Privacy
Collect what the event needs. Avoid what it doesn’t.
Customer requests
Information submitted through the request builder is used to design, bill, deliver, support, and operate the requested event website. Uploaded event images are stored with the project media when storage is connected. For a paid physical product, Stripe collects the recipient and shipping address during checkout; we store the address with that order so the physical item can be fulfilled, corrected before vendor release, and supported if a shipping problem occurs. The necessary shipping information may be shared with the selected vendor or carrier only as needed to fulfill that purchase.
Baby Look Prediction photos
If you purchase the Baby Look Prediction add-on, the two parent reference photos and ultrasound image are stored privately with that project and are used only to create and deliver the purchased keepsake. They are not published as template examples or advertising assets through that workflow. The ultrasound is used only as visual reference and is not medically interpreted. You may crop names, clinic information, or other details that are not needed for the artwork before uploading.
Guest information & RSVP privacy
Guest RSVP, imported contact details, date-poll votes, volunteer/bring-it signups, seating information, meal/dietary responses, and other host-configured event responses are used for the event, its host, and service delivery. Sharing the Moment does not sell guest or customer data to advertisers and does not turn event guest lists into unrelated marketing lists. Optional event messaging and automated reminders are event/transactional communications sent only through the event’s configured tools. Guests who receive those messages can use their private message-preferences link to stop or resume event updates without deleting their RSVP.
Photos of minors
Customers are asked to confirm that, if they submit a photo or other media depicting a minor, they are the parent/legal guardian or otherwise have permission or authority from a person legally authorized to permit the requested project use. We do not use a minor’s image for public advertising unless the customer separately grants the optional advertising permission and has the legal authority to do so; the advertising-copy privacy review still applies.
Transactional vs. marketing communications
Order receipts, payment/security notices, proof/revision messages, requested customer support, event updates, RSVP reminders, and similar service communications are transactional or event-related. Marketing/promotional messages are treated separately and require an appropriate separate opt-in or other lawful basis. Choosing the 5% showcase permission authorizes advertising use of a privacy-reviewed design copy; it does not by itself subscribe a customer or guest to marketing emails or texts.
Guest Concierge
Guest Concierge receives the guest's event question and checks it against host-approved event information, event sections, RSVP settings, and approved FAQ answers. It is designed not to create an advertiser profile or use the question for advertising.
Analytics
The platform uses privacy-friendly first-party page and funnel counts to understand whether invitations and the ordering flow work. It does not add third-party advertising trackers. Funnel events intentionally avoid names, email addresses, phone numbers, invitation wording, and uploaded content.
Passwords & private links
Optional event passwords and private project, proof, and host-management links are used to limit access. Customers should avoid forwarding private proof or management links to people who should not have access.
Payments, communications & transaction evidence
When connected, card payments are handled on Stripe’s hosted checkout, automated email is sent through the configured email provider. That provider process the information necessary to provide their service. To document consent, prevent fraud, resolve chargebacks, and protect both the customer and the Company, we may retain the terms version, permission/consent selections, acceptance time, order and proof-approval records, source page, IP address, and browser/user-agent associated with a legal or checkout action. These records are not used for advertising.
Retention
Event websites are scheduled to expire. After expiration, event-scoped guest/contact/photo data is kept privately for a limited 30-day retention window so the host can resolve immediate post-event issues, then the event record and associated event media/guest data are automatically purged. A seven-day deletion warning is sent when contact delivery is available. Business records needed for orders, support, fraud prevention, payment disputes, tax/accounting, or legal obligations — including payment history and the service-terms version accepted at checkout — may be retained separately for longer. An administrator can also perform an earlier verified event-data deletion request.
Effective September 1, 2026 · Privacy policy version: 2026-09-01-v101n.