Privacy Policy

Last updated: 20 October 2026

This policy explains what personal data Labsforge – Software Consulting, Lda (“Labsforge”, “we”) collects when you use AlbumTeller, why we collect it, who we share it with and what rights you have. It applies to the website albumteller.com, the online account, the AlbumTeller desktop application, the AlbumTeller Cloud Proofing platform, our support channels and our newsletters. It is to be read together with the AlbumTeller Terms and Conditions.

1. Who is responsible for your data

1.1 The controller is Labsforge – Software Consulting, Lda, Rua Professor José Magalhães Aguiar, 39, 4630-409 Marco de Canaveses, Portugal, tax number 515061905.

1.2 For any question about this policy or to exercise your rights, write to info@albumteller.com.

2. What data we process and why

2.1 Account. When you create an AlbumTeller account we process your name, e-mail address, password (stored only in encrypted form), language and country. We use this data to create and secure your account, to identify you in the application and in Cloud Proofing, and to send you service messages about your account and subscription. Legal basis: performance of the contract with you.

2.2 Purchases and invoicing. When you buy a plan we process your billing name and address, tax number, telephone number and company name where given, the plan bought, the price paid and the invoice. Payments are collected by our payment providers (PayPal, Stripe and Viva Wallet); we receive a transaction reference and the payment status and never see your full card number. We use this data to process the order, issue the legally required invoice and handle refunds. Legal basis: performance of the contract and the legal obligations that apply to invoicing and accounting.

2.3 Licence and application. The desktop application contacts our servers to sign you in, validate your licence, check for updates and, if you use it, synchronise your projects with Cloud Proofing. For this we process your account identifier, your plan and an identifier of the computer on which the application is installed. Legal basis: performance of the contract and our legitimate interest in preventing unauthorised use of the software.

2.4 Your Cloud Proofing projects. The albums and photographs you upload to Cloud Proofing are stored on our servers so that you and the people you share them with can view, comment on and approve them. We do not use your photographs for any other purpose and claim no rights over them (see the Terms and Conditions). Legal basis: performance of the contract.

2.5 Data of your clients in Cloud Proofing. When you share an album with your clients, their names, e-mail addresses, comments and approvals are processed on our platform. For this data you are the controller and Labsforge acts as your processor: we process it only to provide the sharing and review service, on your instructions, and delete it with the project. You are responsible for informing your clients and for having a lawful basis to share their data with us.

2.6 Support. When you contact us by e-mail, through the helpdesk or through the chat on our website, we process your contact details, the content of your messages and, if you send them, screenshots or files. We use this data to answer you and to improve the product. Legal basis: performance of the contract and our legitimate interest in providing support.

2.7 Newsletters and marketing. If you subscribe to our newsletter or accept marketing communications when creating an account, we use your e-mail address, name and language to send you news, tutorials and offers about AlbumTeller. We record whether our e-mails are opened and which links are clicked. You can unsubscribe at any time through the link in every e-mail or by writing to us. Legal basis: your consent, which you can withdraw at any time; for existing customers, our legitimate interest in informing you about similar products, with the same right to object.

2.8 Website usage. With your consent, we use analytics and marketing tools on our website to measure visits and the performance of our campaigns (see section 8, Cookies). Without consent, only the cookies needed for the site to work are set. Legal basis: your consent.

2.9 Referral programme. If you take part in the referral programme, we process your referral code; the link between your account and the accounts of the customers you refer (and, for a referred customer, who referred them); and the history of referral credit (amounts, status, dates and the order each credit relates to). This data is used to run the programme (grant discounts; create, release and cancel credit), to detect abuse and to meet accounting obligations. A referrer sees in their account the status of each referral and the credit it produced, not the referred person’s name or contact details. When someone opens a referral link, a cookie named “at-referral” stores the referral code in their browser for 30 days so that the discount can be applied at checkout; it is a functional cookie, needed for the referral to work, and is deleted when the referral is removed at checkout or when it expires. Legal basis: the Referral Programme Terms you accept when taking part, our legitimate interest in preventing fraud, and the legal obligations that apply to invoicing.

2.10 Partner programme. If you join the AlbumTeller partner programme, we additionally process the data needed to calculate and pay your commissions, such as your tax number, bank account details and the sales attributed to you, and we share your name, profile picture, country and sales figures with the manager who supports you. Legal basis: performance of the partner agreement and the legal obligations that apply to invoicing.

3. Who we share your data with

3.1 We share personal data only with service providers that process it on our behalf and under contract, and only to the extent needed for the purposes above:

– Amazon Web Services (hosting, storage of photographs and backups, in data centres in the European Union);
– PayPal, Stripe and Viva Wallet (payment processing);
– Brevo (sending of newsletters and service e-mails);
– Crisp (website and in-app chat);
– Google (Google Analytics and Google Tag Manager, only with your consent);
– Meta (Meta Pixel, only with your consent);
– Trustpilot (reviews widget on our website);
– our invoicing software provider and our accountant (invoicing and accounting).

3.2 We may also disclose data when the law requires it, to the competent authorities, and to our legal advisers when needed to establish, exercise or defend legal claims.

3.3 We do not sell personal data.

4. Transfers outside the European Union

4.1 Our servers and your photographs are in the European Union. Some of the providers listed above (in particular PayPal, Stripe, Google and Meta) may process data in the United States or other countries outside the European Economic Area. In those cases the transfer is covered by an adequacy decision of the European Commission, such as the EU-US Data Privacy Framework, or by the standard contractual clauses approved by the Commission.

5. How long we keep your data

5.1 Account data: for as long as your account exists. When the account is terminated we delete the account and the projects and photographs stored in it, as described in the Terms and Conditions.

5.2 Invoices and the data they contain: 10 years, as Portuguese tax law requires.

5.3 Cloud Proofing projects: photographs uploaded for a review are kept for 120 days, and a project is deleted after 6 months without activity, as described in the Terms and Conditions.

5.4 Newsletter data: until you unsubscribe.

5.5 Support messages: for 3 years after the request is closed.

5.6 Referral and partner data: for as long as your account exists and, where it relates to an invoice, for the period in 5.2.

5.7 Analytics data: for the retention period configured in the tool, at most 26 months.

6. How we protect your data

6.1 All connections to our website, account, application and platform are encrypted (HTTPS). Passwords are stored only as salted hashes. Access to personal data is restricted to the people who need it for their work, and our infrastructure is hosted in professional data centres in the European Union with regular backups.

7. Your rights

7.1 You have the right to access the personal data we hold about you, to have it corrected or deleted, to restrict or object to its processing, to receive it in a portable format and, where processing is based on consent, to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

7.2 You can change your account details, newsletter preferences and cookie choices yourself in your account and on our website. For anything else, write to info@albumteller.com; we answer within one month.

7.3 You also have the right to lodge a complaint with a supervisory authority, in Portugal the Comissão Nacional de Proteção de Dados (www.cnpd.pt).

8. Cookies

8.1 When you first visit our website, a banner lets you accept or decline analytics and marketing cookies, and you can change your choice at any time. Your choice is stored in the cookie “at_consent” for 6 months.

8.2 Necessary cookies, which do not require consent: “at_consent” (your cookie choice); the language cookie set by our site; “at-referral” (referral code, 30 days, see 2.9); the cookies our chat provider needs to keep a conversation open; and the session cookies of your online account.

8.3 Analytics cookies, set only with your consent: Google Analytics cookies (“_ga” and related), used to measure visits and how the site is used.

8.4 Marketing cookies, set only with your consent: Meta Pixel cookies (“_fbp” and related), used to measure the performance of our advertising.

8.5 You can also delete or block cookies in your browser settings; some parts of the site may then not work.

9. Children

9.1 AlbumTeller is not directed at children under 16 and we do not knowingly collect their data. If you believe a child has given us personal data, write to us and we will delete it.

10. Changes to this policy

10.1 We may update this policy when our services or the law change. The date at the top shows the latest version. If a change significantly affects how we use your data, we will tell you by e-mail or through a notice in your account.