Privacy policy.

GuestListPhotos is operated by GuestListPhotos LLC, an Arizona limited liability company, which is the controller responsible for the personal data described in this policy.

You can contact us about your data at [email protected] or by mail at 6801 Jefferson St NE, Ste 150, PMB 4267, Albuquerque, NM 87109.

When you create an account, we collect your name and email address. When you purchase an event, we collect payment information through Stripe — we never store your card details on our servers.

When guests upload photos to an event, we store those photos and basic metadata (upload time, file size). Guests do not need to create an account — no personal data is collected from guests unless they voluntarily provide it.

We collect standard usage data such as pages visited, browser type, and device information to improve the service. We use Vercel Analytics and Axiom for this purpose.

We use your information to: provide and maintain the service, process payments, send transactional emails (event notifications, receipts), and improve the product.

We do not sell your personal information. We do not use your photos to train AI models. Your event photos are yours.

Event photos are available for download for 90 days after your event date. After the retention period, photos are permanently deleted from our servers.

You may download all photos at any time during the retention period. We recommend downloading your photos well before the 90-day window closes.

We use the following third-party services to operate GuestListPhotos:

Stripe — payment processing. Stripe’s privacy policy applies to payment data. Vercel — hosting and analytics. Cloudflare R2 — photo and video storage. Cloudflare — content delivery and image optimization. Supabase — database. Shotstack — AI highlight-reel video rendering (your event photos and videos are processed by Shotstack only when you generate a highlight reel). Axiom — application logging. Resend — transactional email delivery. Prodigi — physical print fulfillment (only if you order prints).

We only share the minimum information necessary with each provider to deliver the service.

We use essential cookies for authentication and session management. We do not use advertising or tracking cookies. Analytics data is collected without personally identifying cookies where possible.

We use industry-standard encryption (HTTPS/TLS) for all data in transit. Photos are stored in secure cloud storage with access controls. Payment processing is handled entirely by Stripe, which is PCI-DSS compliant.

You can request a copy of your data, correction of inaccurate data, or deletion of your account and associated data at any time by emailing [email protected].

If you delete your account, we will delete your personal data and any events you own. Photos uploaded by guests to your events will also be deleted.

GuestListPhotos is not intended for use by children under 13. We do not knowingly collect personal information from children under 13.

We may update this privacy policy from time to time. We will notify registered users of material changes via email. Continued use of the service after changes constitutes acceptance of the updated policy.

If you have questions about this privacy policy or your data, contact us at [email protected].