We collect the minimum needed to run your event, we never sell your data, guests join without creating accounts, and everything your guests upload is automatically and permanently deleted when your plan's retention period ends. Privacy isn't a setting here — deletion is built into the product.
We use a small set of service providers to operate the Service: Google Firebase (database, file storage for photos/videos/audio, hosting, and sign-in), Google Cloud Vision (automated safety scanning of images — see below), Stripe (payments), and Cloudflare (content delivery). Each receives only what it needs to do its job. We do not sell or share your personal information, and we never rent it — not for advertising, not for any purpose, ever.
No facial recognition or biometrics. Our automated image scanning checks only whether a picture contains unsafe content. We do not create, collect, or store faceprints, face geometry, or any biometric identifier, and we do not identify or recognize the individual people in your photos.
Hosts must be 18+. Guests may include children photographed at family events — the host is responsible for having appropriate permission from guests (and their parents) to capture and share event photos. We never knowingly collect personal information directly from children under 13.
Removing a photo of someone. If you're in a photo at an event (or you're the parent or guardian of a child who is) and you want it taken down, you don't need to be the host — email james@rosetechllc.com with the event name and we'll remove it, typically within 48 hours and always within 7 days. We scan uploaded images automatically and remove explicit or unlawful content. If we become aware of content that appears to sexually exploit a minor, we are legally required to — and will — preserve it and report it to the National Center for Missing & Exploited Children (NCMEC), and we cooperate fully with law enforcement.
We use reputable, security-hardened providers (Google, Stripe, Cloudflare), restrict access to your data, and transmit it over encrypted connections. No system is perfectly secure, but if a data breach ever affected your personal information, we will notify affected people and the relevant authorities as required by applicable law. The Service also stores small amounts of information on your own device (for example, your language choice) to make it work — this isn't used for tracking or advertising.
Wherever you live, you can ask us what we hold about you, ask for a copy, correct it, or have it deleted — and we do not discriminate against you for exercising these rights. One email does it: james@rosetechllc.com, or just reply to any message from us; we respond within 30 days. To repeat, we do not sell or share your personal information. RoseTech LLC operates in the United States, and your information is processed and stored in the U.S. on the providers named above; if you use the Service from outside the U.S., you consent to that processing.
If we change this policy in any meaningful way, we'll post the update here with a new date, and email hosts with active events.
The data controller is RoseTech LLC, an Ohio limited liability company (USA), operating the Bashmob, Joymob and Confetto services. Reach us any time at james@rosetechllc.com.