Privacy Policy

• Account information. When you sign in, we collect your email address and, if you set one, a display name and avatar. We use passwordless "magic link" sign-in, so we never store a password.
• Event content. The photos, videos, and notes you upload to an event, along with metadata like file size, dimensions, and upload time.
• Event details. If you create an event, we store its title, date, type, and the settings you choose (like moderation mode).
• Payment information. If you purchase an Event Pass or subscribe to a paid plan, payment is handled directly by Stripe. We receive confirmation that a payment succeeded and store your plan/billing status — we never see or store your full card number.
• Technical information. Our hosting and security providers automatically log standard technical data such as IP address, browser type, and request timestamps, the same way most websites do.

• Run the shared gallery: show your approved photos, videos, and notes to other guests and the organizer of that event, alongside your display name.
• Sign you in: send magic-link emails so you can access an event or your dashboard without a password.
• Notify you: send transactional emails — like confirming your photo was approved, letting an organizer know photos are waiting for review, or sending a sign-in link. Most of these can be turned off in your notification preferences.
• Moderate content: let organizers approve, reject, or review reported photos and notes, to keep events safe.
• Process payments for Event Passes and subscriptions.
• Prevent abuse: screen out bots and automated abuse on our forms.
• Improve and secure Phozzazz, and diagnose problems.

Other guests and the organizer at the same event can see your approved uploads and display name — that's the whole point of a shared gallery. Beyond that, we share information with service providers who process it on our behalf, under agreements that limit their use of it to providing their service to us:

• Supabase — authentication, database, and file storage
• Resend / Amazon SES — sending transactional email
• Stripe — payment processing
• Vercel — application hosting
• Cloudflare — bot and abuse protection

We don't sell your personal information, and we don't share it with advertisers. We may disclose information if required by law, or to protect the rights, safety, or property of Phozzazz, our users, or others.

• Photos and videos are kept according to the event's plan: 30 days on the free tier, 1 year on Event Passes and the Plus plan, and indefinitely on the Pro plan — unless the organizer or uploader deletes them sooner.
• Account information is kept as long as your account is active. You can ask us to delete your account and associated data at any time (see "Your choices" below).
• We may retain limited information as required by law or for legitimate business purposes, such as fraud prevention or dispute resolution.

• Update your display name and avatar from your account.
• Opt out of non-essential notification emails from your notification preferences.
• Delete your own pending photos or notes before they're moderated; organizers can remove any content from their own events.
• Request a copy of, correction to, or deletion of your personal information by contacting us at the email below. We'll respond within a reasonable time and may need to verify your identity first.

Phozzazz is not directed at children under 13, and we don't knowingly collect account information from them. Events often include photos of guests of all ages, including minors — organizers are responsible for getting any consent required by law before inviting guests to photograph or be photographed at their event.

We use reasonable technical and organizational measures — including access controls and encrypted connections — to protect your information. No online service can guarantee perfect security, so we can't promise information will never be accessed, disclosed, or altered in ways inconsistent with this policy.

We may update this policy as Phozzazz changes. If we make material changes, we'll update the "last updated" date above and, where appropriate, let you know.

Questions about this policy? Email us at support@phozzazz.studio.