Privacy Policy — The Virtual Photo Booth

This Privacy Policy explains how The Virtual Photo Booth ("we", "us") collects, uses, shares, and protects personal information when you use our website and services (the "Service"). By using the Service, you agree to this Policy.

1. Information We Collect

Account data: name, email, phone number, password hash.
Event data: event names, dates, templates, photos uploaded or captured.
Guest data: email addresses (and optionally names) of guests who request photos.
Payment data: handled by our payment processor; we do not store card numbers.
Usage data: log data, IP address, device/browser info, cookies for session and analytics.

2. How We Use Information

To provide, operate, and improve the Service.
To deliver photos to guests via email.
To authenticate users and secure accounts.
To process payments and prevent fraud.
To send transactional and (with consent) marketing communications.
To comply with legal obligations.

3. Legal Bases (GDPR/UK GDPR)

We rely on: performance of a contract (providing the Service), legitimate interests (securing and improving the Service), consent (marketing emails, certain cookies), and legal obligations.

4. Sharing

We share data with service providers that help us run the Service (hosting, authentication, database, email delivery, analytics, payments) under appropriate confidentiality and data protection terms. We do not sell personal information.

5. International Transfers

Our providers may process data in the United States and other countries. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.

6. Retention

We keep personal information for as long as necessary to provide the Service and to comply with legal obligations. You may delete your account and associated event data at any time from your dashboard or by contacting us.

7. Your Rights

Depending on your location, you may have the right to access, correct, delete, port, or restrict processing of your personal information, and to object to certain processing. California residents have rights under the CCPA/CPRA, including the right to know, delete, correct, and opt out of "sharing." We do not sell personal data. To exercise rights, contact us.

8. Guest Emails & Unsubscribe

Photo delivery emails include an unsubscribe link. Guests can opt out at any time via the unsubscribe page.

9. Children

The Service is not directed to children under 13 (or under 16 in the EEA/UK). We do not knowingly collect personal information from children. Event organizers are responsible for obtaining required parental consent for minors photographed at events.

10. Security

We use technical and organizational measures including encryption in transit, access controls, and row-level security on our database. No system is 100% secure.

11. Cookies

We use cookies and similar technologies for authentication, preferences, and analytics. See our Cookie Policy.

12. Changes

We may update this Policy. Material changes will be communicated via the Service or by email.

13. Contact

For privacy questions or requests, contact us.