Terms of Service

The main points in plain words. The full terms below are what apply.

• You run the booth; you're responsible for it. You decide where your kiosk goes, who it photographs, and how long their photos are kept. For your guests' personal data, you are the party legally responsible (the data controller / organisation). We store and process it only on your behalf.
• Your guests aren't our customers, they're yours. Telling them about the photos, getting any consent the law requires, and answering their requests is your job.
• Photos are kept 30 days by default and deleted after. If you extend them, that's your decision, and you must make sure it's lawful.
• If a guest, venue or regulator brings a claim over how you ran your booth, you cover it, not us.

These Terms of Service (the “Terms”) are an agreement between you and Oangle, a company registered in Singapore (“we”, “us”, “our”), which operates Oobler (the “Service”). You accept them when you create an account, when you tick the agreement box in the app, or when you use the Service - whichever comes first. We keep a record of when and from where you accepted each version.

If you use the Service for a business, club, school or other organisation, you confirm that you are authorised to accept these Terms for it, and “you” means both you and that organisation. You must be at least 18 years old to hold an account.

These Terms incorporate our Privacy Policy and Refund Policy.

• Host - you, the account holder who creates events and runs kiosks.
• Guest - anyone who uses, or is photographed by, a kiosk you run, including anyone in the background of a photo.
• Kiosk - any device on which you open an event's kiosk page, wherever it is placed.
• Guest Content - photos captured at your kiosk, the images generated from them, photo strips and animations, any text a guest types, and any copies or download links of these.
• Host Content - anything you upload or configure: backgrounds, frames, stickers, overlays, poses, screen designs, lead screens, button images, fonts, sounds and text.
• Data Protection Law - every law on personal data that applies to your use of the Service, including Singapore's Personal Data Protection Act 2012 (“PDPA”), the EU General Data Protection Regulation and the UK GDPR (together “GDPR”), and any equivalent law where your kiosk is used or your guests live.

The Service lets you create events, configure a browser-based photobooth kiosk, transform guests' photos with AI or assemble photo strips, and let guests download, scan, print or have it emailed. It also includes Booth Designer, a paid per-event editor for the kiosk's screens; the video wall, a paid per-event public page that shows an event's photos on a big screen; and an optional Generation API. We may change, add or remove features, AI models and providers at any time.

You alone decide where, when and how a kiosk is used, and you are responsible for it. In particular, you must:

• have the permission of the venue owner or operator, and follow the venue's rules, before placing a kiosk anywhere;
• comply with every law that applies where the kiosk is used, including laws on photography and recording in public or private places, surveillance, advertising and consumer protection;
• never place a kiosk where people have a reasonable expectation of privacy (such as toilets, changing rooms, medical or prayer rooms, or private homes without the occupants' agreement), and never use it to photograph anyone covertly or without their knowledge;
• keep the kiosk supervised or physically secured, keep the device locked to the kiosk page, and make sure no one can use it to reach your account, other events or other apps;
• display clear notice at the kiosk (see section 6) before anyone is photographed.

We have no control over, and accept no responsibility for, where a kiosk is placed, who uses it, who is photographed, or what happens to a device you operate.

5.1 Your role. For Guest Content and any other personal data about guests, you are the data controller (GDPR) and the organisation responsible (PDPA). You decide why and how that data is collected, whether to collect it at all, how long it is kept, and who it is shared with.

5.2 Our role. For that data we act only as your processor (GDPR) and data intermediary (PDPA). We process it only to provide the Service to you and on your documented instructions - your account and event settings, including your retention choices, are those instructions - and as required by law.

5.3 Your obligations. You are solely responsible for meeting every obligation Data Protection Law places on a controller or organisation for Guest Content, including:

• having a lawful basis for capturing and processing each guest's photo;
• giving guests the notice the law requires, and obtaining and recording any consent it requires - including consent from a parent or guardian for children, and explicit consent wherever a guest's image counts as sensitive or special-category data;
• deciding how long photos are kept and making sure that period, including any extension, is lawful and matches what you told guests;
• responding to guests' requests to access, correct, delete or withdraw consent for their data, and to any complaint or regulator enquiry about your event;
• your own obligations for any copies you or your guests download, print, share or keep outside the Service.

5.4 What we do as your processor. We will: keep Guest Content confidential and limit access to personnel who need it; apply reasonable security measures appropriate to the risk; use only the sub-processors listed in our Privacy Policy (you authorise them, and we will update that list when it changes); notify you without undue delay after becoming aware of a personal data breach affecting your Guest Content; delete Guest Content at the end of its retention period; and give you reasonable help, at your cost where the effort is more than minimal, with guests' requests and regulator enquiries.

5.5 International transfers. Our providers store and process data in several countries, including the United States. You are responsible for telling guests this where Data Protection Law requires it; we rely on our providers' contractual safeguards for these transfers.

5.6 Requests that reach us. If a guest or regulator contacts us about your event, we may refer them to you and share your contact details with them for that purpose, and you agree to deal with it.

Your guests have no agreement with us. They use the kiosk as your guests, on your terms and under your responsibility, and you must not present us as the party responsible for their data. Before anyone is photographed you must show them, at or on the kiosk, clear information including at least: that their photo will be taken, processed by AI and stored; who is responsible for it (you); how long it is kept; how to reach you about it; and, where consent is required, a way to give or refuse it. Your own lead screens are a good place for this.

You are responsible for everything that happens to Guest Content once it leaves the Service, including through QR codes, download links, prints, emails and anything a guest or you share.

Video wall. If you turn on an event's video wall, every finished photo from that event is shown on a public web page to anyone who has its link. You decide to publish them and you are responsible for it: telling guests their photo will be shown on a screen (and, where required, getting their consent) before they are photographed, where the screen is and who can see it, and keeping the link to yourself - replace it in your event settings if it may have been shared. We show the photos only on your instruction and stop as soon as the photo is deleted or expires, or you replace the link.

Email delivery. If you turn on email, guest photos are sent through the email server (SMTP) whose details you give us, from your address. You are responsible for that account, for the emails sent from it and for complying with the rules that apply to them. We use the address a guest types only to send that one email: we don't store or log it, and we keep your SMTP password encrypted.

Guest Content is kept for 30 days from capture and then permanently deleted, unless you extend it. Extending retention, and choosing for how long, is your instruction to us and your responsibility: you confirm you have a lawful basis for keeping it that long and that you told guests. You can delete a photo or a whole event at any time. Deletion from our live systems is permanent; residual copies in encrypted provider backups and logs expire on those providers' own schedules. Copies already downloaded, printed or shared are outside our control.

Retention is a data-protection limit, not a backup service. Download anything you need to keep before it expires.

Give accurate account information, keep your login secure, and tell us promptly if you suspect unauthorised access. You are responsible for everything done under your account, including credits spent at your kiosks and any unauthorised use of an unsecured kiosk device.

You must not use the Service to:

• photograph anyone without their knowledge, or anyone who has refused;
• identify, track or profile people, or build facial-recognition or biometric databases;
• create content that is unlawful, defamatory, harassing, sexually explicit, hateful, or that impersonates or misrepresents a real person;
• upload or display material you don't have the rights to, including third-party logos, trademarks, artwork, fonts and sounds;
• probe, overload, reverse-engineer or gain unauthorised access to the Service or its infrastructure.

We may remove content, pause generation, or suspend accounts to stop a breach of these Terms or of the law.

You keep ownership of Host Content and confirm you have every right needed to use it - including, for a font you upload, a licence that lets it be embedded in a website or app and shown on screens in public, and for any image, artwork or sound, the rights to show or play it at your events. We don't check the licence of anything you upload; if someone claims Host Content infringes their rights, we may remove it, and section 12 applies. You give us a worldwide, non-exclusive licence to host, process and display Host Content and Guest Content only to provide the Service to you. We claim no ownership of Guest Content. AI output is generated by third-party models, varies between captures, may be inaccurate or unexpected, and is provided without any warranty; review it before relying on it or publishing it.

Credits are bought in packs through Stripe, don't expire, and are spent as guests capture photos. Retention extensions, extra event slots, Booth Designer and the video wall are separate one-off purchases. A Booth Designer or video wall unlock applies to one event only, can't be transferred, and ends if that event is deleted. Prices are shown before you pay. See the Refund Policy for refunds.

To the fullest extent permitted by law, you will defend, indemnify and hold harmless us, our officers, employees and providers from and against every claim, demand, complaint, investigation, penalty, fine, loss, damage, cost and expense (including reasonable legal fees) arising out of or relating to: where and how you place, operate or secure a kiosk; your collection or use of Guest Content or other personal data; any failure to give notice, obtain consent, or meet any other obligation under Data Protection Law; your retention instructions; Host Content; or your breach of these Terms or of any law.

The Service is provided “as is” and “as available”. To the fullest extent permitted by law we disclaim all warranties, express or implied, including of merchantability, fitness for a particular purpose, non-infringement and uninterrupted or error-free operation. We do not give legal advice, and nothing in the Service (including any template notice or setting) confirms that your use of it is lawful where you use it.

To the fullest extent permitted by law: (a) we are not liable for any indirect, incidental, special, consequential or punitive damages, or for loss of profits, revenue, goodwill, data or photos, or event disruption; and (b) our total liability for all claims arising out of or relating to the Service or these Terms is limited to the amount you paid us in the 12 months before the event giving rise to the claim.

Nothing in these Terms limits liability that cannot lawfully be limited, including for death or personal injury caused by negligence, or for fraud. Where Data Protection Law makes us directly responsible as a processor or data intermediary, that responsibility is limited to our own breach of the obligations that law places on us.

You may stop using the Service and delete your events at any time, and ask us to close your account. We may suspend or terminate your account if you breach these Terms, if required by law, or to protect guests, other users or the Service. On termination we delete Guest Content in line with section 7 and Host Content within a reasonable time, except records we must keep by law (such as billing records). Credits on an account terminated for breach are not refunded. Sections 5, 6, 7, 10, 12, 13, 14 and 17 survive termination.

We may update these Terms. For a material change we will ask you to accept the new version in the app before you continue using it; if you don't accept it, stop using the Service. The date at the top shows the current version.

These Terms are governed by the laws of Singapore. The courts of Singapore have exclusive jurisdiction over any dispute arising out of or relating to them, except that we may seek urgent relief in any court.

These Terms, with the Privacy Policy and Refund Policy, are the whole agreement between us about the Service. If any part is found unenforceable, the rest continues in effect and that part is limited only as far as needed. Failing to enforce a right is not a waiver of it. You may not transfer these Terms without our consent; we may transfer them to a successor to our business. Neither of us is liable for delays caused by events beyond reasonable control, including outages of our providers.

Questions about these Terms? Reach us through our contact page.