Privacy Policy

1.Who This Policy Applies To

This policy applies to three groups of people who interact with Snap Banquet:

• Studio Partners — Photographers with Snap Banquet accounts
• Event Clients — Couples and organizers who access events through a photographer-provided link
• Guests — Event attendees who use the camera via QR code, without creating an account

The information we collect differs by user type, and we'll be specific throughout.

2.Information We Collect

From Studio Partners (account holders):

From Event Clients (no account required):

Event Clients access their event portal via a unique token link provided by their photographer. No account is required. If a client chooses to create an account, we collect the same information as Studio Partners. Without an account, we collect only what standard server logs capture: IP address, browser type, and access timestamps — the same as any website visit.

From Guests (no account, no sign-up):

We do not collect names, emails, phone numbers, location data, or any biometric data from guests.

3.How We Use Your Information

We use the information we collect for the following purposes:

• Providing the Service — Creating and managing accounts, processing events, storing and displaying photos.
• Billing — Processing subscription payments via Stripe.
• Security — Detecting and preventing fraud, abuse, and unauthorized access.
• Legal compliance — Complying with applicable laws and responding to lawful requests.
• Service improvement — Understanding how the Service is used in aggregate to improve it (we use anonymized aggregate data, not individual tracking).
• Communications — Sending you service-related emails (subscription confirmations, payment receipts, critical service notices). We do not send marketing emails without your explicit opt-in.

We do not use your photos for advertising, AI training, or any purpose other than providing the Service as described above.

4.Who We Share Information With

We do not sell, rent, or trade your personal information. We share information only with the following service providers who help us operate the Service:

Each of these providers operates under their own privacy policy and data processing agreements. They are contractually prohibited from using your data for any purpose other than providing services to us.

We may also disclose information if required by law (court order, subpoena), if necessary to protect our legal rights, or if Snap Banquet is acquired by another company (in which case we will notify you before your data is transferred).

We share guest photos within an event — every guest who has the QR code or gallery link can see all photos from that event. This is the core function of the Service and you consent to it by taking photos.

5.Data Security

We take security seriously. Here is what we do to protect your data:

• Encryption in transit — All data transmitted between your browser and our servers is encrypted via TLS/HTTPS. We enforce HTTPS on all pages.
• Encryption at rest — Photos stored in Vercel Blob are encrypted at rest. Database records on Turso are encrypted at rest.
• Password hashing — Passwords are never stored in plain text. We use bcrypt with a high cost factor.
• Access controls — Event galleries are only accessible via unique, unguessable links or QR codes. No gallery is publicly browsable.
• Minimal data collection — We only collect what is necessary to operate the Service. Guests have no account, no password, and no profile to protect.

No method of transmission over the internet or electronic storage is 100% secure. While we take reasonable steps to protect your information, we cannot guarantee its absolute security. In the event of a data breach that affects your personal information, we will notify you as required by applicable law.

6.Cookies and Tracking

We use minimal cookies. Snap Banquet uses cookies only for:

• Authentication sessions — To keep you logged in as a Studio Partner or Event Client (session cookies that expire when you close your browser or after 30 days).
• Guest device recognition — A cookie stores the anonymous device UUID so guests don't lose their photo count if they navigate away and return within the same event.

We do not use: advertising cookies, third-party tracking pixels, analytics that track individual behavior across sites, or social media trackers. We do not use Google Analytics or any similar service on guest-facing pages.

7.Data Retention

Deletion is permanent and irreversible. We do not maintain backups beyond 7 days for disaster recovery, and these backups are subject to the same deletion schedule.

8.Your Rights

Depending on where you live, you may have rights regarding your personal information. We honor these rights for all users, regardless of location:

• Access — Request a copy of the personal data we hold about you.
• Correction — Request correction of inaccurate personal data.
• Deletion — Request deletion of your personal data. Studio Partners can delete their account directly. Guests can request removal of specific photos by contacting us.
• Portability — Request your data in a machine-readable format.
• Objection — Object to processing of your personal data in certain circumstances.
• Withdrawal of consent — Where processing is based on consent, you may withdraw consent at any time.

To exercise any of these rights, contact us at privacy@snapbanquet.com. We will respond within 30 days. We may need to verify your identity before processing requests.

For EU/EEA residents (GDPR):

If you are in the European Union or European Economic Area, you have additional rights under the General Data Protection Regulation (GDPR). Our legal basis for processing Studio Partner data is contract performance (to deliver the Service you subscribed to). Our legal basis for processing guest photos is legitimate interest (providing the event gallery service). You have the right to lodge a complaint with your local data protection authority.

For California residents (CCPA):

California residents have the right to know what personal information we collect, the right to delete it, and the right to opt out of its sale. We do not sell personal information. To exercise your CCPA rights, contact us at privacy@snapbanquet.com.

9.Children's Privacy

The account-creation portion of Snap Banquet is intended for users 18 and older. The guest camera experience (scanning a QR code at a family event like a wedding) may be used by children with their parents' knowledge and implied consent. We do not knowingly collect names, emails, or any identifying personal information from children under 13. The only data we collect from guests is an anonymous device identifier and the photos taken.

If you believe a child under 13 has provided personal information to us in a way that was not appropriate, please contact us at privacy@snapbanquet.com and we will promptly address it.

10.International Data Transfers

Snap Banquet is based in the United States. All data is stored on US-based infrastructure (Vercel and Turso). If you are accessing the Service from outside the United States, your information will be transferred to and processed in the United States, which may have different data protection laws than your country.

By using the Service, you consent to this transfer. For EU/EEA users, we rely on standard contractual clauses or other approved transfer mechanisms where required.

11.Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify Studio Partners by email and update the effective date at the top of this page. We encourage you to review this policy periodically.

12.Contact Us

If you have questions, concerns, or requests related to your privacy, please contact us: