted, or it is otherwise no longer needed for the matching purpose. Technical backups and security records can persist for a limited additional period before expiry or overwrite.

Subject to applicable law, you may ask to access, correct, update, delete, or receive information about your personal data. You may withdraw consent for a consent-based activity at any time. Withdrawal does not affect processing that was lawful before the withdrawal, and it may mean that a feature such as face recognition can no longer operate for you.

You can turn website analytics off in Cookie Preferences at any time. You can remove a saved face-recognition profile in the face-enrollment area. For another privacy request, contact us using the details below and include enough information for us to safely identify the account or event involved.

Taggz uses privacy-conscious analytics by default on its public marketing pages to understand website traffic and improve the site. Our legal basis for this limited processing is our legitimate operational interests, where that basis is available under applicable law. You can turn analytics off at any time through Cookie Preferences in the site footer or the analytics-control button.

Google Analytics receives only limited measurement information. We do not intentionally send contact-form message content, names, email addresses, face data, event codes, private links, account identifiers, or photo identifiers through this analytics implementation. Advertising storage and Google Ads personalization remain off unless you separately enable advertising features.

Essential technical storage may still be used to remember your privacy choice, keep the platform secure, and deliver requested features. See our Cookie Policy for more detail about the storage categories and controls we use.

We use technical and organizational measures intended to protect personal data, including access controls and security monitoring. No online service can guarantee absolute security, so please use a strong password and contact us promptly if you believe your account has been accessed without permission.

Taggz and its providers may process data in Egypt and in other countries where our service providers operate. Where a transfer is required, we take steps intended to apply the safeguards required by applicable law.

If you are under 15, do not submit face-recognition data unless your parent or legal guardian has provided the consent required by applicable law. Hosts and guardians should contact us if they believe a child’s data has been provided without the required authorization.