Legal
Privacy Policy
Last updated: March 15, 2026
1. Overview
GuestsCamera ("we", "us", "our") is committed to protecting your privacy. This policy explains what information we collect, how we use it, and the choices you have. By using the Service you agree to this policy.
2. Information We Collect
Host accounts
When you register as a host we collect:
- Your name and email address (via Google Sign-In)
- A Google OAuth refresh token scoped to
drive.fileonly, stored encrypted in our database - Event metadata you create (event name, date, upload window)
- Payment records (Stripe session and payment intent IDs — we never store raw card data)
Guest uploads
Guests who scan an event QR code and upload photos do so anonymously. We do not require guests to create an account or provide any personal information. The only data we process is the photo file itself, which is transferred directly to the host's Google Drive and not retained on our servers.
Usage data
We may collect standard server logs including IP addresses, browser type, and request timestamps for security and debugging purposes.
3. How We Use Your Information
- To authenticate you and manage your host account
- To create event upload windows and deliver photos to your Google Drive
- To process payments via Stripe
- To send transactional emails (event confirmations, receipts)
- To diagnose technical issues and improve the Service
4. Google Drive Access
GuestsCamera requests the https://www.googleapis.com/auth/drive.file scope, which grants access only to files and folders created by our app. We will never read, modify, or delete files in your Drive that were not created by GuestsCamera. You can revoke this access at any time from your Google Account settings.
5. Data Sharing
We do not sell your personal data. We share data only with:
- Supabase — database and authentication infrastructure
- Stripe — payment processing (subject to Stripe's privacy policy)
- Google — OAuth authentication and Drive storage (subject to Google's privacy policy)
- Cloudflare — edge infrastructure for photo upload handling
We may also disclose information if required by law or to protect the rights and safety of our users.
6. Data Retention
Host account data is retained for as long as your account is active. You may request deletion at any time by emailing support@guestscamera.com. Photos are stored in your own Google Drive and are not held by us — deleting them from Drive is your responsibility.
7. Security
We use industry-standard security measures including encrypted connections (TLS), encrypted storage of OAuth tokens, and row-level security on our database. No system is 100% secure, and we cannot guarantee absolute security of your data.
8. Your Rights
Depending on your location you may have rights to:
- Access the personal data we hold about you
- Request correction or deletion of your data
- Object to or restrict certain processing
- Data portability
To exercise any of these rights, contact us at support@guestscamera.com.
9. Cookies
We use session cookies to keep you signed in as a host. We do not use third-party tracking or advertising cookies.
10. Children's Privacy
The Service is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it.
11. Changes to This Policy
We may update this policy from time to time. We will notify hosts by email of material changes. The "last updated" date at the top reflects the most recent revision.
12. Contact
Questions about this policy? Email us at support@guestscamera.com.