Legal
Privacy Policy
Last updated: May 30, 2026
This Privacy Policy describes how Photo Groups ("we", "us", or "our") collects, uses, and handles your information when you use photogroups.app ("the Service").
1. Who We Are
Photo Groups is a web-based service that helps wedding couples organize guest photo groups. We are operated by DJ RAHUL LLC (DBA Photo Groups). For privacy-related questions, contact us at: privacy@photogroups.app
2. Information We Collect
Information you provide directly
- Account information — your name, email address, and wedding date when you create an account
- Phone number — optionally provided when you opt in to SMS notifications
- Guest data — names of wedding guests you upload via CSV file to create photo groups
- Payment information — credit card and billing details processed securely by Stripe. We never store your full card number on our servers
Information collected automatically
- Usage data — pages visited, time spent on the Service, browser type, device type, and IP address
- Cookies — we use Google Analytics cookies to understand how visitors use our site. You can disable cookies in your browser settings
3. How We Use Your Information
We use your information to:
- Provide and operate the Service
- Process your payment via Stripe
- Generate your custom guest photo group link
- Send OTP verification codes for account login
- Send SMS and email notifications if you have opted in to the $10 notification upgrade
- Send transactional emails including purchase confirmation, wedding reminders, and post-wedding surveys
- Respond to support requests
- Improve the Service through analytics
- Comply with legal obligations
We do not sell, rent, or share your personal information or your guests' data with third parties for marketing purposes.
4. SMS Notifications & Text Messaging
If you purchase the SMS notification upgrade ($10) and provide your phone number, you consent to receive the following SMS messages from Photo Groups:
- One-time verification (OTP) codes for account login
- Guest check-in alerts when your first guest accesses your photo group link
- Daily summary notifications showing how many guests have checked in
- A 24-hour wedding day reminder
- A wedding morning notification
Message frequency: Varies based on guest activity and proximity to your wedding date. Typically 2–5 messages total.
Message and data rates may apply based on your mobile carrier plan.
To opt out: Reply STOP to any message at any time. You will receive a confirmation and no further messages will be sent.
To get help: Reply HELP to any message or email support@photogroups.app
Consent is not a condition of purchase. SMS notifications are an optional $10 upgrade. The base Photo Groups service ($25) does not require you to provide a phone number.
We use Telnyx to deliver SMS messages. Your phone number is shared with Telnyx solely for message delivery purposes. Telnyx privacy policy: telnyx.com/privacy
Guest SMS: Wedding guests' phone numbers are provided by the couple via CSV upload. Before sending any SMS to guests, the couple confirms they have obtained consent from their guests to receive photo group notifications. This attestation is recorded with timestamp. Guests can opt out at any time by replying STOP.
5. Guest Data
When you upload a CSV of guest names, that data is used solely to generate photo groups for your wedding.
Important: Guest data is not backed up by Photo Groups. We strongly recommend you retain your own copy of your guest list CSV. In the event of data loss, service interruption, technical failure, or account termination, we cannot recover guest data. You are responsible for maintaining your own backups.
Guest names are stored only for the duration needed to run your wedding's photo group lookup. We do not use guest names for any marketing or analytics purposes.
Guest consent: By uploading guest names to the Service, you confirm that you have the right to share this information and that your guests are aware their name will be used to facilitate photo group lookup at your wedding event.
6. Data Retention
- Guest data — retained for 2 days after your event end date, then permanently deleted
- Account data — retained for as long as your account is active
- Phone numbers — retained only while SMS notifications are active. Deleted upon opt-out or account deletion
- Payment records — retained for 7 years as required by law
- Analytics data — retained per Google Analytics default settings (26 months)
- Email tracking data — retained per Resend default settings
- Activity & audit logs — retained for approximately 1 year, then automatically deleted
You may request deletion of your data at any time by emailing privacy@photogroups.app. We will action deletion requests within 30 days.
7. Third-Party Services
We use the following third-party services:
| Service | Purpose | Privacy Policy |
|---|---|---|
| Stripe | Payment processing | stripe.com/privacy |
| MongoDB Atlas | Database storage | mongodb.com/legal/privacy-policy |
| Vercel | Website hosting | vercel.com/legal/privacy-policy |
| Google Analytics | Usage analytics | policies.google.com/privacy |
| Resend | Email delivery | resend.com/privacy |
| Telnyx | SMS delivery | telnyx.com/privacy |
| OpenAI | AI-powered Smart Import (extracting your guest list from uploaded files) | openai.com/policies/privacy-policy |
AI-Powered Smart Import
If you choose to use Smart Import, the file you upload (a CSV, spreadsheet, photo/screenshot, or PDF of your guest list) is sent to our AI provider (OpenAI) to extract and organize the names, phone numbers, and emails into photo groups. This processing happens only when you trigger an import. Per OpenAI's API policy, this content is not used to train their models and is retained by OpenAI only briefly for abuse monitoring before deletion. Using Smart Import is optional — you can always enter or paste your list manually instead.
Activity & Audit Logs
To keep accounts secure and to resolve disputes, we keep an activity log of administrative and account actions — for example sign-ins, and creating, editing, deleting, or uploading guest groups — including who performed the action and when. These logs are used only for security, troubleshooting, and dispute resolution, and are retained for about one year (see Data Retention).
8. Email Communications
We send the following emails using Resend from hello@photogroups.app and noreply@photogroups.app:
- Welcome email upon account creation
- Purchase confirmation with your guest link
- Wedding day reminders (if notifications enabled)
- Post-wedding survey after your event
- Product updates for major new features (can be unsubscribed)
All emails include an unsubscribe link. Transactional emails (OTP, purchase confirmation) cannot be unsubscribed as they are required for the Service to function.
9. Data Security
We implement industry-standard security measures including HTTPS encryption, secure database access controls, OTP-based authentication (no passwords stored), and limited access to personal data. However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security of your data.
10. Children's Privacy
The Service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us at privacy@photogroups.app and we will delete it.
11. Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Object to processing of your data
- Request a copy of your data in portable format
- Opt out of SMS communications at any time by replying STOP
To exercise any of these rights, email privacy@photogroups.app.
12. California Privacy Rights (CCPA)
If you are a California resident, you have the right to know what personal information we collect, request deletion of your data, and opt out of the sale of your data. We do not sell personal data. To exercise your rights, contact privacy@photogroups.app.
13. GDPR — European Users
If you are located in the European Economic Area, our legal basis for processing your data is:
- Contract performance — to provide the Service you purchased
- Consent — for SMS notifications and marketing communications
- Legitimate interests — to improve the Service and prevent fraud
- Legal obligation — to comply with applicable laws
14. SMS Compliance
Our SMS messaging program complies with:
- TCPA (Telephone Consumer Protection Act)
- 10DLC (10-Digit Long Code) carrier requirements
- TCR (The Campaign Registry) guidelines
- CTIA Messaging Principles and Best Practices
15. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page with an updated date. Continued use of the Service after changes constitutes acceptance of the new policy.
16. Contact Us
For any privacy questions or requests:
Email: privacy@photogroups.app
Phone: (631) 99-PHOTO — +1 (631) 997-4686
Website: photogroups.app