Privacy Policy

We collect the following categories of information:

• Account information: email address, password (stored as a secure hash, never in plain text), display name and profile image if provided, and your preferred language
• Event information: event names, unique links/QR codes, and scan counts
• Uploaded photos: image files, original filenames, file size, file type, and upload timestamp — from both event Organizers and their guests
• Payment information: when you subscribe to a paid plan, payment is processed by Stripe. We receive a Stripe customer ID and subscription status, but we never receive or store your full card number
• Technical information: your IP address and basic request metadata, used briefly to enforce rate limits and prevent abuse
• Cookies: a session cookie is used to keep you signed in to your Organizer account

We use the information we collect to:

• Provide, operate, and maintain the Service (for example, generating QR codes, storing and displaying photos, and sending upload notification emails)
• Process payments and manage subscriptions through Stripe
• Communicate with you about your account, events, or transactional matters
• Detect, prevent, and address fraud, abuse, or security issues
• Comply with legal obligations

We do not sell your personal information or your photos, and we do not use your photos for advertising.

Guests can upload photos to an event without creating an account, which means photos may depict people who never interacted with PhotosEvents directly. Event Organizers are responsible for telling their guests how photos will be collected and used, and for obtaining any consent required under applicable law — for example, before sharing an event QR code at a gathering that may include photos of children.

If you appear in a photo uploaded to an event and want it removed, contact the event Organizer directly, or contact us at support@photosevents.com and we will assist where we are able to.

We share information with the service providers who help us run PhotosEvents, including:

• Stripe — payment processing and subscription billing
• Cloudflare R2 — storage of uploaded photos
• Resend — sending transactional emails (upload notifications, password resets, magic links)
• Upstash — temporary rate-limiting data used to prevent abuse
• Vercel — application hosting

These providers are only permitted to use your information to perform services on our behalf. We do not sell your information to third parties or share it for third-party advertising.

Photos uploaded to a Free plan event are automatically and permanently deleted approximately 1 year after upload. Photos belonging to a Pro plan Organizer are retained while the Pro plan remains active; if the account is downgraded or canceled, standard Free plan retention timelines apply going forward.

Account information is retained for as long as your account is active. You can request deletion of your account and associated data at any time by contacting us.

We use reasonable administrative, technical, and physical safeguards to protect your information, including hashed passwords and access-controlled cloud storage. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of the personal information we hold about you, and to object to or restrict certain processing. To exercise these rights, contact us at support@photosevents.com. We will respond within a reasonable time and may need to verify your identity before fulfilling your request.

Organizers can delete an event and its photos at any time from their dashboard.

The Service is not directed to children, and we do not knowingly collect account information from anyone under 18. Because guests can upload photos without an account — including at events like birthday parties or baby showers — photos of children may be uploaded by a parent, guardian, or other adult guest. It is the event Organizer's responsibility to ensure appropriate consent is obtained before collecting photos of minors. If you believe a child's photo was uploaded without appropriate consent, contact us at support@photosevents.com and we will work with the Organizer to remove it.

We use a small number of essential cookies, primarily to keep you signed in to your Organizer account. We do not use third-party advertising or analytics cookies.

Our Service is hosted in the United States, and information you provide — including photos — may be processed and stored in the United States. By using the Service, you consent to this transfer and processing.

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above. Continuing to use the Service after changes take effect means you accept the updated policy.

Questions about this Privacy Policy or your information? Contact us at support@photosevents.com.