Last updated: 9 October 2026 • Effective: 9 October 2026
We collect data to deliver face-matched photo experiences at events. Selfie images and selfie/search descriptors are deleted after 30 days, and event-photo face indexes within one year or earlier when the relevant event or photos are deleted. We never sell your data.
TIME&SPACE is an event media platform based in Lisbon, Portugal. We provide a face-recognition photo delivery system that helps event guests find and download their photos.
Company: Welcome Objective Unipessoal Lda, trading as TIME&SPACE
NIF: 517881721
Registered office: Lisbon, Portugal
Data Controller: TIME&SPACE is the independent controller of guest photo search: consent, selfies, all face templates (including those made from event photos), guest emails and accounts. The organiser is the controller of its event photos, roster and team data, and TIME&SPACE processes those on its behalf under our DPA.
Privacy Contact: privacy@timeandspace.earth
Legal Contact: legal@timeandspace.earth
We collect only what's necessary to run the platform. Here's the breakdown:
Your face data is protected under GDPR Article 9 (special category data). Here's how we handle it:
A facial embedding is a mathematical representation of your face (512 numbers). It is not a photograph of your face. We use it only as a numerical descriptor for matching and retrying a search.
Your face embedding is used only for photo matching. We do not sell it, use it for marketing or advertising, or build a surveillance database. Service providers involved in hosting and face matching may process it only on our instructions for this purpose.
Under GDPR, we process data for these lawful reasons:
Account data. Event photos are processed on the organiser's behalf under our DPA
Biometric data (face embeddings). GDPR Article 9 requires explicit consent for special category data
Fraud prevention, platform security, analytics, and service improvement. Tracking referral link click counts and commission calculations (to operate the referral programme)
Contacting event organisers and businesses at their published business contact details, and listing public events from public sources. You can object at any time
Tax records (7 years under Portuguese law), GDPR compliance. IBAN and NIF collected for payout processing are retained under Portuguese tax law (Artigo 123.º CIRS)
When an event organiser activates a sponsor for an event, guest photo downloads may include a sponsor logo watermark. Here is how this works:
The watermark is applied by the event organiser at their instruction. TIME&SPACE merely executes the watermarking configuration.
Guests are informed of active sponsorships on their event gallery page, so they know sponsored content may appear on their downloaded photos.
TIME&SPACE does not receive payment directly for sponsor watermarks. Sponsor arrangements are between the organiser and the sponsor only.
If you participate in the TIME&SPACE referral programme, either as a referrer sharing your link, or as a referred organiser who signed up via a referral link, we process the following data:
Referral attribution and commission calculation: Legitimate interest (operating the referral programme, fraud prevention). Payout processing and financial records: Legal obligation (Portuguese tax law, Artigo 123.º CIRS requires financial records to be kept for 7 years).
You may request deletion of your referral data (click history, attribution, earnings records) at any time by emailing privacy@timeandspace.earth. Note that financial records (paid commissions, IBAN, NIF) may be retained for up to 7 years under tax law even after an account deletion request.
Full programme terms are at timeandspace.app/terms#referral.
When an event has no photos yet, either because you searched for it on our finder and it is not in our archive, or because you tapped Request these photos on an event page, you can ask us to tell you when the photos become available, and to keep you posted about the TIME&SPACE mobile app. This section explains what that involves.
Legal basis: sending you the notification email and updates about the TIME&SPACE app relies on your consent (GDPR Art. 6(1)(a)), recorded with a timestamp when you tick the box. The search and demand log without an email relies on our legitimate interest in understanding which events to add (Art. 6(1)(f)).
How long we keep it: we keep your email until you unsubscribe or ask us to delete it. If you only asked about an event we never collect, we delete your email within 12 months. Search records without an email are kept only as aggregate demand data.
You can withdraw consent at any time using the unsubscribe link in our email, or by writing to privacy@timeandspace.earth. You can also ask us to access or delete this data at any time.
Deleted automatically after 30 days
Deleted after 30 days; used only for matching and retrying the search, including when photographers upload photos after the event
Deleted within 1 year of the relevant photo upload, or earlier if the relevant event or photos are deleted
Retained while the account is active to provide photo history; deleted or de-linked on account deletion. This does not extend the 30-day selfie/search descriptor period
Kept as agreed with the organiser: online for at least 365 days after the event, then kept as the organiser's archive until the organiser deletes them or asks us to
Retained while your account is active. A deletion request starts a reversible 7-day grace period; permanent erasure follows at the end, subject to limited records that must be retained for legal, tax, fraud-prevention, or security purposes.
Kept only as long as necessary to demonstrate and manage consent and related legal claims
When an organiser deletes an event, its face index is deleted within a day and its photos are permanently deleted 30 days later
For guests without an account, the email given at a scan is deleted with the scan record after 30 days, and delivery records are deleted or replaced with a one-way code after 30 days. Emails of account holders stay with the account until it is deleted.
The record that you made a request and how we handled it is kept to show we acted on it; your email address in that record is replaced with a one-way code 30 days after the request is closed
Kept for 7 years (Portuguese tax law, Artigo 123.º CIRS)
Commission records retained for 7 years (Portuguese tax law). IBAN and NIF stored only after a payout is requested; retained for 7 years as financial records. Referral attribution data (who referred whom) retained as long as your account is active, then deleted with your account
Email kept until you unsubscribe or ask us to delete it; if the event is never collected, deleted within 12 months. Anonymous search records kept as aggregate demand data
Usage and measurement data retained according to the applicable TIME&SPACE and provider settings; it may include pseudonymous, device, browser, and network identifiers and is not described as anonymous unless technically verified
Under GDPR and similar privacy laws, you have these rights:
Request access to personal data we hold about you. Portability in a structured, commonly used format applies where the legal conditions are met
Request deletion of eligible account, photo, or face data. Self-service account deletion uses a reversible 7-day grace period, during which the account is marked for deletion and access is restricted, followed by permanent erasure or de-linking. Limited legal, tax, fraud-prevention, security, and consent-evidence records may remain where necessary
Update your account information through your dashboard or request corrections via email
Request that we stop using your data (except for legal obligations)
Export your data in a machine-readable format to move to another service
Opt out of marketing emails, analytics, and certain legitimate interest processing
Withdraw consent for face recognition anytime. No penalty.
To exercise any of these rights, email privacy@timeandspace.earth with your request. We will respond within 30 days.
TIME&SPACE is based in Portugal. Database and storage: Ireland (AWS eu-west-1). Face recognition: Netherlands. App servers: Dublin. Biometric data never leaves the EU.
Email delivery (Resend) is in the US under Standard Contractual Clauses; Vercel and Cloudflare use Standard Contractual Clauses or the EU-US Data Privacy Framework.
You have the right to know which countries your data travels to. Contact privacy@timeandspace.earth for a list of all data processors and their locations.
The TIME&SPACE mobile app allows registered users to create a guest profile, RSVP to events, follow other users, and discover events. The following data is processed when you use these features:
When you follow another user, your followers can see which public events you have RSVPed to, so they can discover events through your activity. By RSVPing to a public event, you consent to that RSVP being visible to your followers. There is currently no setting to make an individual RSVP private. If you do not want a specific RSVP visible, remove it, or RSVP to a private event instead; we may add per-RSVP privacy controls in a future release. We show your social context to help others find events. For example, "2 people you follow are going to this event."
Legal basis for processing: Legitimate interest (providing the social and discovery features you actively use). You can withdraw from social features at any time by deleting your guest profile in Settings.
Organiser and Photographer accounts can create a public profile page at timeandspace.app/u/[username]. This is optional and fully controlled by you.
Your account email, phone number, billing information, and all private fields are never shown on your public profile.
Your chosen username forms your public URL. Usernames can be changed once every 30 days. When you change your username, your old URL redirects to your new one for 90 days, after which it becomes available to others. Your previous username is stored during this redirect window and permanently deleted once the 90-day window expires.
Your public profile is visible by default once you set a username. You can hide it at any time in Account Settings → Public Profile. Hiding your profile makes the page private but does not delete your username or data. You can re-enable visibility at any time.
Legal basis for processing: Legitimate interest in providing a professional presence on the platform. You can withdraw at any time by hiding your profile or deleting your account.
The TIME&SPACE mobile app may send push notifications. Under EU law, push notifications require your prior consent. We use two separate consent categories:
Notifies you when your photos are ready, or when new photos have been matched to your face at an event. These are functional notifications directly related to the service you are using.
Notifies you about new events, platform features, or promotions. These require separate opt-in consent and are off by default.
You can change your push notification preferences at any time in Settings → Notifications. Withdrawing consent stops future notifications immediately. Your consent choices are logged in our system with a timestamp. If you use the app without an account and turn notifications on, we keep your device's push token with a random identifier created by the app, and nothing else, only to tell you when photos of you appear. It is deleted 30 days after you last open the app, and you can stop it at any time in your phone's settings.
We use email, SMS, or WhatsApp only for the categories described below. Saving a phone number does not enrol you in marketing, and this policy does not create permission to contact people who previously provided contact details without choosing the relevant preference.
We may send narrowly necessary messages about security, account access, important service changes, or a platform or app migration. These are functional communications used to protect or provide your account and are never used to add promotional content.
You can separately choose email, push, SMS, and WhatsApp reminders for an event you RSVP'd to or registered for. We verify that event relationship before a reminder is eligible. These reminders concern that event only and must not include promotions, offers, or advertising.
Marketing email (events, features, and offers) is enabled by default when you create an account. You can turn it off at any time in Account Settings → Notifications, or with the unsubscribe link in any marketing email. Marketing push, SMS, and WhatsApp are separate, per-channel opt-ins and remain off by default. None of this is required to create an account, RSVP, find photos, or use any other part of the service.
Change email and direct-message preferences at any time in Account Settings → Notifications. Use the unsubscribe link in a marketing email, reply STOP where SMS/WhatsApp supports it, or email privacy@timeandspace.earth. Message frequency varies and message or data rates may apply. Turning off event reminders or marketing does not affect essential security or account-access messages.
Our email provider, and any future SMS or WhatsApp provider, processes the relevant email address or phone number, message content, delivery status, and opt-out signals only as our processor and under our instructions. We do not sell contact details or communication-preference records. We keep timestamped preference records to apply and demonstrate your choices.
When you download or use the TIME&SPACE app from the Apple App Store or Google Play Store, Apple and Google may collect analytics and diagnostic data according to their own privacy policies. This data is collected by Apple and Google directly, not by TIME&SPACE.
For information on what Apple collects, see apple.com/privacy. For Google, see policies.google.com/privacy.
You have the right to request access to personal data we hold about you and, where the legal conditions apply, receive eligible data in a portable format. Registered B2C users can request the currently available account export from account settings:
You can also request your data by email at privacy@timeandspace.earth with subject line "Data Export Request". We will respond within 30 days.
Minimum age: 16 years old, worldwide. There are no country exceptions. 16+ applies to all use, including scanning at an event without an account. We do not check age technically.
We may ask you to confirm your age or date of birth when you create an account. If you are under 16, you may not use the service.
We do not knowingly collect personal data from children under 16. If we discover that a user is under 16, we will delete their account and all associated data immediately.
California (CCPA/COPPA): The service is not directed at children under 13. California residents have the right to know what personal data we collect, request deletion, and opt out of any sale of data. TIME&SPACE does not sell personal data. To exercise CCPA rights, email privacy@timeandspace.earth with subject "CCPA Request."
Privacy inquiries: privacy@timeandspace.earth
General inquiries: hello@timeandspace.earth
Address: Lisbon, Portugal
TIME&SPACE is established in Portugal (EU). Our designated DSA contact point for authorities, trusted flaggers, and users making DSA-related requests is:
If you have privacy concerns, you can lodge a complaint with your data protection authority:
Portugal: CNPD (Comissão Nacional de Proteção de Dados)
EU: Contact your national data protection authority (search at edpb.ec.europa.eu)
California (CCPA): See our Children and minimum age section above for full CCPA rights. In summary: TIME&SPACE does not sell personal data. To exercise CCPA rights, email privacy@timeandspace.earth with subject "CCPA Request".
You also have the right to use the EU Online Dispute Resolution platform for disputes.
We may update this policy. Material changes will be announced via email and on this page. Continued use after changes means you accept the new policy.
We're committed to being transparent about how we handle your information. If you have any questions or concerns about your privacy, contact us at privacy@timeandspace.earth.
You also have the right to lodge a complaint with your national data protection authority. We will cooperate fully with any investigation.