Privacy notice

Guest Filmed is the public brand. The registered legal business name and a public privacy contact method still need confirmation before accepting a booking or payment.

The site is hosted on Replit. Technical request logs managed by the host may include your IP address, device/browser information, requested pages, and timestamps for operation and troubleshooting. When you submit an inquiry, we use the names, email, date, venue/city, package interest, guest count and message you provide to review and reply to your request. The submission is sent via Resend to our private inbox; Resend also sends a confirmation to your email. An inquiry does not reserve a date.

No advertising pixels or app analytics have been installed. This does not mean hosting infrastructure never processes technical request data.

Google Fonts is loaded from Google servers; when your browser requests those fonts, Google may receive technical request data such as your IP address and browser information. Replit hosts and serves this site and may process technical request data as described above. Resend processes inquiry messages and confirmation emails.

Staff-approved deposit requests store the customer name, wedding date, chosen package, staff approval, agreed-terms note, Stripe checkout reference, payment mode, and verified payment status in our database. A private payment link shows limited booking details and does not expose staff notes or a list of customers. Keep that link private.

Stripe hosts checkout and processes payment details under its own privacy policy. This app does not store full card numbers or security codes. Payment records and Stripe event data may be synchronized to our database to verify and reconcile payments. Payment-record retention is separate from guest-footage deletion dates and must be confirmed in the written booking/privacy details; deleting footage does not delete financial records.

Guest uploads do not require an account. We store photos and videos, original filenames, file sizes/types, upload times, permission acknowledgments, and their wedding association to collect material for the couple’s service and consider usable videos for the film. Photos are collected without a promise of a slideshow or photo editing. Avoid putting unnecessary personal information in filenames. A private link permits uploads only; it does not provide a public gallery.

Files are held in private Replit App Storage backed by Google Cloud Storage; wedding settings and file metadata are held in the Replit-hosted PostgreSQL database. Authorized Guest Filmed staff may download files to edit and deliver the service. Clerk handles staff sign-in and related account/session information. Signing up alone does not grant access to footage or link management.

The wedding upload page shows the upload cutoff and scheduled storage-deletion date selected by staff. Access is blocked at that deletion deadline, and the app schedules removal of stored footage and related wedding records. Staff may delete files earlier. This deadline covers the upload service, not separately downloaded editing copies, completed films, hosting logs, or provider backups; those broader retention policies still need confirmation. Keep original files.

We use limited request information, including hashed IP-based counters, to restrict abusive upload requests. Application logs avoid recording private upload links and signed storage URLs. Anyone with the wedding link can submit while it is open; staff can revoke it by pausing the collection or replacing the link. Uploads are for service delivery, not public marketing without separate permission.

If bookings become available, footage returned for an order would be accessed by Guest Filmed and the people needed to edit and deliver the service. We would use it for the service, not public marketing, samples, or social posts without separate permission. Customers are responsible for notifying guests and obtaining permissions required by law, including those relating to minors. Storage provider, access practices, transfer and deletion process, and retention duration must be finalized and disclosed before bookings.

You may choose not to upload or participate in guest filming. If you need help with a submitted clip, contact the couple who shared your link so they can ask Guest Filmed staff to find or remove it. Staff can delete individual uploads or an entire wedding collection. A verified public privacy contact method still needs to be published before bookings open. Clerk staff accounts, host logs, email delivery, Google Fonts requests, and provider backups are subject to those providers’ practices and applicable rights.

We will update this page when the inquiry flow, service providers, legal business and contact details, or retention practices change. Please review the current notice before using any future submission or booking flow. This draft does not make unverified promises about encryption, storage locations, or deletion deadlines.