Privacy Policy

wed.photo (“wed.photo,” “we,” “us”) provides a wedding and event photo-sharing service that lets couples collect photos and videos from their guests through a private album and QR code. This Privacy Policy explains what information we handle and why.

It applies to our website, the host dashboard, and the guest upload pages. If you don't agree with this policy, please don't use the service.

We collect only what we need to run the service:

• Account information — your name, email address, and password (stored only as a secure hash) when you create a host account.
• Album content — the photos, videos, album names, dates, and any captions or guest names that you or your guests add to an album.
• Upload metadata — technical details needed to process uploads, such as file type and size. Phone photos often carry extra metadata, sometimes including the location where they were taken. When we process a photo we remove location (GPS) data and device identifiers from the stored file, keep the capture date and camera model, and add a note that it was shared via wed.photo. Videos are currently stored as uploaded and may still contain metadata from the device that recorded them.
• Payment information — when you upgrade, our payment processor (Stripe) handles your card details. We receive a record of the plan and transaction, but we never see or store full card numbers.
• Usage and device data — basic analytics, log data, IP address, and browser/device information used to operate, secure, and improve the service.

We use the information above to:

• create and manage accounts and albums;
• process guest uploads and provide downloads, including full-resolution ZIP archives;
• generate QR codes and guest upload pages;
• process payments, upgrades, and receipts;
• send service messages, such as storage-window reminders and support replies;
• keep the service secure, prevent abuse, and troubleshoot problems;
• understand and improve how the service is used.

We do not sell your personal information, and we do not use your wedding photos to train models or for advertising.

New accounts have email updates enabled by default. These include account and album notices, event reminders, photo updates, setup tips and offers. We use your account details, album activity, event date and timezone, storage deadlines and purchase status to choose relevant messages.

Plunk processes your email address, name, email preferences and relevant account and album information to deliver these messages. We also record delivery, opens, clicks and unsubscribe activity to understand delivery and engagement and honor your choices.

You can turn off marketing emails across all albums in account Settings or use the unsubscribe link in an email. Event reminders can also be paused for an individual album. Necessary account, payment, security and album-access notices are separate from marketing preferences. Default subscription and acceptance of our Terms do not constitute affirmative marketing consent where such consent is required by law.

Albums are private by default. They are intended for people who have the album link or QR code and are not listed in public directories or designed for public discovery.

Anyone with the link or QR code can view an album and, unless you turn on moderation or lock the album, add to it. Treat your album link like you would a shared photo folder, and share it only with people you trust.

Find My Photos is optional. It lets a guest take a selfie so we can find the photos they appear in. We only run it after the guest gives explicit consent, and only on albums where the host has it switched on.

• What we process — your selfie, from which we create a temporary face template (a set of numbers describing your face). We compare it with the faces in the album's photos to find matches.
• What we keep — only the list of photos that matched, so you can view and unlock them. Your selfie is deleted as soon as the search starts (or within an hour if a search is never started). Face templates — yours and those of anyone in the album's photos — are never stored.
• Who sees it — only you see your results. Hosts do not see guests' selfies or searches.
• Where it happens — on our own servers. We do not send selfies or photos to a third-party face recognition service.
• Your choices — you can simply not use the feature. To have your search results deleted, contact us and we will remove them.

We use trusted infrastructure providers to deliver the service, and they process data on our behalf under their own security and privacy terms. These include providers for:

• cloud storage and content delivery (to store and serve photos and videos);
• hosting and databases (to run the application);
• authentication (to secure sign-in);
• payments (Stripe, to process upgrades);
• email delivery (Plunk, to send service messages, reminders, photo updates, tips and offers);
• analytics (to understand aggregate usage).

We share information with these providers only as needed to operate the service.

We keep album content for as long as your album is active and within its storage window. When a storage window ends, or when you delete an album, content is scheduled for removal from active systems; residual copies may persist briefly in backups before being overwritten.

We keep account and transaction records for as long as needed to provide the service and to meet legal, accounting, and security obligations.

You can update your account details from your dashboard, remove albums you own, and download your album content at any time. Depending on where you live, you may also have rights to access, correct, export, or delete your personal information, or to object to certain processing.

To exercise any of these, contact us through our contact page. We'll respond within a reasonable time. If you uploaded photos as a guest and want them removed, contact the album's host or reach out to us and we'll help.

We use reasonable technical and organizational measures to protect your information, including encrypted connections, access controls, and trusted infrastructure providers. No online service can be perfectly secure, but we work to protect your data and to respond quickly if something goes wrong.

wed.photo is intended for adults planning and attending events. It is not directed to children, and we do not knowingly collect personal information from children. Photos of children may naturally appear in wedding albums; hosts are responsible for the content collected in their albums.

We and our service providers may process and store information in countries other than your own. Where we do, we take steps to ensure your information continues to be protected consistent with this policy.

We may update this Privacy Policy from time to time. When we make material changes, we'll update the “last updated” date above and, where appropriate, notify you. Continuing to use the service after changes take effect means you accept the updated policy.