supawaldo Questions

the security and privacy steps taken for users on this platform.

=====================
== PRIVACY QUESTIONS ==
=====================

1. **Data Encryption**:
- Is the data transmitted over secure channels (HTTPS)?
- Is sensitive information stored in an encrypted format?
- What encryption protocols are being used?

2. **Access Control**:
- How is access to sensitive data controlled?
- Are there role-based access controls (RBAC) in place?
- Who has access to my data?

3. **Data Retention and Deletion**:
- How long is my data retained?
- Is there a process for data deletion upon request?
- Are there data retention policies in place?

4. **Third-Party Services**:
- Are any third-party services or APIs integrated, and how do they handle data?
- Are these services compliant with data privacy regulations?

5. **Compliance with Regulations**:
- Does the app comply with relevant data protection laws (e.g., GDPR, CCPA)?
- Are there measures in place for compliance with industry-specific regulations?

6. **Data Ownership and Sharing**:
- Who owns the data once it's submitted to the app?
- Is my data shared or sold to third parties?

=====================
== SECURITY QUESTION ==
=====================

1. **Authentication**:
- What authentication methods are in place (e.g., password, multi-factor authentication)?
- Is there a password policy, and what are the requirements?

2. **Password Storage**:
- How are passwords stored (e.g., hashed, salted)?
- Is there protection against password leaks?

Thank you

But here goes:

I bought several codes with hopes of using it for sharing photos with people that are captured at events. However the platform seems to be very basic. It’s definitely not on the level of Spot My Photos (or any other photo sharing site - AI or otherwise). I know this is the beginning for you, but what are your plans to improve the service? Do you have a public roadmap?

I would be interested in the following features added to make this useful on a minimal level:

1. Cname - it makes no sense to remove your branding if we can’t have a cname added.

2. Landing page to submit selfies. Guests should be sent to a dedicated (branded - our brand) landing page to upload their contact information and selfie BEFORE they are presented with any photos. They should be able to submit a selfie before there are any photos int gallery and notified that THEIR images are ready to be viewed when the gallery is published.

3. Granular download permissions. Owners should have the option of allowing guests to not download photos (view only), download only the photos guests appear in (singularly or as group), download any photo in the gallery (singularly or as group).

4. Maybe add a photo sales component.

5. Analytics. Who downloaded what, when, where

6. Email capture of what photos were downloaded.

I wanted to place this here vs the review section and will wait for your response. But if I don’t hear back I will be forced to leave a low review because the service is currently too basic to be useful and for lack of response.

e.g. a shared webalbum for friends?