Privacy Policy

1. Information We Collect

We collect information in the following ways:

• Host account: when you sign up we receive your name and email address from our authentication provider (Clerk), and a unique account identifier.
• Event content: media and messages that hosts and guests upload (photos, videos, audio, and text), along with basic technical metadata such as file type and upload time.
• Payments: when you buy a plan or product, our payment processor (Stripe) handles your card details. We never see or store full card numbers; we receive a confirmation, the amount, and a customer/subscription identifier.
• Usage and device data: standard server logs (IP address, browser type, pages requested) used to operate and secure the service.
• Approximate location: for guests who claim a marketing discount, we may store a coarse, region-level location derived from IP to run regional campaigns.

2. How We Use Information

• To provide event pages, galleries, live feeds, and slideshows.
• To moderate uploaded media using automated content checks before it is shown publicly.
• To process payments, manage plans, and send transactional email (receipts, storage-expiry reminders).
• To secure the service, prevent abuse, and comply with legal obligations.
• To send optional marketing or discount messages, which you can opt out of at any time.

3. Automated Content Moderation

Uploaded photos and videos are scanned by an automated moderation system to detect explicit or graphic content before it appears in public galleries. This processing is automatic and is used only to decide whether content is shown. Hosts retain manual control over visibility.

4. How We Share Information

We do not sell your personal information. We share information only with:

• Service providers who operate the platform on our behalf: Cloudflare (hosting, storage, media, AI moderation), Clerk (authentication), Stripe (payments), and Resend (email).
• Other guests and the public, but only the event content that the host has chosen to make visible. Galleries set to "private" are not shown publicly.
• Authorities, when required by law or to protect the rights and safety of users.

5. Event Content and Visibility

Event hosts control who can see uploaded media through visibility settings (everyone, private, or access-code). Content shared to a public gallery may be viewed by anyone with the link. Media files are stored at unguessable URLs, but a host who needs media kept fully private should use the "private" setting.

6. Data Retention and Storage Expiry

Event media is retained according to the host's plan, measured from the event date: Free plans retain media for 30 days after the event, Silver for 6 months, and Gold for 12 months. After a plan's storage window ends, there is a grace period during which the host can extend storage; if storage is not extended, the event and its media are permanently deleted. Host account information is retained while the account is active.

7. Cookies

We use essential cookies for authentication and to remember your language preference. We do not use third-party advertising cookies.

8. Security

We use industry-standard measures to protect your information, including encryption in transit and access controls. No method of transmission or storage is completely secure, but we work to protect your data and limit access to it.

9. Your Rights and Choices

• Access, correct, or delete your account information by contacting us.
• Request deletion of an event and its media at any time.
• Unsubscribe from marketing email using the link in any such message or the unsubscribe page.
• Depending on your location, you may have additional rights under laws such as the GDPR or CCPA; contact us to exercise them.

10. Children

HeartMee is intended for adult hosts (for example, a parent organizing a quinceañera or a couple planning a wedding). It is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will delete it.

11. International Users

HeartMee is operated using infrastructure that may process and store data in the United States and other countries. By using the service you consent to the transfer of your information to these locations.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify hosts by email.