Back to home

GDPR & Compliance

Gabyly is designed around European (GDPR) and US (CCPA) privacy principles from the ground up.

Lawful basis & consent

We process your data on the basis of your consent and to deliver the service you requested. You can withdraw consent at any time.

Article 17 — Erasure

The right to erasure is built into the product. Self-destruct timers and one-tap destroy give you Article 17 control by default.

Data minimisation

We collect only what is necessary to keep your shares secure and to show you who viewed them.

International transfers

EU data stays in the EU. We apply appropriate safeguards for any cross-border processing.

Last updated: 6/21/2026. Questions? privacy@gabyly.com