Privacy Policy

1. Introduction

Guestory ("we," "us," or "our") provides tools for creating personalised event pages, guest experiences, and QR codes. This Privacy Policy explains what information we collect, how we use it, and the choices you have when you use our website and services (collectively, the "Service"). By using the Service, you agree to the practices described here. Please also review our Terms and Conditions.

2. Information We Collect

We collect information in the following ways:

• Account information: When you sign in, we receive information from our authentication provider (such as your name and email address) to create and manage your account.
• Event and guest content: Information you provide when creating events, including event names, guest names, personalised messages, optional PINs, template choices, and images you upload for events or guests.
• Guest access: When guests visit event or guest pages, we may process PINs they enter and store a session cookie so they do not need to re-enter a PIN on each visit during a limited period.
• Communications: If you contact support, join our waitlist, or otherwise reach out, we collect the information you submit (such as name, email, and message content).
• Technical data: Our hosting and infrastructure providers may automatically collect standard log data (such as IP address, browser type, and request timestamps) needed to operate and secure the Service.

3. How We Use Your Information

We use the information we collect to provide, maintain, and improve the Service; authenticate users; host and display your event and guest pages; generate QR codes; send transactional or support-related emails; respond to inquiries; protect against abuse and unauthorized access; and comply with legal obligations. We do not sell your personal information.

4. Guest Pages and Privacy Controls

Guest pages are intended to be private. Event organisers can use unique guest links and optional PIN protection to limit who can view content. You are responsible for how you share links and PINs with guests. We encourage you to share access details only with intended recipients.

5. How We Share Information

We share information only as needed to run the Service, including with trusted service providers such as:

• Authentication providers (for secure sign-in)
• Cloud hosting and database providers (to store and serve your data)
• File storage providers (to store images you upload)
• Email delivery providers (for support messages and related communications)

These providers process data on our behalf under contractual obligations. We may also disclose information if required by law or to protect the rights, safety, and security of Guestory, our users, or others.

6. Cookies

We use cookies and similar technologies where necessary for authentication, security, and guest PIN sessions. Authentication cookies help keep you signed in. Guest PIN cookies remember verified access for a limited time (typically up to 24 hours) so guests can view protected pages without re-entering a PIN on every visit. You can control cookies through your browser settings, but disabling certain cookies may limit functionality.

7. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service, unless a longer retention period is required by law. You may request deletion of your account or specific content by contacting us. Some information may remain in backups for a limited period before being removed.

8. Security

We implement reasonable technical and organizational measures to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Because Guestory is offered in beta, features and security practices may evolve over time.

9. Your Rights and Choices

Depending on where you live, you may have rights to access, correct, delete, or export your personal information, or to object to or restrict certain processing. To make a request, contact us using the details below. We will respond within a reasonable timeframe and as required by applicable law.

10. Children's Privacy

The Service is not directed at children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect personal information from children. If you believe a child has provided us personal information, please contact us so we can take appropriate steps.

11. International Users

If you access the Service from outside the country where our servers or providers operate, your information may be transferred to, stored in, and processed in other countries. Those locations may have different data protection laws than your own.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the "Last updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact Us

For privacy-related questions or requests, please visit our Support page or contact us at guestory.app.