Legal

Privacy policy

Draft — replace before launch. Skeleton only. Have a privacy-experienced lawyer write the real version. We collect PII from venues (operators) and from venue customers (photo subjects) — those are different relationships and need separate treatment.

What we collect

From operators (you): name, email, billing info via Stripe (we never store card numbers), shipping address, brand assets you upload.
From your customers (photo subjects): photos they consent to take, optional phone number or email if they choose to receive a digital copy. [Verify with counsel.]

How we use it

Operator data is used to deliver the service and bill you. Customer photos are processed on your behalf — we don't use them for our own marketing or training. [Spell out your stance on AI/ML training explicitly.]

Retention

Customer photos are deleted on a rolling 90-day window unless you change the setting in your dashboard. Operator data is retained while your account is active and for 12 months after cancellation. [Confirm.]

Sharing

Stripe (billing), our cloud provider (infra), our shipping partner (fulfillment). No selling of data, ever. [List exact subprocessors in the DPA.]

Your rights

Access, correction, deletion, portability. Email privacy@boothfunnel.com. [Match to GDPR / CCPA / state laws as needed.]

Contact

privacy@boothfunnel.com