JAD EVENTSPrivacy Policy
Last updated: 20 September 2026. This policy explains what data we collect in JAD Events, why, who we share it with and what your rights are. Data controller: JAD ASAKIM LTD (company no. 516252426), Ebn Tayem St., Baqa al-Gharbiyye 3010000, Israel, info@jadgroupltd.com. This policy is read together with the Terms of Use.
1. Who this policy covers
- Event owners, collaborators and producers: people with an account.
- Guests: people who open an album or invitation link, upload content or RSVP, without an account.
- People who appear in photos: the event owner is responsible for informing them and obtaining their consent; we process the photos on the owner's behalf.
2. Data we collect
| Data | From whom | Why |
|---|---|---|
| Phone number and verification code | Account holders | Sign-in and communication about the event |
| Name and email (optional) | Account holders | Account management and invoices |
| Event details (name, date, venue, type) | Event owners | Running the album, invitation and wall |
| Photos, videos and captions | Guests and event owners | The service itself: showing them to invitees and on the wall |
| Guest name, phone and reply | Guests who RSVP | Telling the owner who is coming |
| Random device identifier | Guests | Showing a guest their own uploads and reply, preventing duplicates |
| IP address, browser type, language, approximate country | Everyone | Security, abuse prevention, language and currency selection |
| Payment details (amount, plan, transaction reference) | Buyers | Invoicing and bookkeeping. Card numbers are entered at the payment provider and never reach us |
| Device push token | App users | Sending notifications about the event |
| Time of acceptance of the Terms and the IP address at that time | Account holders and buyers | Proof of acceptance of the Terms and of the immediate activation |
We do not collect precise location data from phones. The venue location is set by the event owner.
3. Legal basis and consent
We process data to provide the service you asked for, to meet our legal obligations (bookkeeping) and for our legitimate interest in securing and improving the service. Opening an account, uploading content and RSVPing are done with your free consent; you are not legally required to provide the data, but without it we cannot provide the service.
4. Who we share data with
We do not sell your data and do not use event photos for marketing. We use providers who process data on our behalf and under our instructions:
| Provider | Role | Where processed |
|---|---|---|
| Amazon Web Services (S3) | Storage of photos and videos | United States |
| Hostinger | Server and database hosting | United Kingdom (Manchester) |
| 019 Mobile | SMS delivery (sign-in codes, reminders) | Israel |
| iCredit (Rivhit) | Card payment processing | Israel |
| Pusher | Real-time updates for the album and wall | EU / United States |
| Google (Maps, Firebase) | Venue location, app notifications | Global |
We may disclose data when required by law or a court order, or to protect our rights or users' safety. A producer who created your event sees that event's data.
5. Transfers outside Israel
Some of our providers are outside Israel (in particular media storage in the United States). We transfer data in line with the Privacy Protection Regulations (Transfer of Data to Databases Abroad) to providers contractually bound to protect it. For EU users we rely on Standard Contractual Clauses where required.
6. Retention
- Photos and videos: until the plan period ends (7 / 21 / 42 days from the event date, or any extension), then permanently deleted.
- RSVP details: kept for as long as the event exists in the Owner's account, and deleted with the event or at the data subject's request.
- Account data: for as long as the account exists, and deleted within 30 days of a deletion request.
- Payment records and invoices: 7 years under tax law.
- Technical security logs: up to 12 months.
7. Your rights
You have the right to access, correct and delete your data and to object to certain processing, under the Israeli Protection of Privacy Law, 5741-1981, and (for EU residents) the GDPR. A guest who wants a photo they appear in removed should first contact the event owner, and may contact us if not answered. We answer requests within 30 days. Requests: info@jadgroupltd.com.
7a. Users outside Israel
- EU and UK (GDPR / UK GDPR): our legal bases are performance of a contract (Art. 6(1)(b)), legitimate interest (6(1)(f)) for security and abuse prevention, and legal obligation (6(1)(c)) for bookkeeping. You have the rights of access, rectification, erasure, restriction, portability and objection, and the right to lodge a complaint with the data protection authority in your country. Our EU representative: to be appointed when sales in Europe begin. Transfers to Israel rely on the EU adequacy decision for Israel; transfers to the United States rely on Standard Contractual Clauses.
- United States (including California, CCPA/CPRA): we do not sell personal information and do not share it for cross-context behavioural advertising. You have the right to know what is collected, to delete and correct it, and not to be discriminated against for exercising these rights. The categories collected are those in section 2; we do not knowingly collect sensitive personal information.
- Israel: the Protection of Privacy Law and Amendment 13 apply.
- In all cases the Owner is the controller of their Guests' data and of the people photographed, and the Company processes it as a processor on the Owner's behalf and under their instructions.
8. Security
Connections are encrypted (HTTPS), media is stored in a private bucket reached through temporary signed links, and account sign-in uses a one-time code. Even so, an album link opens for anyone who holds it; share it with care. In the event of a security breach affecting your data we will notify you and the authorities as the law requires.
9. Cookies
We use essential cookies only: session, sign-in, language, currency and anti-forgery protection. We do not use advertising trackers.
10. Minors
Accounts are for people aged 18 and over. Children may appear in event photos; the event owner is responsible for their parents' consent. We remove any content of a minor at a guardian's request.
11. Changes to this policy
Any update is published on this page with its date, and account holders are told of material changes by message or in-service notice.