1. Introduction
This Privacy Policy describes how we collect, use, store, share, and protect your personal information when you use our event photo and video sharing platform (the "Service" or "Platform"). We are committed to protecting your privacy and handling your data in a transparent, secure manner.
By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with this Privacy Policy, please do not use our Service.
2. Information We Collect
2.1 Information You Provide Directly
Account Information:
Full name
Email address
Password (encrypted)
Phone number (optional)
Payment information (processed by our payment provider)
Billing address
Event and Content Information:
Event names and descriptions
Event dates and settings
Photos and videos you upload
Guest book messages
Private messages
Comments and interactions
Event access codes
Branding customizations
Communications:
Support requests and correspondence
Feedback and survey responses
Messages sent through the Platform
2.2 Information Collected Automatically
Device and Usage Information:
IP address
Browser type and version
Device type and operating system
Pages visited and features used
Time and date of visits
Referring URLs
Session duration
Click patterns and navigation paths
Location Information:
General geographic location based on IP address
Precise location if you grant permission (for certain features)
Cookies and Similar Technologies:
Session cookies for authentication
Preference cookies for settings
Analytics cookies for usage statistics
Performance cookies for service optimization
2.3 Information from Third Parties
Payment Processors: Transaction confirmation and payment status, Billing verification information
Social Media and Third-Party Integrations: Information from platforms you connect to our Service (if applicable)
Affiliate Partners: Referral information for affiliate tracking
3. How We Use Your Information
3.1 Service Delivery and Functionality
We use your information to:
Create and manage your account
Process subscriptions and payments
Provide event hosting and management features
Store and display photos and videos
Enable content sharing among event participants
Deliver notifications and updates
Generate QR codes and access links
Process and moderate uploaded content
Enable guest book and commenting features
Facilitate co-host collaboration
3.2 Service Improvement and Analytics
We use your information to:
Analyze usage patterns and trends
Improve Platform features and performance
Develop new features and services
Conduct research and testing
Optimize user experience
Identify and fix technical issues
3.3 Communications
We use your information to:
Send transactional emails (account verification, password resets, payment confirmations)
Send event-related notifications
Provide customer support
Send important service updates
Send marketing communications (with your consent, and you may opt out)
3.4 Security and Compliance
We use your information to:
Detect and prevent fraud and abuse
Enforce our Terms and Conditions
Protect our rights and property
Comply with legal obligations
Respond to legal requests and prevent harm
3.5 Affiliate Program
We use your information to:
Track referrals and calculate commissions
Process affiliate payments
Prevent affiliate fraud
4. Legal Basis for Processing (GDPR)
For users in the European Economic Area (EEA), UK, and Switzerland, we process your personal data based on:
Contractual Necessity: Processing necessary to provide the Service you requested
Legitimate Interests: Service improvement and analytics, Fraud prevention and security, Marketing to existing customers
Legal Compliance: Responding to legal requirements and requests, Tax and accounting obligations
Consent: Marketing communications to new prospects, Optional feature usage requiring explicit consent
You have the right to withdraw consent at any time, though this may limit service functionality.
5. How We Share Your Information
5.1 With Event Participants
When you create or participate in an event:
Your uploaded content is shared with other authorized event participants
Your name or identifier may be visible to other participants
Your comments and interactions are visible according to event settings
5.2 Service Providers
We share information with trusted third-party service providers who assist us:
Infrastructure and Hosting: Cloud storage providers, Content delivery networks, Database hosting services
Payment Processing: Payment processors, Fraud detection services
Communications: Email service providers, Customer support platforms
Analytics and Monitoring: Analytics platforms, Performance monitoring tools, Error tracking services
Affiliate Management: Affiliate tracking platforms, Payment processors for affiliate commissions
All service providers are contractually obligated to protect your data and use it only for the purposes we specify.
5.3 Business Transfers
If we are involved in a merger, acquisition, sale of assets, or bankruptcy, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.
5.4 Legal Requirements
We may disclose your information when required by law or in response to:
Court orders or subpoenas
Government or regulatory requests
Legal processes or proceedings
Protection of our rights, property, or safety
Protection of our users or the public
Investigation of fraud or policy violations
5.5 Aggregated and Anonymized Data
We may share aggregated, anonymized data that cannot identify you individually for:
Industry research and reports
Marketing and promotional purposes
Service improvement insights
5.6 With Your Consent
We may share your information with third parties when you explicitly consent to such sharing.
6. Content Moderation
To maintain a safe and appropriate environment, we:
Use automated systems to scan uploaded content
May manually review content flagged by moderation systems
Detect and remove content violating our policies
Maintain logs of moderation actions
Content moderation is performed to protect users and ensure compliance with our Terms and applicable laws.
7. Data Retention
7.1 Active Accounts
We retain your information as long as your account is active and as needed to provide the Service.
7.2 After Account Closure
After you close your account, we:
Delete or anonymize most personal information within 90 days
Retain certain information longer when required for: Legal compliance and tax obligations, Fraud prevention and security, Dispute resolution, Backup and disaster recovery (typically 30-90 days)
7.3 Event Content
Event content is retained according to your subscription plan
Hosts can download and delete their event content at any time
After subscription expiration, content may be retained for a grace period before deletion
8. Your Privacy Rights
8.1 Rights for All Users
Access and Portability: Request a copy of your personal information, Export your event content and data
Correction: Update or correct inaccurate information through account settings
Deletion: Request deletion of your account and personal information, Delete specific content you uploaded
Objection: Opt out of marketing communications, Disable optional features
8.2 Additional Rights for EEA/UK Users (GDPR)
Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data in certain circumstances
Right to Restriction: Request restriction of processing in certain circumstances
Right to Object: Object to processing based on legitimate interests
Right to Data Portability: Receive your data in a structured, machine-readable format
Right to Lodge a Complaint: File a complaint with your local supervisory authority
8.3 Additional Rights for California Users (CCPA/CPRA)
Right to Know: Know what personal information is collected, used, shared, or sold
Right to Delete: Request deletion of personal information
Right to Opt-Out: Opt out of the "sale" or "sharing" of personal information (we do not sell personal information)
Right to Non-Discrimination: Not receive discriminatory treatment for exercising privacy rights
Right to Correct: Request correction of inaccurate personal information
Right to Limit Use of Sensitive Personal Information: Limit use of sensitive personal information (if applicable)
8.4 Exercising Your Rights
To exercise your privacy rights:
Email us at [privacy email address]
Use privacy controls in your account settings
Follow opt-out links in marketing emails
We will respond to verified requests within the timeframes required by applicable law (typically 30-45 days).
9. Data Security
9.1 Security Measures
We implement industry-standard security measures including:
Encryption in transit (TLS/SSL)
Encryption at rest for sensitive data
Secure authentication and password hashing
Regular security audits and updates
Access controls and authorization
Network security and firewalls
Intrusion detection and monitoring
9.2 Your Responsibilities
You are responsible for:
Maintaining the confidentiality of your password
Using strong, unique passwords
Logging out after using shared devices
Reporting suspected security breaches
9.3 Limitations
No security system is impenetrable. While we strive to protect your data, we cannot guarantee absolute security. You use the Service at your own risk.
10. Children's Privacy
Our Service is not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected information from a child under 18, we will take steps to delete such information promptly.
If you believe we have collected information from a child under 18, please contact us immediately.
11. International Data Transfers
11.1 Data Processing Locations
Our Service is operated from [Your Primary Location]. Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws different from your country.
11.2 Safeguards for International Transfers
When transferring data internationally, we use appropriate safeguards such as:
Standard Contractual Clauses approved by the European Commission
Adequacy decisions where applicable
Other legally approved transfer mechanisms
12. Cookies and Tracking Technologies
12.1 Types of Cookies We Use
Essential Cookies: Authentication and session management, Security and fraud prevention, Required for Service functionality
Preference Cookies: Remember your settings and preferences, Enhance user experience
Analytics Cookies: Understand how the Service is used, Improve performance and features, Measure effectiveness
Marketing Cookies (with consent): Deliver relevant advertisements, Track campaign effectiveness, Personalize marketing communications
12.2 Managing Cookies
You can control cookies through:
Browser settings to block or delete cookies
Our cookie preference center (if available)
Opt-out tools provided by advertising networks
Note that disabling essential cookies may limit Service functionality.
12.3 Do Not Track
Some browsers have "Do Not Track" features. We currently do not respond to Do Not Track signals, as there is no industry-wide standard for how to respond to such signals.
13. Third-Party Links and Services
Our Service may contain links to third-party websites, services, or integrations. This Privacy Policy does not apply to those third parties. We are not responsible for the privacy practices of third parties. We encourage you to review the privacy policies of any third-party services you interact with.
14. Marketing Communications
14.1 Types of Communications
We may send you:
Product updates and feature announcements
Tips for using the Service
Special offers and promotions
Event planning resources
Surveys and feedback requests
14.2 Opting Out
You may opt out of marketing communications by:
Clicking "unsubscribe" links in emails
Updating communication preferences in account settings
Emailing us at [support email address]
Note: You cannot opt out of essential transactional emails (account verification, password resets, billing confirmations).
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or Service features.
We will notify you of material changes by:
Updating the "Last Updated" date at the top
Posting a notice on the Platform
Sending an email to your registered email address (for significant changes)
We encourage you to review this Privacy Policy periodically. Continued use of the Service after changes take effect constitutes acceptance of the updated Privacy Policy.
16. Data Protection Officer and Contact
16.1 Contact for Privacy Matters
For questions, concerns, or requests regarding this Privacy Policy or our privacy practices:
Email: [privacy email address]
Address: [Your business address]
Data Protection Officer (if applicable): [DPO contact information]
16.2 Supervisory Authority (EEA/UK Users)
If you are in the EEA or UK, you have the right to lodge a complaint with your local supervisory authority if you believe your data protection rights have been violated.
17. State-Specific Privacy Rights
17.1 California Residents
In addition to the rights described above, California residents have specific rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA).
Categories of Personal Information Collected: See Section 2 for detailed categories of information we collect.
Purpose of Collection: See Section 3 for how we use your information.
Categories of Third Parties We Share With: See Section 5 for information sharing practices.
Sale of Personal Information: We do not sell your personal information as defined by CCPA.
Authorized Agent: You may designate an authorized agent to make requests on your behalf. We may require verification of the agent's authority.
17.2 Virginia, Colorado, Connecticut, and Utah Residents
If you are a resident of Virginia, Colorado, Connecticut, or Utah, you may have additional privacy rights under state privacy laws. Please contact us to exercise these rights.
17.3 Nevada Residents
Nevada residents have the right to opt out of the sale of certain covered information. We do not sell covered information as defined under Nevada law.
18. Business and Commercial Users
If you use our Service for business or commercial purposes, additional data processing terms may apply, particularly regarding data you control and process through the Service (where you act as a controller and we act as a processor).
19. Accountability
We maintain documentation of our privacy practices and are committed to:
Regular privacy impact assessments
Employee training on data protection
Vendor management and due diligence
Incident response procedures
Continuous improvement of privacy practices
20. Your Consent
By using our Service, you consent to:
The collection, use, and sharing of your information as described in this Privacy Policy
The transfer of your information to our service providers and processing locations
The use of cookies and similar technologies as described herein
You may withdraw consent for optional processing activities at any time, though this may limit Service functionality.