Privacy Policy

1. Overview

GuestsCamera ("we", "us", "our") is committed to protecting your privacy. This policy explains what information we collect, how we use it, and the choices you have. By using the Service you agree to this policy.

2. Information We Collect

Host accounts

When you register as a host we collect:

• Your name and email address (via Google Sign-In)
• A Google OAuth refresh token scoped to drive.file only, stored encrypted in our database
• Event metadata you create (event name, date, upload window)
• Payment records (Stripe session and payment intent IDs — we never store raw card data)

Guest uploads

Guests who scan an event QR code and upload photos do so anonymously. We do not require guests to create an account or provide any personal information. The only data we process is the photo file itself, which is transferred directly to the host's Google Drive and not retained on our servers.

Usage data

We may collect standard server logs including IP addresses, browser type, and request timestamps for security and debugging purposes.

3. How We Use Your Information

• To authenticate you and manage your host account
• To create event upload windows and deliver photos to your Google Drive
• To process payments via Stripe
• To send transactional emails (event confirmations, receipts)
• To diagnose technical issues and improve the Service

4. Google Drive Access

GuestsCamera requests the https://www.googleapis.com/auth/drive.file scope, which grants access only to files and folders created by our app. We will never read, modify, or delete files in your Drive that were not created by GuestsCamera. You can revoke this access at any time from your Google Account settings.

5. Data Sharing

We do not sell your personal data. We share data only with:

• Supabase — database and authentication infrastructure
• Stripe — payment processing (subject to Stripe's privacy policy)
• Google — OAuth authentication and Drive storage (subject to Google's privacy policy)
• Cloudflare — edge infrastructure for photo upload handling

We may also disclose information if required by law or to protect the rights and safety of our users.

6. Data Retention

Host account data is retained for as long as your account is active. You may request deletion at any time by emailing support@guestscamera.com. Photos are stored in your own Google Drive and are not held by us — deleting them from Drive is your responsibility.

7. Security

We use industry-standard security measures including encrypted connections (TLS), encrypted storage of OAuth tokens, and row-level security on our database. No system is 100% secure, and we cannot guarantee absolute security of your data.

8. Your Rights

Depending on your location you may have rights to:

• Access the personal data we hold about you
• Request correction or deletion of your data
• Object to or restrict certain processing
• Data portability

To exercise any of these rights, contact us at support@guestscamera.com.

9. Cookies

We use session cookies to keep you signed in as a host. We do not use third-party tracking or advertising cookies.

10. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

11. Changes to This Policy

We may update this policy from time to time. We will notify hosts by email of material changes. The "last updated" date at the top reflects the most recent revision.

12. Contact

Questions about this policy? Email us at support@guestscamera.com.