Privacy Policy — LLMS-FULL.TXT

1. Overview

GuestsCamera, operated by TopRaf Studio LLC ("we", "us", "our"), is committed to protecting your privacy. This policy explains what information we collect, how we use it, and the choices you have. By using the Service you agree to this policy.

2. Information We Collect

Host accounts

When you register as a host we collect:

• Your name and email address (via Google Sign-In)
• A Google OAuth refresh token scoped to drive.file only, stored encrypted in our database
• Event metadata you create (event name, date, upload window)
• Payment records (Stripe session and payment intent IDs — we never store raw card data)

Guest uploads

Guests who scan an event QR code and upload photos do so anonymously. We do not require guests to create an account or provide any personal information. The only data we process is the photo file itself, which is transferred directly to the host's Google Drive and not retained on our servers.

Usage data

We may collect standard server logs including IP addresses, browser type, and request timestamps for security and debugging purposes.

3. How We Use Your Information

• To authenticate you and manage your host account
• To create event upload windows and deliver photos to your Google Drive
• To process payments via Stripe
• To send transactional emails (event confirmations, receipts)
• To diagnose technical issues and improve the Service

4. Google Drive Access

GuestsCamera requests the https://www.googleapis.com/auth/drive.file scope, which grants access only to files and folders created by our app. We will never read, modify, or delete files in your Drive that were not created by GuestsCamera. You can revoke this access at any time from your Google Account settings.

5. Data Sharing

We do not sell your personal data. We share data only with:

• Supabase — database and authentication infrastructure
• Stripe — payment processing (subject to Stripe's privacy policy)
• Google — OAuth authentication, Drive storage, and (if you consent) Google Analytics for site analytics
• Cloudflare — edge infrastructure for photo upload handling
• Vercel — hosting and privacy-friendly aggregate analytics

We may also disclose information if required by law or to protect the rights and safety of our users.

6. Data Retention

Host account data is retained for as long as your account is active. You may request deletion at any time by emailing support@guestscamera.com. Photos are stored in your own Google Drive and are not held by us — deleting them from Drive is your responsibility.

7. Security

We use industry-standard security measures including encrypted connections (TLS), encrypted storage of OAuth tokens, and row-level security on our database. No system is 100% secure, and we cannot guarantee absolute security of your data.

8. Your Rights

Depending on your location you may have rights to:

• Access the personal data we hold about you
• Request correction or deletion of your data
• Object to or restrict certain processing
• Data portability

To exercise any of these rights, contact us at support@guestscamera.com.

9. Cookies & Analytics

We use session cookies to keep you signed in as a host. We also use the following analytics tools, which are off by default and only activated if you click "Accept All" on the cookie banner:

• Google Analytics (GA4) — We use Google Analytics to understand how visitors interact with our site (pages visited, session duration, referral sources). When you accept, GA4 may set cookies named _ga and _ga_* in your browser. IP addresses are anonymized. We do not use Google Analytics for advertising. If you decline, GA runs in cookieless restricted mode and does not store identifying cookies.
• Vercel Analytics — We use Vercel's privacy-friendly analytics to measure web performance and aggregate traffic. This tool does not use cookies and does not track individuals across sites.

You can change your cookie preference at any time by clearing your browser's local storage for this site, which will cause the banner to reappear.

10. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

11. Changes to This Policy

We may update this policy from time to time. We will notify hosts by email of material changes. The "last updated" date at the top reflects the most recent revision.

12. Contact

Questions about this policy? Email us at support@guestscamera.com.