Privacy Policy

For QR hosts, we collect email, sign-in and session records, event details and settings. Password sign-in stores a password hash. Google sign-in, when enabled, supplies your verified email and account identifier. We use this information to run your account and event.

For guests, we store videos, photos and written notes, optional names and moment tags, plus file details and timestamps. A random browser device identifier is hashed for the event and used for contribution counts and upload retries. Security controls also use hashed IP addresses.

Pending recordings and upload copies stay in the guest’s browser until sent or removed. Browser storage can also retain the device identifier and the guest’s name for that event. The iPad app stores its recordings and event data on the iPad.

Stripe processes QR checkout payments. We store payment references, amounts, currency and payment or refund status, not card numbers. Apple handles the iPad app’s App Store purchases under Apple’s terms.

Cloudflare hosts the QR service: D1 stores account, event and contribution records, and R2 stores media. Amazon SES delivers sign-in and event emails. Google handles optional Google sign-in. Stripe handles QR payments; Apple handles App Store purchases.

Support forms collect the details you send. Cloudflare’s email services, D1 and R2 process support messages and attachments; our emailer and Jed or Charm support relays route messages to our team. The website is served through Vercel, uses Pinterest’s advertising tag and can use Google Analytics when configured. Sign-in and language preferences use cookies or browser storage.

Guest content is accessible only to the host in the current QR service. Approval does not make it public. Hosts can create and revoke share links, but the current share pages display no event content. We use service providers to operate the service and may disclose information when legally required. We do not sell or rent personal information.

QR content is kept while the event exists. There is no automatic event-content deletion schedule. Rejecting a contribution or closing collection does not delete stored content. Ask us through our support page to delete event, account or support information. We will review your request and any legal recordkeeping requirements.

The iPad app’s local data remains until you delete it or remove the app. Support messages and attachments have no automatic deletion schedule.

The service is intended for adult hosts. Hosts are responsible for permission from a parent or guardian where required for a child’s contribution. Contact our support page if a child’s information needs removal.

We will post changes on this page with an updated effective date.

We collect business name, business email address, website, city/country, and the public page where we found the address.

We get this information from publicly available business websites and listings.

We use it to tell wedding vendors, including audio guestbook rental companies, about Votive's Business Pack.

Our legal basis is legitimate interests (UK/EU), implied consent from conspicuous publication (Canada), and inferred consent (Australia).

We keep this data until the business opts out, or 24 months after our last email with no reply.

To opt out, reply "no thanks" or use the unsubscribe link in any email. Use our support page to see, correct or delete the data. You have the right to complain to your local regulator, including the ICO in the UK and the CNIL in France.

The controller is Votive, 422 Richards St, Suite 170, Vancouver, BC V6B 2Z4, Canada.