מדיניות הפרטיות

Who we are

Kalivent is a service, run from Israel, that gathers an event's photos and videos into one gallery, where guests find the photos they appear in. In this policy, “Kalivent”, “we” and “us” mean the service and the team that runs it.

An event's organisers are the people who set it up and run it in Kalivent: a producer, a photographer, or the family itself. They decide what the gallery shows and who receives its link. We are responsible for the information described here, and we handle each event's photos, videos and guest list on behalf of its organisers.

For questions about this policy or your information, write to us at hello@kalivent.com.

What this policy covers

The kalivent.com website; Manage, where organisers set up and run events; the guest pages that open from an event's link; and the emails and messages we send.

What we keep about organisers

• Your Google account's details, when you sign in with it: your name, your email address and an identifier for the account. Google also offers us your profile picture; we do not keep it.
• What you enter about your event: its name, date and other details, the photos and videos you upload, and the email addresses of the people you add to the event's team.
• The guest list, if you add one: the guests' mobile numbers and their names, if you add names.
• When you accepted the terms of use, and which version of them. In the terms you confirm that the guests you add to the guest list agreed to receive the event's photos from Kalivent by WhatsApp or SMS.

We use your Google account's details only to sign you in, to show who is on an event's team, and to email you about your events. We do not sell them, use them for advertising, or pass them to anyone except the service providers listed below.

What we keep about guests

Guests use the guest pages without an account, a sign-up or an app.

• A device identifier: a random code in a cookie that tells us it is the same phone: so that you see on it the photos you added and the photos found for you, to count the searches made from it, and to count for the organisers how many phones opened the link. It holds no name and no number.
• Photos and videos you add to the gallery, and the name you give with them, if you give one. Other guests do not see the name; only the event's organisers do.
• Your picture for the photo search, only if you choose to use it, and only for the time of the search (see “Photo search” below).
• Takedown requests: when you ask for a photo or video to be taken down, we keep when you asked and from which phone, to keep the requests in order. The organisers are not shown who asked.
• Your name and mobile number, if the organisers added you to the event's guest list. These come from the organisers, not from you, and we use them only to message you about that event's gallery. We never send you advertising and use the number for nothing else.
• When an event's link fails to open, we keep the IP address it was tried from for about an hour, to stop links being guessed.
• If you asked us to stop messaging you, we keep your number only so that we never message it again, for any event, unless that number asks us for photos again.

The event's photos that its organisers, photographers and other guests add may show you too.

What we keep about people who leave their details on the website

If you leave your details on kalivent.com, we keep your name, your mobile number, the plan you chose (if any), the page you sent them from and when you sent them. We use them only to call you back about your event or, if you are a photographer, about working together.

Photo search

• The photo search is your choice. You can look through the whole gallery without it.
• Before a phone's first picture is used, a short screen tells you what your picture is for. Using your picture confirms that you are 18 or older and agrees to the photo search's privacy notice, which you can read there. Nothing is sent until you choose to use a picture.
• You can take a picture or choose one from your phone. We use it to find the photos of this event that you appear in. We never keep the picture itself: it is deleted after the search.
• No one else sees your picture: not other guests, not the event's organisers and not its photographers.
• To make the search possible, Amazon Web Services finds the faces in the photos shared with the event's guests and keeps face data from them, including for people who never search, until the gallery closes. A search compares that data with your picture. We keep each event's face data apart and never use it to find photos in another event.
• Before the search, Cloudflare checks that the picture is sent by a person and not a program, and receives your IP address and details about your browser for that.
• From your searches we keep, for your phone, which photos were found, that you agreed and when, and how many searches it made.
• You can withdraw your consent at any time, from your photos. After you withdraw, we no longer keep which photos were found on that phone, and we keep when you withdrew.
• When the gallery closes, we delete the event's face data and the photos found for every phone.
• We never ask for a picture sent by WhatsApp or any other message, and never use one.
• Videos are not part of the photo search.

Who sees an event's photos

• While the gallery is open, anyone who reaches the event's link can look through every photo and video shared with its guests.
• A photo or video that guests add is not shown to other guests until the organisers approve it, unless the organisers chose to share what guests add at once.
• A photo or video the organisers hide is no longer shown to guests. Copies guests saved before then stay with them.
• No photo or video you get from Kalivent carries in its file any record of where it was taken, or of the phone or camera that took it.
• When the gallery closes, the person who created the event receives an email with a link to download the photos and videos shared with the guests. The link works without signing in, for anyone who has it, until the photos are deleted.

Where the information is kept

We keep the service's information with Amazon Web Services in Israel (the il-central-1 region, in Tel Aviv): the photos and videos, the face data, the guest lists and the accounts. Photos and videos reach guests through Amazon Web Services' delivery network, which may hold temporary copies of them outside Israel. Some of our service providers, such as Airtable, Google, Cloudflare and PostHog, also handle information outside Israel.

Who else receives information

We do not sell personal information. Only the service providers that work for us receive it, and only what they need:

• Amazon Web Services, in Israel (and its delivery network worldwide): hosts the service and its information, compares faces for the photo search (Amazon Rekognition), signs organisers in (Amazon Cognito) and sends our emails (Amazon SES).
• Google: organisers' sign-in with their Google account.
• Google (its Google Analytics service): measures visits to the pages of the kalivent.com website, and only those, and, if you accepted, for Google's advertising features too, as the next section describes.
• PostHog, in the European Union: measures the use of Manage after signing in, and counts anonymous use of the guest pages, as the section "Measuring the use of Manage and the guest pages" describes.
• Cloudflare (its Turnstile service): checks that the sender of a details form, of photos for the gallery or of a picture for the search is a person and not a program, and receives the IP address and details about the browser for that.
• Airtable, in the United States: keeps the details left in the form on kalivent.com, under its data processing agreement.
• WhatsApp, or an SMS provider: when we send an event's gallery to its guests, the message and the mobile number pass through whoever delivers it.

On the download page we use no analytics or advertising tool at all, and in Manage and on the guest pages only PostHog, as described below. If that changes, we will update this policy first.

Measuring visits to the website

On the pages of the kalivent.com website, such as the home page and these pages, we measure visits with Google Analytics, to learn how many people come, from where and what interests them, and to improve the website. The guest pages, the download page and Manage have no such measuring.

On your first visit a small notice appears, and you choose whether to accept cookies. Without your acceptance, Google Analytics stores no cookie or identifier on your device, and receives only cookieless signals: that a page was opened, its address and the page you came from, which parts of the page you saw and which main buttons you pressed, that you started filling in the form to leave your details, sent it or that sending failed (without the details themselves), and details about the browser and device. The same holds after you decline. As with any request on the internet, Google also sees the IP address; according to Google, it is used only to estimate the country and city, and is not stored.

If you accept, you allow both measuring with cookies and Google's advertising features. Google Analytics stores cookies with a random identifier in the browser, for up to two years, to recognise the same browser on later visits, and also receives what you did on the pages, such as scrolling and clicking a link. If you are signed in to a Google account with personalised ads turned on, Google Signals links your visits from different devices and gives us aggregated reports on devices, age, gender and interests, without telling us who you are. Google may also use the visits for advertising and ad personalisation and, once we link Google Ads, to measure our ads and show them again to people who visited the website.

If you decline, things stay as before the choice: measuring without cookies and without Google's advertising features, and the notice does not appear again.

Google handles the data outside Israel too, including in the United States. Our Google Analytics account's data-sharing options are off.

You can change your choice at any time, on this page (in the Hebrew text above) or from the "הגדרות עוגיות" (cookie settings) link at the bottom of every page of the website. Withdrawing your acceptance deletes the Google cookies stored on our website, and returns the measuring to no cookies and no advertising features from that moment. What Google keeps in your Google account, and personalised ads, you manage in your Google account's settings. Your choice is kept only in your browser; if you clear the website's data in the browser, the notice appears again.

Measuring the use of Manage and the guest pages

In Manage, once organisers and photographers have signed in, we measure the use of the service with PostHog (its European cloud), to learn where Manage is hard to use and to improve it. There is no PostHog on the website's pages, the sign-in page or the download page.

PostHog receives which Manage pages were opened and their address, without what follows the question mark, clicks and similar actions on a page, without the text on them, how fast the pages loaded, and details about the browser and the device. As with any request on the internet, it also sees the IP address.

PostHog also records visits to Manage: a replay of how the page changed. The recording hides every text, everything typed, every photo and video, and details that could identify a person, so it shows only the page's layout, with no names, phone numbers, email addresses or photos.

We identify you to PostHog only by your account's internal identifier, never by your name or email address. PostHog keeps that identifier in the browser's storage on kalivent.com, not in a cookie. PostHog handles the data in the European Union, outside Israel.

On the guest pages we count anonymous use with PostHog, to learn how guests use the gallery and to improve it: which pages opened, without the event's code that is in the address, how fast they loaded, and a fixed list of steps: that the gallery opened, that a search by photo started and how it ended, that you sent photos, that you saved all your photos, and that you saw the screen saying the gallery has not opened yet. Each step comes with the event's internal identifier and amounts in ranges only, never a name, a file name or a photo.

On the guest pages PostHog keeps no cookie or identifier on your phone, so every visit counts as a new, anonymous one, and it records nothing of the visit and collects no clicks beyond those steps. As with any request on the internet, it sees the IP address.

How long we keep information

• The gallery closes to guests on the closing date its organisers set, or earlier if they close it.
• When the gallery closes, we delete the event's face data and the photos found for every phone.
• We delete the event's photos and videos, every copy included, six months after the event's date (or, for an event with no date, six months after the day it went live), and everything else we hold about the event within 40 days after that.
• Your picture for the photo search is deleted right after the search.
• After 30 days without using Manage, you need to sign in again.

To have us delete the details you left in the website's form, or your account's details, write to us at hello@kalivent.com.

Your rights

• You can see the information we hold about you and ask us to correct it: write to us at hello@kalivent.com.
• Guests can withdraw their consent to the photo search at any time, from their photos.
• Guests can delete any photo or video they added, from the same phone, while the gallery is open.
• To ask for a photo or video to be taken down, open it in the gallery and ask from its menu. The organisers decide and can hide it, and they are not shown who asked. You can also write to us.
• If you think we have not handled your information properly, you can also complain to Israel's Privacy Protection Authority.

Cookies and browser storage

We use the cookies the service needs to work and, on the website's pages, Google's cookies too, only if you accepted them:

• A sign-in cookie that keeps organisers signed in to Manage, and two short-lived ones used only while signing in.
• A device cookie on the guest pages: the random identifier described above, kept for up to 400 days.
• Short-lived cookies, lasting under an hour, that let the browser open the event's photos and videos while its gallery is open.
• Google's cookies on the website's pages, only after you accepted them: for measuring and for Google's advertising features, for up to two years (see "Measuring visits to the website").

The guest pages also keep a few things on the phone itself, such as the name you gave with your photos and which photos you already sent, so that they are there on your next visit. The website's pages keep your choice about measuring visits in the browser, so as not to ask again. Manage keeps PostHog's identifiers in the browser, as "Measuring the use of Manage and the guest pages" describes; on the guest pages PostHog keeps nothing.

Children

Many events on Kalivent are family events, such as bar and bat mitzvahs, so children often appear in the photos. The photos are added by the event's organisers, its photographers and its guests, and the organisers decide what the gallery shows.

The photo search is only for people aged 18 and over: using a picture confirms it. Younger guests can look through the whole gallery without searching. The search is for finding yourself, not other people, children included. Like everyone in the shared photos, children's faces are part of the event's face data until the gallery closes.

Parents can ask for a photo of their children to be taken down from the photo's menu in the gallery, or write to us.

Changes to this policy

This is an interim version. When we update the policy, we change the date at the top of the page. If the Hebrew and the English texts differ, the Hebrew text prevails.

Contact

Write to us at hello@kalivent.com.