Privacy Policy

1. Information We Collect

We collect minimal information necessary to deliver the digital film, guest letter and audio guestbook experience:

2. How We Use Your Information

Your data is used exclusively to provide, maintain, and enhance the KeptShot experience:

• ■To allocate and manage digital film rolls and track exposure limits per guest.
• ■To process, apply analog film simulations, and securely store captured photographs and voice cassette recordings.
• ■To deliver each guest letter to the host, and to other participants only where the host's letter setting allows.
• ■To provide media playback, audio streaming, and high-resolution archive downloads for authorized event participants.
• ■To enforce host privacy rules: Instant Reveal versus After-Event Darkroom Reveal, and Public Guest Gallery versus Host-Only Private Vault.
• ■To provide hosts with real-time guest rosters, shot counts, and high-resolution photo ZIP and voice audio archive downloads.
• ■To credit a creator when you use their code: they see the order's date, occasion, package, amount and the first letter of your name only — never your full name, email or event details. For creators themselves, we keep bank and tax details only to pay them and to file taxes.
• ■To maintain platform security, log consent audit trails, prevent abuse, and resolve technical issues.

3. Storage Architecture & Media Security

We implement enterprise-grade security and modern storage infrastructure verified against our actual implementation:

• ■All original photographic files and voice cassette recordings are stored in private Cloudflare R2 object storage buckets with zero public directory browsing.
• ■All image and audio viewing and download URLs are dynamically generated with cryptographic signatures (signed URLs) that expire automatically.
• ■Letter text is stored in our database and served only through our own servers after the host's letter setting has been checked; it is never publicly accessible.
• ■Database records, authentication sessions, and access permissions are managed through Supabase PostgreSQL with strict Row Level Security (RLS) policies.
• ■All data transmission between your device, our servers, and storage providers is encrypted using TLS 1.3 / HTTPS.

4. Photo, Letter & Audio Sharing, Visibility & Content Responsibility

Photo, letter and audio visibility is governed strictly by the host's event configuration:

• ■Everyone Mode: If the host configures the event for shared visibility, guests who join the event can view photos and listen to voice recordings contributed by other participants once revealed.
• ■Photographer & Host Mode: When configured as 'Photographer & Host', each guest can view only the photos they personally captured and listen only to their own voice cassette recordings. The event host maintains complete access to all photos and audio recordings across the entire event. Other guests cannot view or listen to each other's contributions.
• ■Host Only Mode: If configured as private, captured photos and voice recordings are delivered exclusively to the host's private management vault and are never visible to other guests.
• ■Guest Letters: The host chooses who may read guest letters, using the same Everyone, Photographer & Host, or Host Only options. A photo inside a letter is shown only to people allowed to see that photo under the event's photo visibility and reveal timing; anyone else sees the letter without the photo.
• ■Darkroom Reveal Timing: In 'After Event' mode, photos remain locked and undeveloped in the darkroom until the host concludes the photo-taking period.
• ■People Appearing in Photos: Photos and audio uploaded through KeptShot may capture other individuals. Users and Hosts are responsible for respecting the privacy and rights of people appearing in uploaded content. Uploading media does not imply universal consent from every individual depicted for unrelated purposes. The Host should appropriately inform event participants about the event's media-sharing settings.

5. Third-Party Service Providers & International Transfers

We engage reputable infrastructure providers who adhere to rigorous data protection standards. Depending on the provider's infrastructure, some data may be processed or stored in secure cloud data centers outside of Thailand, handled in accordance with applicable data protection laws:

• ■Google OAuth: For secure host authentication.
• ■Supabase: For PostgreSQL database hosting, authentication sessions, and row-level security.
• ■Cloudflare: For global edge network delivery, image transformation, and private object storage (R2).
• ■Stripe: For secure, PCI-DSS compliant payment processing and billing.
• ■Google Analytics: For aggregate website usage measurement on keptshot.com. It is not used in the iOS app.

6. Data Retention & Lifecycle Policy

We maintain transparent data retention lifecycles to balance privacy, storage efficiency, and memory preservation:

• ■Free Tier Events (฿0): Photo and audio files stored in Cloudflare R2 are preserved for 1 month (30 days) following the scheduled event conclusion, after which media files are subject to permanent cleanup. Overall event statistics and guestbook roster entries remain preserved.
• ■Paid Tier Events: Include 1 full year of guaranteed high-resolution cloud storage retention from event completion, with options to extend up to 3 years with the Extended Archive Vault.
• ■Voice Cassette Retention: Audio recordings follow the exact same retention period as event photos for the selected package tier.
• ■Guest Letter Retention: Letters, including their message text, follow the same retention period as the event's photos and audio for the selected package tier (30 days for free events, 1 year for paid events, or longer with the Extended Archive Vault) and are permanently deleted together with the event's media.
• ■Download Backups: Hosts and permitted guests can download high-resolution photo ZIP archives and voice audio recordings at any time during the active retention window.
• ■Host Deletion: Hosts can manually delete individual photos, audio recordings (deleting a guest's recording also deletes the letter it belongs to), or entire events, or request full account deletion at any time, permanently purging all associated media. KeptShot does not guarantee recovery of media after expiration or deletion.
• ■Personal Albums (iOS): Personal albums are stored only on your device. They are removed when you delete the app or use Reset in its Settings, and KeptShot cannot recover them.

7. Security Measures & Incident Response

KeptShot implements reasonable and appropriate technical and organizational security measures to protect personal data against unauthorized access, loss, alteration, or disclosure. However, no online service or electronic transmission can guarantee 100% absolute security. If a personal data breach occurs that affects your data, KeptShot will promptly investigate, contain the incident, and notify affected parties and regulatory authorities as required by applicable law, including the Thailand Personal Data Protection Act (PDPA).

8. Children & Minors

KeptShot is an event experience platform often used at family celebrations, weddings, and parties where minors may be present. We do not knowingly solicit personal data from children under 13 without appropriate parental or guardian supervision. For events where minors participate in taking photos, writing letters, or recording voice messages, the Event Host assumes responsibility for ensuring appropriate parental or guardian consent has been obtained, maintaining a safe and friendly guest experience.

9. Your Privacy Rights Under PDPA

Under the Thailand Personal Data Protection Act (PDPA B.E. 2562) and applicable data protection legislation, you have specific rights regarding your personal data:

• ■Right to Access: You have the right to request access to and obtain a copy of personal data relating to you.
• ■Right to Data Portability: You have the right to receive your personal data in a commonly used, machine-readable format where applicable.
• ■Right to Rectification: You have the right to request the correction or update of inaccurate, incomplete, or misleading data.
• ■Right to Erasure / Deletion: You have the right to request the deletion or anonymization of your personal data when it is no longer necessary or where consent has been withdrawn.
• ■Right to Restriction: You have the right to request the restriction of processing under legally defined circumstances.
• ■Right to Object: You have the right to object to the collection, use, or disclosure of your personal data where permitted by law.
• ■Right to Withdraw Consent: Where processing is based on your consent, you may withdraw your consent at any time, without affecting previous lawful processing.

10. Contact Information & Data Requests

To exercise your privacy rights, request data deletion, or ask questions regarding this policy, please reach out to us at keptshot@gmail.com. Operated by Renz Soft Co., Ltd. (Bangkok, Thailand).