Privacy

Your guide took a photo of your group and gave you a private link to it. Here is what we hold, why, and for how long.

Postcarded AB [org. nr], Sweden, is responsible for this data. Write to [[email protected]] and a person will answer.

The tour photo

We hold it so you can download it and, if you want, send it as a postcard. Only people with your group's link can see it; no other group sees it.
We hold it on the basis of our legitimate interest in delivering the photo your guide told you was coming. You can object: the photo page has a button that deletes your group's photos. It is unavailable only while a postcard someone paid for is still on its way, because we need the photo to print it.
If nobody orders a postcard, the photo is deleted 30 days after the tour. If someone does, it is deleted once the last card has been posted or has expired.
Your guide can see your group's photos for 48 hours after taking them. After that, only your link shows them.
We keep the time each photo was taken and roughly where the tour was held (to about 100 metres), for our statistics. The stored photo has its hidden camera data removed, so it holds no GPS position.
We count whether your group's link has been opened, and how often, so your guide knows the photos arrived. We don't record who opened it.
We never use facial recognition.

Guides can have a public page on Postcarded. Your group's photos appear there only if someone with your group's link switches it on. It is off unless you turn it on.
Please only switch it on if everyone in the photo is happy to be shown. Anyone with the link can switch it off again, and the photos disappear from the page at once. They also disappear when the photos are deleted on the schedule above.

Your guide may have set up the groups from their booking list. We store only the name your guide gave the group (often the name on the booking), and delete it with the group's photos.
Phone numbers and email addresses from that list stay on your guide's own phone. They never reach us; we use them only to fill in the message your guide sends you.
If your guide photographed the list instead, the picture is sent to Anthropic, which reads it for us and sends the names back as text. We don't keep the picture.

We keep your name (how the card is signed), your email, and for each card the recipient's name, your message and the address. We need them to make and post the cards and to send you your receipt and updates.
Payment goes through Stripe. We never see your card number.
Your name and email, and each card's recipient name, address and message, are deleted 90 days after the last card on your order is posted, expires or is cancelled (or 90 days after you started, if you never paid).
The record of what you paid and which country each card went to is kept for 7 years, as Swedish bookkeeping law requires, or 10 years for cards to other EU countries, as EU VAT rules require. It holds no names or addresses.
We don't use your email for marketing.

We use your address only to post that card. It is never sold, and you are not added to any list.
To print and post the card we pass the address and the photo to PostNord, which handles them under its own privacy policy.

We keep your email, your tours and groups, your public page (photo, the words you add, review links) and what you earn. We need them to run your account and pay you.
Before we pay you, you give us your legal name, postal address, where you live, whether you have F-skatt, and your Swedish personal or organisation number, or your own country's tax number and your date of birth. Swedish tax and bookkeeping law requires us to hold these for everyone we pay. We keep every version you give us, and only Postcarded can see them.
Stripe checks who you are and holds your bank details, under its own privacy policy. We see only whether payouts are switched on and the country of your Stripe account.
Your tax details and the record of what we paid you are kept for 7 years after the year of the last payment. To close your account, write to us: your public page and profile are deleted.

HostUp (Sweden) runs our server and database.
Cloudflare stores the photos and carries traffic to the site.
Stripe takes payments, pays guides and checks guides' identity.
Resend sends our emails, from its EU region.
Anthropic reads photographed booking lists, as above.
Some of these are US companies. Where data leaves the EU, it is covered by the EU-US Data Privacy Framework or the EU's standard contract clauses. [Confirm per provider.]

The only cookie we set on the photo and postcard pages is the language you pick.
Your browser also remembers that it has opened your group's link, so an open is counted once. There is no advertising or tracking.

You can ask to see what we hold about you, have it corrected or deleted, or object to how we use it. Write to us and we will answer within a month.
You can also complain to the Swedish data protection authority, IMY (imy.se), or the one where you live.