How Guestmarks handles personal data.

What is stored

Event details and access links, uploaded photos/videos, optional uploader names, invitation contacts, RSVP answers, dietary notes, messages, and limited security logs. Offline upload selections stay in that guest's browser until uploaded or cleared.

Who can access it

The event hosts manage the account-protected dashboard. Guests need an event or personal invitation link. Storage objects are private and use short-lived signed URLs rather than public bucket links. A small Guestmarks team can also access event content when needed to moderate reported or unlawful material, investigate abuse, or comply with legal obligations — such access is logged and limited to what the task requires.

Who processes it for us

We run on a small set of infrastructure providers acting on our instructions: Vercel (hosting), Neon (database), Cloudflare (media storage & bot protection), Clerk (host sign-in), Stripe (payments — card details go to Stripe directly and never touch our servers), Resend (transactional email), Upstash (rate limiting), Sentry (error monitoring), and Apple Maps (venue maps). We never sell personal data or share it for advertising.

Cookies

We don't use advertising or cross-site tracking cookies. The intended cookies are essential: keeping hosts signed in, remembering event-password access, and linking a guest to their event-scoped upload session. Error telemetry is configured to disable default PII and redact access credentials.

Retention and deletion

Premium originals are scheduled for deletion after six calendar months; Ultimate originals after twelve. Applicable Studio events receive a 60-day download-only period after cancellation. Hosts control RSVP retention and receive an export reminder before guest responses and invitation contacts are deleted. Event deletion includes a seven-day recovery window before permanent database and media removal.

Questions or corrections

Guests should contact the host who shared their invitation for access, corrections, or removal. Hosts can manage/export data in their dashboard. For anything else — including reporting content you believe is unlawful or shouldn't be on an event page — email hello@guestmarks.com and we'll act quickly.

Hider is commonly a processor for event data handled on the organiser's instructions, and an independent controller for accounts, billing, security, moderation, reports and legal duties. Company number, registered office and final privacy contact must be inserted before launch.