Privacy Policy

We collect information you provide directly to us, such as when you create an account, create an event, or contact us for support.

• Account information (name, email address, password)
• Profile information (phone number, company name - optional)
• Event details (event name, date, location, settings)
• Media content (photos, videos uploaded to events)
• Payment information (processed securely by Stripe)
• Communications with our support team

When you use our service, we automatically collect certain information:

• IP address and browser information when downloading media
• Device type and operating system (user agent)
• Login timestamps and session activity
• Custom short URL click statistics
• Real-time slideshow viewer counts (anonymized)
• Download history (files downloaded, timestamps)

We use the information we collect to:

• Provide, maintain, and improve our services
• Process transactions and send related information
• Send technical notices and support messages
• Respond to your comments and questions
• Monitor and analyze usage patterns
• Detect and prevent fraudulent or illegal activity
• Enforce download limits and package restrictions

We use trusted third-party services to operate our platform. These providers have access to your information only to perform services on our behalf:

• Supabase - Authentication, database, and file storage (supabase.com)
• Stripe - Payment processing (stripe.com)
• Cloudflare - Content delivery and DNS services for Enterprise customers (cloudflare.com)
• Facebook - Optional social login authentication (facebook.com)

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• With your consent or at your direction
• With service providers listed above who assist in our operations
• To comply with legal obligations or valid legal processes
• To protect the rights, safety, and property of our users
• In connection with a merger, acquisition, or sale of assets

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. This includes:

• Encryption in transit (TLS/SSL) and at rest
• Secure authentication with session management
• Row-level security policies in our database
• Regular security assessments and monitoring
• Secure payment processing via Stripe (PCI compliant)

We retain your personal information for as long as your account is active or as needed to provide you services. Event media is automatically deleted according to your subscription plan:

• Free: 7 days after event
• Basic: 30 days after event
• Professional: 90 days after event
• Enterprise: 180 days after event
• Account data: Retained until account deletion

Under GDPR, CCPA, and other privacy regulations, you have the right to:

• Access your personal information (via Settings > Export Data)
• Correct inaccurate data (via Profile Settings)
• Request deletion of your account and all data
• Export your data in a portable format (JSON)
• Opt-out of non-essential data collection
• Lodge a complaint with a supervisory authority

We use cookies and similar technologies for essential service functionality:

• Authentication cookies - Required for login sessions
• Preference cookies - Remember your settings
• Analytics data - Usage patterns to improve service
• You can control non-essential cookies via browser settings
• Disabling essential cookies may prevent service access

Our service is not directed to children under 13 (or 16 in the EU). We do not knowingly collect personal information from children. If you believe we have collected such information, please contact us immediately for removal.

Your information may be transferred to and processed in the United States and other countries. Our service providers maintain appropriate safeguards including Standard Contractual Clauses where required by GDPR.

California residents have additional rights under the CCPA:

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of the sale of personal information (we do not sell data)
• Right to non-discrimination for exercising privacy rights
• To exercise these rights, contact [email protected]

We may update this privacy policy from time to time. We will notify you of material changes by posting the new policy on this page, updating the "last updated" date, and where appropriate, sending you an email notification.

If you have any questions about this privacy policy or wish to exercise your data rights, please contact us at:

• Email: [email protected]
• Data Protection: [email protected]
• Address: 123 Event Street, San Francisco, CA 94105