What personal data we collect, why we have it, and what you can ask us to do with it.
The controller of the personal data described here is Nguyen Dai, an individual sole proprietor based in Vietnam, trading as 27BigGroup. Contact: support@27biggroup.com.
This policy covers 27Big Code and Wedding Photo Slides, and the shared account system used to sign in to them.
When you visit a website or slideshow that one of our customers published with our tools, that customer decides what is collected there. We only host it. Contact that customer about their own data practices.
| Kind | What it includes | Where it comes from |
|---|---|---|
| Account data | Email address, password (stored only as a cryptographic hash), display name and profile picture if you sign in with Google, plan and expiry dates, and your support messages to us. | You, when you sign up or write to us. |
| Content you create | Images, audio, text, page designs, slideshows, uploaded files, settings, and any entries that visitors submit through forms you build. | You and the visitors of the pages you publish. |
| Technical data | IP address, browser and device type, pages viewed, timestamps, referring page, and error logs. | Collected automatically when you use the service. |
We do not ask for and do not want sensitive personal data — health, political opinions, biometric identifiers and similar. Please do not upload that kind of data.
| Why | Legal basis (EU/UK GDPR) |
|---|---|
| Create and run your account, store your projects, publish your pages, apply the limits of your plan. | Performance of our contract with you. |
| Take payment, issue receipts, apply refunds, keep accounting records. | Contract, and our legal obligations. |
| Send service messages: renewal notices, receipts, security alerts, important changes. | Contract. |
| Keep the service secure: block abuse, investigate fraud, rate-limit requests, keep server logs. | Our legitimate interest in a service that stays safe and online. |
| Understand how the product is used so we can improve it. | Our legitimate interest, using data at an aggregate level wherever we can. |
| Marketing emails about our products, if you ask for them. | Your consent, which you can withdraw at any time. |
Card payments are processed by Polar (polar.sh), which acts as the merchant of record. Your card number is entered on their checkout and handled by them and their payment processors. It never reaches our servers.
From them we receive only the information we need to run your account and our books: your name, email address, country, the plan bought, the amount, the currency and the transaction reference. Polar processes your data as an independent controller for that payment; see their own privacy notice at polar.sh/legal/privacy.
Customers in Vietnam paying by bank transfer: we receive the transfer reference, the amount and the payer name shown by the bank, through our banking notification provider.
We count visits with our own statistics built into the service, which records the page, the time and technical data such as IP address and browser. We use it to see which pages work and to spot abuse.
On some of our Vietnamese marketing pages we also use advertising measurement tools from Meta and TikTok, so we can tell whether an advert led to a sign-up. These run on marketing pages, not inside the paid product.
If you sign in with Google, we receive your email address, your name and your profile picture from Google. We do not receive your Google password.
Some features can connect to your Google Sheets or Google Drive — for example to store form entries in a spreadsheet you own. We request the narrow drive.file permission, which gives access only to the files you create or choose through the connection. We cannot see the rest of your Drive.
You can disconnect at any time in your account settings, or from your Google account's security page. Disconnecting stops future syncing; files already in your Drive stay yours.
We do not sell personal data and we do not share it for other companies' advertising. We share it only with providers that help us run the service:
| Provider | What for |
|---|---|
| Our hosting provider | Servers that store the service and your content. |
| Cloudflare | Traffic delivery, protection against attacks. |
| Polar (polar.sh) | Card payments, receipts, tax on your purchase. |
| Sign-in, and the Sheets or Drive features if you connect them. | |
| Email delivery provider | Sending receipts, renewal notices and account emails. |
We may also disclose data if the law requires it, or to protect our rights, our users or the public from harm.
We operate from Vietnam. Our servers are rented from a hosting provider, and our providers listed above operate internationally, so your data may be processed outside the country you live in — including outside the European Economic Area.
Where that happens for customers in the EEA or the United Kingdom, we rely on the safeguards offered by those providers, such as the European Commission's standard contractual clauses. You can ask us for details at support@27biggroup.com.
Wherever you live, you can ask us to:
If you are in the European Economic Area or the United Kingdom, you also have the right to object to processing based on our legitimate interests, to ask us to restrict processing, and to complain to your national data protection authority.
Write to support@27biggroup.com. We answer within 30 days, usually much sooner. We may need to check who you are before acting on a request.
Traffic runs over HTTPS. Passwords are stored as hashes, never in readable form. Access to the servers is limited and protected, and we keep the software we depend on up to date.
No online service can promise perfect security. If a breach affects your personal data and puts you at risk, we will tell you and the relevant authority as the law requires.
The service is not intended for children under 16, and we do not knowingly collect their personal data. If you believe a child has given us personal data, write to support@27biggroup.com and we will delete it.
We update this policy when the service or the law changes. The date at the top shows the current version, and we will tell you by email before a change that materially affects you.
Questions about privacy: support@27biggroup.com.