Privacy Policy

Last updated: October 21, 2026

Sharefetti hasn't launched yet. Today this website is a coming-soon page. This policy also describes how the Sharefetti service will handle information once it opens, and we'll update it before launch.

This Privacy Policy explains how Sharefetti ("Sharefetti", "we", "us"), based in Ontario, Canada, collects, uses, shares and protects personal information when you use our website, guest pages, slideshow and related services (the "Service"). It is written to meet Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and, where they apply, the EU/UK GDPR and US state privacy laws such as the CCPA/CPRA.

The short version

• Hosts decide who can see an event. We store photos and messages so the Host and Guests can see them, and we don't sell personal information or use your photos in our advertising.
• Anyone with an event's link or password can see what's shared in it, and can download or screenshot it. Think before you upload.
• Photos and videos can carry hidden details such as when and where they were taken. Turn off location tagging in your camera if you don't want to share where you were.
• If you give us your email to hear when a gallery is ready, we use it for that one message only.
• You can ask us to access, correct or delete your information at privacy@sharefetti.com.

1. Who is responsible for your information

Sharefetti, based in Ontario, Canada, is responsible for personal information about Hosts and about how we run the Service. You can reach our Privacy Officer at privacy@sharefetti.com.

For Content inside an event (photos, videos and messages), the Host decides why it's being collected and who it's shared with. We process that Content on the Host's behalf and on the instructions they set in their event settings. If you're a Guest and want something removed from an event, you can delete your own uploads from the phone you used, ask the Host, or contact us.

2. What we collect

From visitors to our website
- Usage information collected by Google Analytics, such as pages viewed, approximate location, and device and browser type (see section 9).
- Anything you send us by email, for example when you ask for early access.

From Hosts
- Account details: name, email address, password (stored hashed) or sign-in through Google, language and time zone.
- Event details: event name, date, venue, cover photo, welcome note, settings, photo challenges and co-host invitations.
- Billing details: billing name, address and the last four digits and expiry of your card. Full card numbers are handled by our payment processor, Stripe, not by us.
- Messages you send to our support team.

From Guests
- The name you enter on an event page.
- Content you upload: photos, videos, voice and video messages and written messages, and which photo challenge a photo was taken for. Photos and videos can contain metadata such as the date taken, the camera model and sometimes GPS location.
- Your email address, only if you ask to be emailed when an event's gallery is ready, along with the time you agreed and the wording you agreed to.
- RSVP or contact details, if the Host turns on features that ask for them.

Automatically, from everyone
- Device and usage information: IP address, browser and device type, pages viewed, upload success or failure, and approximate location derived from your IP address.
- Cookies and similar technologies (see section 9).
- An anonymous identifier stored on your phone so you can delete your own uploads, keep your place in photo challenges and aren't asked for your name again.

Children: we don't knowingly collect information from children under 13 except as Content uploaded by a Host or Guest who is responsible for having the consent of that child's parent or guardian.

3. How we use information

• To provide the Service: create accounts and events, receive and store uploads, create previews (for example converting iPhone HEIC photos), run the gallery, slideshow, guestbook and photo challenges, and produce downloads.
• To process payments, issue receipts and prevent fraud.
• To send service emails, such as receipts, event reminders, upload summaries and expiry warnings. Marketing emails are only sent with your consent, and you can unsubscribe at any time.
• Gallery-ready emails for Guests: if you ask, we send you one email with a link when the event's gallery is ready. We don't use that address for marketing, we don't add it to any mailing list, and we don't show it to the Host (the Host sees only your name). You can unsubscribe from the link in the email.
• To keep the Service safe: detect abuse, enforce our Terms and respond to legal requests.
• To understand and improve our website and the Service using analytics and aggregated or de-identified usage data.
• Smart moderation and highlights: we may use automated tools to analyse images and videos, for example to assess quality, detect possible explicit content, detect faces or objects, and group or suggest highlights, to help Hosts moderate and organise their event. Where the law requires it (for example for biometric information), we'll ask for consent before using any feature that recognizes or identifies individuals from their facial features.

We don't sell personal information, and we don't share it for cross-context behavioural advertising.

4. Legal bases (EU and UK users)

We rely on: performance of our contract with Hosts; our legitimate interests in running and securing the Service, balanced against your rights; consent (for example analytics cookies, gallery-ready emails, marketing emails and other non-essential cookies), which you can withdraw at any time; and compliance with legal obligations.

5. Who can see Content

• The Host and anyone they invite as co-host or moderator can see, download and delete all Content in their event, and see the names of Guests who asked for a gallery-ready email.
• Other Guests and anyone with the event link (and password, if set) can see Content that is visible in the gallery, depending on the Host's settings, including photo challenge entries if the Host allows it. They may be able to download it.
• Anyone near the slideshow screen can see Content shown on it.
• People who receive the link from someone else can open the event unless it's password protected.

Photos and videos may keep their original metadata, including the date, device and location where they were taken, and anyone who views or downloads them may be able to see it. If you don't want to share your location, turn off location tagging in your camera settings before taking photos, or remove it before uploading.

6. Who we share information with

• Service providers who process data for us under contracts that require them to protect it: Cloudflare (website hosting, content delivery, photo storage and Turnstile bot protection, which checks browser signals to tell people from bots without tracking cookies), Neon (database), Resend (email delivery), Stripe (payment processing) and Google (sign-in with Google and website analytics). We may add customer support tools later and will list them here.
• Hosts: Guest names and Content are shared with the Host of the event the Guest uploaded to. Guest email addresses are not.
• Legal and safety: when required by law, or when needed to protect people's safety, prevent fraud, or enforce our Terms. We report child sexual abuse material to the appropriate authorities.
• Business transfers: if we are involved in a merger, acquisition or sale of assets, under confidentiality and with notice to you.

7. Where information is stored

We store information mainly in the United States (eastern North America), with our service providers above. When it is transferred outside your country, including from the EU/UK, we use appropriate safeguards such as standard contractual clauses. Information stored outside Canada may be accessible to courts and authorities in that country.

8. How long we keep information

• Event Content (photos, videos and messages) is kept for the period included in the Host's plan, counted from the event date: Free 7 days, Gathering 15 days, Celebration 3 months, Business 6 months. Hosts can buy extra time, but we never keep event Content for more than 6 months after the event date. When a gallery closes it is hidden for 14 days so the Host can restore it, then permanently deleted. Hosts can delete Content or an event sooner.
• Guest email addresses for gallery-ready emails are deleted when the gallery closes or when the Guest unsubscribes, whichever comes first. We keep a record that consent was given and withdrawn for as long as the law requires.
• Account information is kept while your account is open and for up to 12 months afterwards, unless you ask us to delete it sooner.
• Billing records are kept for as long as tax law requires (generally 6 years in Canada).
• Website analytics data is kept by Google Analytics for up to 14 months.
• Backups are overwritten on a rolling cycle of about 30 days, so deleted data may remain in backups until then.

9. Cookies and analytics

We use strictly necessary cookies (for example to keep you signed in, remember your guest name and photo challenge progress, and protect against fraud).

On our website we use Google Analytics to understand how many people visit and which pages they use. It sets cookies and sends usage information, such as pages viewed, approximate location and device type, to Google. In the EU, the UK and Switzerland it only runs once you agree. Google Analytics' advertising features are turned off, and we don't use advertising cookies. You can opt out of Google Analytics on any website with Google's browser add-on.

Event pages don't use advertising cookies. You can manage cookies in your browser settings and, once it's available, through our cookie banner.

10. Security

We use reasonable administrative, technical and physical safeguards, including encryption in transit, encrypted storage, hashed passwords, access controls and optional two-step verification for Hosts. No system is completely secure, and we can't guarantee the security of information sent to or stored on the Service. If we have a breach that creates a real risk of significant harm, we'll notify affected people and regulators as the law requires.

11. Your choices and rights

Depending on where you live, you can ask to access, correct, delete or receive a copy of your personal information, withdraw consent, object to or restrict certain processing, or not be discriminated against for using these rights. To make a request, email privacy@sharefetti.com. We'll verify your identity and respond within the time the law requires (30 days under PIPEDA).

• Guests can delete their own uploads from the phone they uploaded with, or ask the Host or us to remove them. Guests can stop a gallery-ready email with the unsubscribe link or by contacting us.
• Hosts can delete Content, events and their account from their settings.

If you're not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca), or to your local data protection authority.

12. Children

The Service isn't directed at children under 13, and Hosts must be adults. Photos at events may include children. Hosts and Guests are responsible for having a parent's or guardian's permission before uploading images of a child. A parent or guardian can ask us to remove an image of their child at privacy@sharefetti.com.

13. Search engines

Event pages can be opened by anyone who has the link. We don't guarantee that an event page, or Content in it, won't appear in search engine results or be linked to from other websites, for example if someone shares the link publicly. Hosts who want an event kept private should add a password and share the link only with their guests.

14. Changes to this policy

We'll post any changes here and update the date above. If a change is significant, we'll tell Hosts by email or in the app before it takes effect.

15. Contact

Privacy Officer, Sharefetti
Ontario, Canada
privacy@sharefetti.com