Event Organiser Agreement
Version 1.2 — 17 October 2026
1. Parties and acceptance
1.1 This Agreement is between Alexander Ellul, a self-employed sole trader established in Malta, trading as "tratti.ai" (Fairwinds PH A14, Tumas Galea Street, Luqa, Malta, VAT No. MT19763931) ("tratti", "we", "us"), and the person or entity that accepts this Agreement when registering as an event organiser on https://tratti.ai (the "Organiser", "you").
1.2 You accept this Agreement by ticking the acceptance box during organiser onboarding or by using organiser features (dashboard, referral links), whichever occurs first. We store a timestamped record of acceptance. This is a business-to-business agreement.
2. What we do; what you do
2.1 tratti operates a marketplace where approved photographers sell event photos and videos, and where attendees can find their own photos using AI face search. You bring events to the Platform, authorise photographic coverage, and may promote the resulting galleries to participants.
2.2 You warrant that you have the authority to act for the event(s) you register and to authorise photography, filming and the commercial sale of resulting images through the Platform.
3. Commission
3.1 You earn a commission on Net Sales Revenue (as defined in clause 3.4) from sales attributed to you under clause 3.2. Unless a different rate is configured and displayed for a specific Event, the default commission is 10% of Net Sales Revenue.
3.2 Attribution works as follows: sales made by visitors who arrived through your referral link ("?via=" link) are attributed to you for 30 days from the click, using an attribution cookie. Sales that do not arrive through your referral link earn no commission, and no commission is earned on sales of Content you uploaded yourself. Where a commission applies, the photographer's default share is 70% (rather than 75%).
3.3 The split applicable to each sale is recorded at the moment of purchase and is unaffected by later settings changes.
3.4 "Net Sales Revenue" means the amount actually received by tratti for a sale, less (a) VAT and other sales taxes, (b) payment processing fees, (c) refunds and chargebacks, and (d) discounts or promotional reductions applied at checkout.
3.5 Payouts are made in euro in periodic payout batches. No minimum payout threshold currently applies; if one is introduced it will be announced in advance and displayed on your dashboard. A payout receipt is issued per batch. You are solely responsible for your own taxes on commission received, and for issuing any invoices or fiscal receipts required of you by law.
4. Your obligations to attendees (important)
4.1 Because the Platform uses face recognition to help attendees find their photos, transparency towards attendees is a legal requirement, and much of it can only happen at the event itself. You must:
- include a photography-and-sales notice in your event registration terms and on-site signage, substantially in the form of the Annex to this Agreement (or wording we approve);
- inform participants that event photos will be published on tratti.ai, that faces in the photos are indexed so participants can find their own images, and that removal can be requested at any time;
- for events where participants include minors, obtain the consents from parents/guardians that applicable law and your federation/venue rules require, and tell us promptly of any category of participants whose images must not be published;
- forward to us without undue delay any privacy complaint or photo-removal request you receive, and provide reasonable assistance in resolving it.
4.2 We may remove images, disable face search for an Event, or unpublish an Event where needed to comply with law or a data subject request, without liability to you.
5. Data protection
5.1 For personal data processed on the Platform (buyer accounts, purchases, face search), tratti is the data controller and the Platform's Privacy Policy applies. For personal data you collect through your own registration process, you are the controller; you must have a lawful basis to share participant-facing communications about the Platform. Where you use the Platform to email your participants, clause 9 applies and tratti acts as your processor for that purpose.
5.2 You must not extract or reuse personal data of Platform users obtained through your dashboard for purposes outside this Agreement, and in particular must not use it for marketing unrelated to the event without a proper legal basis of your own.
6. Term and termination
6.1 This Agreement starts on acceptance and continues until terminated by either party on written notice (email suffices).
6.2 On termination: accrued commission is paid in the next payout batch, and any residual balance is paid within 90 days. Clauses 4.1 (for events already covered), 5, 7, 8 and 9 survive termination. Your contact lists and stored campaign recipients are deleted when this Agreement ends or your account closes (clause 9.8).
7. Liability
7.1 Nothing in this Agreement excludes liability that cannot be excluded by law. Subject to that: (a) neither party is liable for loss of profits or indirect losses; and (b) each party's total liability is capped at the greater of €500 and the commission paid or payable to you in the 12 months before the claim arose.
7.2 We do not guarantee any level of sales, traffic or commission. The Platform is provided "as is".
8. General; governing law
8.1 We may amend this Agreement on at least 30 days' notice; if you do not accept, you may terminate before the change takes effect. Completed sales are never re-split retroactively. You may not assign this Agreement without our consent. If a clause is invalid, the rest stays in force.
8.2 This Agreement is governed by the laws of Malta and the courts of Malta have exclusive jurisdiction.
9. Email campaigns to your participants
9.1 Roles. The Platform lets you upload or paste email addresses of your participants and send them emails about your event's photos ("Campaigns"). For this, you are the data controller of the addresses you provide, and tratti processes them on your behalf as your processor (Article 28 GDPR). Your use of the Campaign feature is your documented instruction to us.
9.2 Your promises. For every address you upload you warrant that: (a) the person took part in, or registered for, the event the Campaign is about; (b) you have a lawful basis to email them about it, which for marketing email means their prior consent, or an existing relationship in which they were given a clear, free chance to opt out when you collected their address (as permitted by the Processing of Personal Data (Electronic Communications Sector) Regulations, S.L. 586.01, and equivalent laws); (c) you obtained the addresses lawfully and have not bought, rented or scraped them; and (d) you will only send Campaigns about that event's photos. You confirm this each time you send a Campaign; we record that confirmation (who, when, which list and the exact wording shown).
9.3 Indemnity. You are responsible for, and will compensate us for, losses, fines and reasonable costs arising from Campaigns sent to addresses for which the promises in clause 9.2 were not true. The cap in clause 7.1(b) does not apply to this indemnity.
9.4 What we do with your lists. We use your lists only to send the Campaigns you ask for and to show you delivery results. We never use them for our own marketing, never sell them, and never share them with other organisers, photographers or third parties other than the sub-processors in clause 9.6. Only you (and tratti's administrators, who are bound by confidentiality) can see them.
9.5 Security. Addresses are stored encrypted at rest on servers in the EU, sent over encrypted connections, and kept out of application logs. We will tell you without undue delay if we become aware of a personal data breach affecting your lists, and help you meet your own notification duties.
9.6 Sub-processors. You authorise us to use Amazon Web Services EMEA SARL (Amazon SES email delivery, region eu-central-1, Frankfurt) and Hetzner Online GmbH (hosting, Germany). We will give you notice of any new sub-processor, during which you may object by ending your use of Campaigns. Each sub-processor is bound by data protection terms no less protective than this clause.
9.7 Unsubscribes and suppression. Every Campaign names you, explains why the person is receiving it, says it is sent by tratti on your behalf with a link to our privacy policy (which gives our full identity and address), sends replies to you, and includes a one-click unsubscribe link. A person who unsubscribes will not receive your Campaigns again, and may choose to stop all Campaigns sent through tratti. Addresses that hard-bounce or report spam are blocked for all organisers. We keep a list of these blocked addresses (stored only as a one-way hash) permanently so they are never emailed again; you cannot override it.
9.8 Retention and deletion. Contact lists and stored campaign recipients are deleted automatically 12 months after the end of the event they were created for. You can delete a list at any time. All your lists and stored recipients are deleted when your account closes. If a person asks us to erase their address, we remove it from every organiser's lists and block it from future Campaigns, and we will tell you if they contacted us about your Campaign.
9.9 Requests from participants. We will forward to you any request or complaint from a participant about your Campaign and help you respond. You must forward to us without undue delay any unsubscribe or erasure request you receive by other means, so we can apply it.
9.10 Limits, review and suspension. To protect deliverability for everyone, Campaigns are limited (currently 2,000 recipients per Campaign and 3 Campaigns per event per calendar month), your first Campaign is reviewed by us before it is sent, and the email layout is fixed. We may pause or switch off your Campaigns, without liability, if bounce or spam-complaint rates are high (currently above 5% hard bounces or 0.3% complaints), if we reasonably suspect a breach of clause 9.2, or to comply with law or an instruction from our email provider.
9.11 Audit. On reasonable request we will provide the information you need to show that we meet this clause. We will not process your lists other than on your instructions unless required by law, in which case we will tell you unless the law prevents it.
Annex — Suggested attendee notice wording
For registration terms and on-site signage. Adapt event name and organiser name as needed.
"Photography at this event: Professional photographers will take photos and videos at this event. Images will be published on tratti.ai, where you can view them and purchase downloads. To help you find your own photos, tratti.ai uses automated face-matching: faces appearing in event photos are indexed so that you (and only you, using your own selfie with your explicit consent) can search for photos of yourself. Images and face indexes are deleted when albums are removed from sale. If you do not want your photos published, or want a specific photo removed at any time, contact [email protected] — removal is free and processed within 30 days. For participants under 18, publication is subject to parental/guardian consent collected at registration. Full details: https://tratti.ai/privacy-policy"
Optional — to email participants when photos are live (add as an unticked checkbox on your registration form):
"☐ Email me when the photos from [event] are online. [Organiser] sends these emails through tratti.ai. You can unsubscribe at any time using the link in every email."