WhatsApp
Security & trust

Procurement-grade trust, built in

When the guest experience carries your brand, it carries your standards. Gathmo is GDPR-first and AI-moderated — with the controls your clients' security and legal teams ask for.

How we protect event media

Trust as a foundation, not an add-on

The same controls protect every event — whether it's on our domain or fully white-labelled on yours.

Where your data lives

Servers and database run in Phoenix, Arizona (USA); media is stored on Cloudflare. Transfers out of the EEA rest on the EU standard contractual clauses.

Encrypted in transit & at rest

All traffic runs over HTTPS/TLS, and stored media is encrypted at rest by our EU infrastructure.

AI + host moderation

Uploads are AI-moderated, and hosts can review before publishing, hide anything, and keep galleries invite-only.

Consent & retention

Consent is recorded at upload, retention windows are enforced per plan, and data is removed when the window ends.

Access control & SSO

Role-based team seats on every business plan, with SAML/OIDC single sign-on available on Enterprise.

GDPR & a signed DPA

GDPR-first by design, with a Data Processing Agreement under Art. 28 available to business customers.

DATA RESIDENCY

Hosted in the EU, never sent to the US

Event media and guest data sit on servers in Phoenix, Arizona, and on Cloudflare. The operator is a German company, so the GDPR follows the data wherever it is processed: consent, export and erasure are built in, for you and for the clients whose brand sits on top.

Data-subject rights

Consent, export and erasure — handled

Consent at upload
Every guest sees and accepts the terms before contributing — and that consent is recorded.
Export anytime
Download all originals as a ZIP per event, at any time, for you or your client.
Erasure on request
Delete an event or specific media and it's removed — GDPR right-to-erasure built in.
FAQ

Security questions

In Phoenix, Arizona (United States), with media on Cloudflare. Because the operator is a German company, the GDPR governs the processing, and transfers out of the EEA rest on the EU standard contractual clauses.

Yes. A Data Processing Agreement under GDPR Art. 28 is available to business customers — you can read it on our DPA page.

Yes, on Enterprise. SAML/OIDC SSO lets your team sign in with your identity provider; role-based seats are available on every business plan.

Uploads are AI-moderated, and hosts get moderation tools to review before publishing, hide content and keep galleries invite-only — so the experience under your brand stays clean.

The extra

Your guests get the whole album — and can download it.

  • Photos, videos and voice messages, all on one page.
  • Guests open the link and download whatever they want.
  • Public, or behind a password — you decide.
The shared album page with every guest upload in one grid
Pricing

From $49. Pay once, per event.

No subscription for hosts. Free to start, upgrade only when you need more.

Free
$0
Forever free
Try Gathmo at a small gathering.
  • 60 photos, videos & voice notes
  • 5 GB storage included
  • Unlimited guests — no app needed
  • 30 days album
  • Video up to 30 sec · voice 30 sec
  • Gathmo badge on shared media
  • No original-quality download
Start free
Essential
$49
one-time · per event
Every memory, full quality, yours to keep.
  • Unlimited photos, videos & voice
  • 50 GB storage included
  • Download all originals (ZIP)
  • No Gathmo badge on your media
  • 90 days album
  • Video up to 5 min · voice Unlimited
  • Host moderation tools
Choose Essential
Grand
$99
one-time · per event
For the day you only get once.
  • Everything in Celebrate
  • 250 GB storage included
  • Live stream for guests who can’t attend
  • Voice messages transcribed for you
  • Custom link — gathmo.com/c/your-name
  • 1 year album
  • Video up to 15 min · voice Unlimited
Choose Grand
Compare plans

Take it through procurement

Talk to sales about SSO, the DPA and data residency for your events.