Privacy policy

This Privacy Policy describes our policies and procedures on the collection, use, and disclosure of your information when you use the Service, and tells you about your privacy rights and how the law protects you.

We use Personal Data to provide and improve the Service. By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.

Account means a unique account created for you to access the Service or parts of the Service.

Affiliate means an entity that controls, is controlled by, or is under common control with a party. Control means ownership of 50% or more of the shares, equity interest, or voting securities.

Company refers to Artifakt LLC, State of Washington, 4422 SW 101st Street, Seattle, Washington 98146-1058.

Cookies are small files placed on your device by a website. They can contain browsing history details and support many site functions.

Device means any device that can access the Service, such as a computer, mobile phone, or tablet.

Personal Data means information that relates to an identified or identifiable individual. Usage Data means data collected automatically through use of the Service or from the Service infrastructure.

Service refers to the GuestSnap website and native iPhone and iPad companion app. Service Provider means any natural or legal person who processes data on behalf of the Company.

Website refers to GuestSnap, accessible from https://www.guestsnap.com/. You means the individual using the Service, or the company or legal entity on whose behalf that individual is using the Service.

While using the Service, we may ask you to provide certain personally identifiable information that can be used to contact or identify you.

• Name
• Email address
• Phone number
• Usage Data

Usage Data is collected automatically when using the Service. Website and service infrastructure may receive information such as your device IP address, browser type and version, pages visited, the time and date of your visit, time spent on pages, and other diagnostic data. The native analytics dataset is limited to the separate description below.

When you access our website through a mobile browser, service infrastructure may receive the type of mobile device you use, its IP address, mobile operating system and browser type, and other diagnostic data. Native companion measurement is described separately below.

Our website analytics records page and section views, clicks, checkout steps, copy-variant exposures, cumulative foreground-visible time, campaign and advertising click IDs, performance measurements, device and browser details, raw user-agent strings, and approximate country, region, city, and postal-code location. We do not store raw IP addresses in the analytics database.

Our customer-product analytics records templated gallery routes, host or guest role, gallery lifecycle and availability, whether media is present, bounded upload batch counts and outcomes, whether a batch contains video, upload duration, slideshow starts, export outcomes, and selected bounded error codes. It uses an in-memory page-session identifier and a coarse mobile, desktop, or unknown device class, without setting a product analytics cookie or retaining campaign, referrer, location, raw user-agent, or detailed browser context. It does not record gallery or customer IDs, filenames, guest names, email addresses, uploaded content, or exception messages and stacks.

Our native companion analytics records first opens, foreground app opens, bounded gallery entry methods and host or guest role, media upload counts and outcomes, and Photo Library save counts, destination category, outcomes, and duration. It also records the app version and build and whether the app runs on an iPhone or iPad. Native analytics uses a random foreground-session identifier and a local first-open marker; it does not use a persistent device or installation identifier. It does not record gallery, media, customer, or account IDs, names, email addresses, invitation links or codes, filenames, album names, media content, IP addresses, location, share destinations, or raw error messages.

We may record a sample of visits so we can replay how people move through the site. Form inputs are masked, sensitive embedded content is blocked, and session replays are automatically deleted after 60 days.

We use Cookies and similar tracking technologies to track activity on the Service and store certain information. These technologies may include browser cookies, web beacons, tags, and scripts.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. If you do not accept cookies, you may not be able to use some parts of the Service.

We use session and persistent cookies for essential site functionality, cookie notice acceptance, and functionality such as remembering preferences or login details.

When a landing-page copy test is active, we may set a non-identifying, HTTP-only, host-only functional session cookie that contains only the assigned copy variant. It may be set before your analytics choice solely to keep copy consistent during that browser session. It does not enable analytics or store analytics identifiers; your site analytics choice controls whether variant exposure and engagement are recorded.

In the European Economic Area, United Kingdom, and Switzerland, website analytics and advertising measurement stay off until you make a choice. Elsewhere, these tools may run by default. You can use the Privacy choices link in the footer at any time to accept, reject, or change your choices.

Google and Meta measurement help us understand which ads lead to checkout and purchases. Meta browser measurement may use Meta cookies and browser or click identifiers. When your browser sends a Global Privacy Control signal, we disable Google ad personalization and Meta browser measurement.

The native companion analytics described above is first-party product measurement. It does not use browser cookies, advertising identifiers, or cross-app tracking. Website Privacy choices and browser Global Privacy Control signals do not apply to this native app measurement.

GuestSnap may use Personal Data to provide and maintain the Service, monitor usage, manage your account, perform contracts, process transactions, respond to requests, and contact you by email, phone, SMS, or similar electronic communication.

We may also use information to provide news, offers, and general information about services similar to those you have purchased or asked about, unless you opt out of receiving that information.

We may use information for business transfers, data analysis, identifying usage trends, evaluating promotional effectiveness, and improving the Service, products, marketing, and user experience.

We may share your information with Service Providers to monitor and analyze the use of the Service, to contact you, or to otherwise help operate the Service.

First-party website, customer-product, and native companion analytics is processed using Cloudflare and Tinybird infrastructure controlled by GuestSnap. Google receives measurement data only when Google measurement is allowed under the choices described above.

When Meta browser measurement is allowed, Meta may receive page-view and checkout measurement plus browser or click identifiers. Separately, after our payment processor confirms a completed production checkout, Meta receives purchase measurement regardless of your browser advertising choice. Purchase measurement may include a one-way hashed version of the checkout email address and, when available, Meta browser or click identifiers. GuestSnap does not place the checkout email address or its hash in its Tinybird analytics database or raw analytics archive.

GuestSnap does not sell personal information or analytics data.

We may share or transfer your information in connection with a merger, sale of assets, financing, acquisition, or other business transfer.

We may share information with Affiliates, business partners, other users when you interact in public areas, or with your consent.

GuestSnap does not sell uploaded photos or videos or use them for advertising, marketing, or other commercial activities. Event galleries are unlisted, but anyone who has the event link or QR code can open the gallery. Uploaded media is available to the host and those link or code holders, subject to the host’s gallery controls.

We retain Personal Data only for as long as necessary for the purposes set out in this Privacy Policy, including legal obligations, dispute resolution, and enforcement of agreements and policies.

Usage Data is generally retained for a shorter period unless it is needed to strengthen security, improve functionality, or comply with legal obligations.

Raw first-party analytics is generally retained for up to 24 months, after which it is deleted or aggregated unless a longer period is needed for security or legal reasons.

Your information may be processed at the Company operating offices and in other locations where the parties involved in processing are located. This means information may be transferred to computers located outside your state, province, country, or other governmental jurisdiction.

Your consent to this Privacy Policy followed by your submission of information represents your agreement to that transfer. We take reasonable steps to ensure your data is treated securely and in accordance with this Privacy Policy.

You have the right to delete or request assistance deleting Personal Data that we have collected about you.

The Service may allow you to delete certain information directly. You may also contact us to request access, correction, or deletion of personal information you have provided.

We may need to retain certain information when we have a legal obligation or lawful basis to do so.

We may disclose Personal Data in connection with a business transaction, such as a merger, acquisition, or asset sale.

Under certain circumstances, we may disclose Personal Data if required by law or in response to valid requests by public authorities.

We may disclose Personal Data when we believe it is necessary to comply with a legal obligation, protect Company rights or property, prevent or investigate possible wrongdoing, protect the safety of users or the public, or protect against legal liability.

The security of your Personal Data is important to us, but no method of transmission over the Internet or method of electronic storage is 100% secure. We use commercially acceptable means to protect Personal Data, but we cannot guarantee absolute security.

Personal Data collected and stored by GuestSnap may be disclosed to overseas recipients. By using the Service, you acknowledge that overseas recipients may not be bound by the Australian Privacy Act.

For users in the European Economic Area, GuestSnap, wholly owned by Artifakt LLC, acts as the Data Controller for Personal Data processed through the Service.

We may process Personal Data based on consent, contract performance, legitimate interests, or legal obligations. Where data is transferred outside the European Economic Area, we take steps to use appropriate safeguards.

You may have rights to access, correct, restrict, object to processing, request portability, or request deletion of your Personal Data. You can exercise these rights by contacting us.

California residents may request certain information about our disclosure of Personal Data to third parties for direct marketing purposes under California Civil Code Section 1798.83.

GuestSnap does not sell personal information. We use a Global Privacy Control signal to turn off Google ad personalization and Meta advertising measurement; it does not turn off first-party website analytics used to improve GuestSnap.

California residents may also have rights to know, access, request deletion, and receive information about categories of Personal Data collected, sources, business purposes, disclosures, and third parties involved.

The categories of information we may collect include identifiers, customer records information, commercial information, uploaded photos and videos where applicable, and geolocation data.

The Service is not directed to anyone under the age of 13. We do not knowingly collect personally identifiable information from anyone under 13.

If you are a parent or guardian and believe your child provided Personal Data, please contact us. If we learn that we collected Personal Data from anyone under 13 without verification of parental consent, we take steps to remove that information from our servers.

The Service may contain links to other websites that are not operated by GuestSnap. If you click a third-party link, you will be directed to that third-party site. We strongly advise reviewing the privacy policy of every site you visit.

We have no control over, and assume no responsibility for, the content, privacy policies, or practices of third-party sites or services.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new Privacy Policy on this page and updating the Last updated date.

You are advised to review this Privacy Policy periodically for any changes. Changes are effective when posted on this page.

Artifakt LLC

4422 SW 101st Street

Seattle, Washington 98146-1058

+1 (206) 486-2331

contact@guestsnap.com