WeddingRecaps Privacy Policy (DRAFT)

DRAFT for attorney review. Not legal advice. Prepared 2026-10-18 for WeddingRecaps (operated by Lipa Honig as an individual, doing business as WeddingRecaps; no LLC is formed). Placeholders are in [brackets]. Items marked DECISION need Lipa or the CEO. No mailing address is included on purpose; a business contact address gets added by counsel if required (an assumed-name/DBA filing may also be needed in New York).

Effective date: [date] · Contact: hello@weddingrecaps.com (planned; not yet active)

1. Who we are

WeddingRecaps ("we", "us") is operated by Lipa Honig, an individual doing business as WeddingRecaps. We help couples collect photos and videos from their wedding guests through a private, per-wedding upload link and QR code. We turn that footage into edited reels.

2. The short version

Guests can only upload. Guests can't view, browse or search anyone's photos or videos, including their own after upload.
Only the couple (the people who booked the wedding) can see that wedding's uploads, through a private, signed-in gallery that includes search by guest name.
Every wedding is kept separate.
Guests give an email and mobile number (required) so we can deliver your reel (usually within 48 hours of the wedding). Name, mailing address and social handles are optional. We don't sell your information. Marketing by email or text happens only if you tick the separate, unticked opt-in boxes.
Couples and website subscribers may get occasional WeddingRecaps emails; unsubscribe anytime.
Raw uploads are deleted 90 days after the wedding (DECISION: confirm 90 days). Reels are kept for [12 months] (DECISION).

3. Information we collect

| From | What | Why |

|---|---|---|

| Guests | The photos and videos you upload, including embedded metadata such as the time, device and possibly **location (EXIF/GPS)** | To make reels for you and the couple. **DECISION:** strip location data on upload, or keep it |

| Everyone | Basic usage events: page views, QR scans, uploads, reel plays, and clicks on "get yours" | To run and improve the service and show couples how their QR code was used. We store a one-way hashed visitor identifier that changes daily, **not your raw IP address** |

| People who get our emails | Whether an email was delivered, opened or clicked, recorded by our email service provider | To make sure emails arrive, measure what's useful and stop emailing people who aren't reading |

| People who share a referral link | Your link/code and whether someone booked through it | To give referral rewards. We don't tell you who booked unless they agree |

| Couples | Your names, email, wedding date and billing details | To provide the service. Card payments are processed by our payment provider [Stripe]; we don't store card numbers |

We don't use face recognition or create biometric identifiers. DECISION: if editing tools ever use face detection or recognition, this section, the consent text and the retention schedule must change first (Illinois BIPA, Texas, Washington and others).

Guest contact fields and how each is used

|---|---|---|---|

| Mailing address (line 1, line 2, city, state/region, postal code, country) | Optional | **DECISION:** only for physical delivery or keepsakes, if offered | Only if you opted in to marketing, and only for mail from WeddingRecaps. **DECISION (Lipa) — P4:** if region-tailored marketing emails are wanted, add: "your city, state or postal code may be used to choose which marketing emails are relevant to you (e.g., regional offers)." |

| Upload consent (time and text version) | **Required** | Proof of your permission to use your uploads | — |

| Email/SMS marketing opt-ins (yes/no, time, text version) | Optional, **unticked by default** | — | Proof of your marketing consent; recorded only if you tick the box |

Contact details are stored separately for each wedding. They are never shown to other guests, never sent back to your browser after you submit, and not shown to the couple (DECISION: confirm). We don't sell them. If you opt out of marketing, we apply that to every wedding where you used the same email or number.

SMS terms (WeddingRecaps text messages)

Transactional texts: if you give your number, we may text you about your reel (for example "your reel is ready"). These are not marketing.
Marketing texts only with express written consent: the SMS marketing box is unticked by default. Ticking it means: *"Yes, send me recurring automated marketing text messages from WeddingRecaps at the phone number I entered. Consent is not a condition of any purchase or of uploading. Msg & data rates may apply. Message frequency varies. Reply STOP to opt out or HELP for help."* We store the yes/no, the time and the version of that text.
Opt out anytime: reply STOP (or QUIT, END, CANCEL, UNSUBSCRIBE, OPT OUT or REVOKE) to any text, or email hello@weddingrecaps.com. Replying STOP ends all automated texts to that number, including reel-ready texts; we'll still email your reel. After STOP you get one confirmation and no further texts. Reply HELP for help: we'll reply with our name, hello@weddingrecaps.com and how to opt out.
Carriers aren't liable for delayed or undelivered messages.
Not yet active: no texts are sent until a messaging provider and US carrier (10DLC) registration are in place. Counsel: review TCPA and state rules (e.g. Florida, Oklahoma) and quiet hours.

Opting out and deleting your contact details

Email marketing: use the unsubscribe link or the preferences page in any marketing email to stop some or all marketing emails, or email us. We process opt-outs within [10 business days or sooner].
SMS: reply STOP (or QUIT, END, CANCEL, UNSUBSCRIBE, OPT OUT or REVOKE), or email us.
To delete your email, phone, name, address and handles (and your uploads, if you want), email hello@weddingrecaps.com with the couple's names and the wedding date. We'll delete them within [30] days, except for a minimal record of the opt-out and consent kept as proof (counsel). *Implementation note: the self-serve opt-out and deletion path isn't built yet; until it is, requests are handled manually.*

4. How we use information

We use it to provide the service: storing uploads, editing reels, delivering reels by email and text, running the couple's gallery, preventing abuse (rate limiting and security), keeping records of consent, and following the law. We use sample or stock content, not guest uploads, in our own marketing unless we get separate written permission. We never use images of children in marketing.

Marketing. If you book WeddingRecaps or sign up on our website, we may email you planning tips, optional extras, review and referral requests and anniversary notes. Guests get marketing emails or texts only if they ticked the separate opt-in box. Every marketing email has an unsubscribe link and a preferences page where you can opt out of some or all marketing.

DECISION (Lipa) — P11: whether emails to guests who opted in may mention the couple whose wedding they attended (first names only, unless the couple opts out in their dashboard). Until decided, guest marketing doesn't mention couples.

5. Who sees or receives it

The couple for that wedding: all uploads, names and the gallery. They do not see guests' email, phone, address or handles. DECISION: confirm.
Service providers acting for us: cloud hosting and storage (Cloudflare), video hosting [Bunny/Mux], business email inbox (our email hosting provider); email delivery, marketing lists and email analytics (our email service provider); SMS delivery (our SMS provider), only once registered, payments [Stripe], and editors we contract with, under confidentiality terms.
Legal reasons: to comply with the law, protect rights and safety, or in a business transfer (with notice).

We don't sell personal information or share it for cross-context behavioral advertising.

6. Retention

| Data | Kept for |

|---|---|

| Raw guest uploads | 90 days after the wedding, then deleted (**DECISION**) |

| Edited reels and films | [12 months] after delivery (**DECISION**; longer storage may be offered). **DECISION (Lipa) — P8:** 12 months ends right around the first anniversary, when anniversary emails would go out. Options: extend to [13 months], or keep 12 and email the couple at least [30] days before deletion so they can download. Retention unchanged until decided |

| Guest contact details (email, phone, name, address, handles) and consent/opt-in records | As long as the related upload or reel exists; the consent record may be kept up to [3 years] as proof of permission (**DECISION**, ask counsel) |

| Marketing contacts (guests who opted in): email, first name, wedding/couple name and opt-in record | Until you unsubscribe or the related reel is deleted, whichever comes first [or: until you unsubscribe, or [N] months without opening our emails] (**DECISION, Lipa**) |

| Couple account and contact details | [N years] after the wedding, for service, records and (if you haven't unsubscribed) anniversary emails (**DECISION, Lipa**) |

| Usage events | [24 months], with no raw IP addresses |

| Backups | Purged within [30] days after deletion |

7. Your choices and rights

Deletion: guests can ask us to delete their uploads and contact details (email, phone, name, address and handles), and, if they opted in, remove them from our email/SMS providers' contact lists (we keep only the address or number on a do-not-contact list so we don't message them again), by writing to hello@weddingrecaps.com with the wedding name and the approximate upload time, or a description. We'll confirm with the couple where needed and delete within [30] days. Reels that already include your footage may need re-editing. DECISION: set a turnaround and decide whether to re-edit.
Depending on where you live (for example California, Colorado, Virginia, the EU or UK), you may have rights to access, correct, delete or port your data, or object to its use. Contact us and we'll respond within the time the law requires.
Unsubscribe: every marketing email has an unsubscribe link and a preferences page (opt-outs processed within [10 business days or sooner]); reply STOP to any text. See "Opting out" above.

8. Children

WeddingRecaps isn't directed to children under 13, and we don't knowingly collect personal information from them. Guests who upload must be [18 or older, or 13 or older with a parent's permission] (DECISION; also check GDPR's age 16). Minors may appear in wedding footage. The couple and the uploading guest are responsible for having permission from parents or guardians. Contact us to remove footage of a child.

9. Security

Uploads go over HTTPS to private storage separated by wedding. There are no public links to raw media, upload links are single-use and write-only, and access is limited and logged. No system is perfectly secure; we'll notify affected people as the law requires if a breach happens (including under New York's SHIELD Act).

10. International users

We're based in the United States and store data with US-based providers (possibly in other regions through their networks). DECISION/counsel: decide whether to serve EU and UK guests and add GDPR terms.

11. Changes

We'll post updates here with a new effective date, and give notice of material changes.

12. Contact

hello@weddingrecaps.com

Questions: hello@weddingrecaps.com