Privacy Policy

EveryShot ("we," "us") is a product of Alto Tech Services LLC. This policy explains what we collect, why, and what happens to it. The short version: your photos are yours, galleries are private, we never sell or mine your content, and we delete our copy after delivery.

What we collect

• Host accounts. Email address and authentication details, handled by our auth provider (Supabase). If you sign in with Google, we receive your name and email from Google.
• Event details. Event name, date, and the design settings you choose.
• Guest uploads. Photos and videos guests share to a gallery, plus the display name a guest optionally enters. Guests do not create accounts and we collect no other guest information.
• Payments. Processed by Stripe. We never see or store card numbers — we keep only the payment status and a Stripe reference ID.
• Technical basics. Standard server logs (IP, timestamps, errors) used to keep the service running and secure.

How we use it

Only to provide the service: collecting your event's photos, showing the private gallery and slideshow, syncing to destinations you connect, and delivering your download. We do not sell personal data, do not run ads, and do not use your photos to train AI models or for any purpose other than delivering them to you.

Your photos and who can see them

• Copyright stays with the people who took the photos. You grant us only the limited license needed to store, process (e.g., thumbnails), display in your gallery, and deliver them.
• Galleries are private — reachable only through your unguessable QR code/link. They are excluded from search engines.
• Hosts can hide any photo; hidden photos leave the gallery, slideshow, and final download.
• Photos and videos are stored with Cloudflare (R2 object storage) in the United States.

Google Photos & Drive sync

If you connect Google, we request the narrowest scopes Google offers: permission to add photos to an album we create in your Google Photos, and/or to manage only the files we create in your Google Drive. We cannot see, browse, or delete anything else in your Google account. Our use of Google user data complies with the Google API Services User Data Policy, including the Limited Use requirements. You can revoke access anytime at myaccount.google.com/connections.

Retention and deletion

Galleries collect for the window you purchased (4 or 8 weeks from your event date). After the window closes you can still download everything; we then delete our stored copies. Deleting your account (or emailing us) removes your events, media, and connection tokens. Copies already delivered to your Google account or downloads are yours and unaffected.

Who we share with

Only the service providers that make EveryShot work: Supabase (authentication), Cloudflare (storage and delivery), Stripe (payments), and Google (only when you connect sync). Each receives only what it needs. We may disclose information if required by law.

Children

EveryShot is not directed at children under 13 and we don't knowingly collect their personal information. Hosts are responsible for obtaining any consents required to photograph their event's attendees.

Changes & contact

If we make material changes to this policy we'll update this page and the date above. Questions or deletion requests: support@altotechservices.com.