Privacy Policy

1. What we collect

From hosts

• Account details: your name, organization name, email address, and a password (stored only in scrambled, one-way hashed form).
• Event details you enter: event names, dates and times, venue addresses, frames, thumbnails, and gallery settings.
• Billing: payments are handled by Stripe. We store your Stripe customer reference, what you bought, amounts, and payment status — never your full card number.
• Messages you send us through the contact form or dashboard.

From guests

• Photos you take and choose to share to an event gallery. Each is stored with the event and a random, anonymous id generated in your browser — not your name or account, since guests don't have one.
• Likes you give, tied to a random anonymous device id, so a photo can be liked once per device.
• Your device's location, only while you open the camera. Your browser asks your permission first. We use it to confirm you're at the event during its booked time and then discard it — we do not store your location with your photos or in your history.
• Simple event counters (for example how many photos were taken or shared) that don't identify you.

From everyone

• Technical data such as your IP address and device/browser type, used briefly for security, abuse prevention, rate limiting, and error diagnosis.
• A sign-in cookie for hosts, and a few items saved in your browser (such as your anonymous guest id and your most recent event) so the camera and gallery work smoothly. We don't use advertising or cross-site tracking cookies.

2. How we use it

• To run the service: create events, unlock the camera for guests who are there, apply frames, host the gallery, and let people download photos.
• To take payments, manage subscriptions, and send billing notices (for example a failed payment or an unfinished checkout).
• To email hosts: account verification, password resets, billing notices, and reminders before photos are deleted (90 days after an event).
• To keep the service secure, prevent abuse and fraud, enforce limits, and fix errors.
• To respond when you contact us.

3. Who can see photos

The host of an event can see every photo submitted to it. Whether other guests can see the gallery depends on the host's settings — a gallery can be open to anyone with the link, restricted, or closed, and an event can be private. Photos that are visible can be viewed, liked, and (if the host allows it) downloaded and re-shared by others, which we can't control once they leave the service. Please only share photos you're comfortable with the host and other attendees seeing.

4. Who we share data with

We use trusted service providers to run EventPhotoGo. They process data only to provide their service to us:

• Stripe — payment processing and subscription billing.
• Vercel — website hosting and photo/file storage.
• Neon — our database.
• Resend — sending account and billing emails.
• Upstash — rate limiting (uses IP addresses briefly).
• Sentry — error monitoring (technical diagnostic data).
• Mapbox — turning a venue address a host types into map coordinates. Guests' locations are not sent to Mapbox.

We may also disclose information if required by law or to protect people's safety, our rights, or the service, and in connection with a business sale or merger (with notice to affected hosts where appropriate).

5. How long we keep it

• Event photos: 90 days after the event ends, then the image files are permanently deleted. Photos a host deletes have their files removed as well.
• Host accounts and event records: until you ask us to delete them, or the account is closed.
• Payment and billing records: as long as needed for accounting, tax, and legal obligations.
• Security and error logs: for a limited period, then deleted or aggregated.

6. Your choices and rights

• Hosts can edit event settings, moderate and delete photos, close a gallery, make an event private, and download all photos before they expire.
• You can ask us to access, correct, or delete your information, or to remove a photo of you, by contacting us. If a photo was shared by someone at an event, we may need to involve the host. Depending on where you live (for example California and some other US states), you may have specific privacy rights; we honor valid requests and won't discriminate against you for making one.
• You can decline the location prompt in your browser, but the camera can't confirm you're at the event without it.
• We only email hosts about their account — verification, password resets, billing notices, an unfinished checkout, and photo-deletion reminders. We don't send marketing email.

7. Children

Hosts must be 18 or older. The event camera may be used at events where children are present, and photos of people of any age may be taken there. The host is responsible for getting any permission the law requires (such as a parent's or guardian's) before photographing minors. We don't knowingly collect personal information directly from children under 13 beyond photos they may take at an event; if you believe a child's information should be removed, contact us and we'll act on it.

8. Security

We use industry-standard protections, including encrypted connections, hashed passwords, and access controls between accounts. No online service is perfectly secure, so we can't guarantee absolute security, but we work to protect your information and will tell affected people if a breach requires it.

9. International use

EventPhotoGo is operated from the United States, and your information is processed and stored there and in other places our providers operate. By using the service you understand your information may be transferred to those locations.

10. Changes and contact

If we change this policy we'll update the date above, and notify hosts of material changes. Questions or requests? Reach us through our Contact page. See also our Terms of Service.