Privacy Policy

Contact, Account, and Request Information

• Name, email address, and phone number submitted for an account, booking, Dispatch request, gallery verification, or support inquiry
• Creator profile information such as display name, profile photo, bio, service area, availability, portfolio, and verification information
• Payment information processed securely through Stripe
• Creator verification documents (for creator accounts)
• Booking and Dispatch details, including service, destination, schedule, request notes, visual descriptions, cancellation reason, legal acceptance, contracts, releases, and signatures

Usage Information

• U-Code access patterns and gallery interactions
• Device and network information such as browser or app type, operating system, IP address, installation identifier, request timestamps, and security logs
• Precise or approximate location, destination, route, and trip-status data when you use location-based features or submit it for a Dispatch request
• Aggregate, non-account-linked Story call-to-action interactions used to measure feature use
• Optional product analytics data through PostHog when you allow analytics cookies or similar technologies

Content and Media

• Photos, videos, and media uploaded by Creators
• Optional client profile or reference photos submitted with a request
• Gallery metadata and U-Code assignments
• Reviews, Stories, reports, messages, support requests, and other communications or user-submitted content
• When Smart Photo Search is enabled for an eligible gallery, temporary selfie images, face-match results, and related consent/audit metadata used to help clients find their photos

We use your personal information for the following purposes:

• Service Delivery: To provide discovery, booking, Dispatch, payment, tracking, support, and U-Code gallery access
• Account Management: To create and maintain your account, verify your identity
• Payment Processing: To facilitate secure transactions through Stripe
• Communication: To send service updates and support by email and, when separately authorized, SMS
• Security: To detect fraud, abuse, and maintain platform safety
• Improvement: To analyze usage patterns and enhance our services
• Legal Compliance: To comply with applicable laws and regulations

Smart Photo Search is an optional feature that may use face matching technology to help a client find photos of themselves in an eligible gallery. This feature is disabled by default and is available only for galleries that meet our current eligibility rules.

Eligibility Controls

• Creators must confirm the gallery is adult-only before enabling Smart Photo Search
• Creators must select a specific eligible event type and U.S. event state
• Smart Photo Search is blocked for minors, K-12/school, youth, and restricted event types or states
• If eligibility information is missing or unknown, the feature remains restricted

Consent, Processing, and Retention

• Clients must provide consent before submitting a selfie for Smart Photo Search
• Selfies are used to run the requested search and are deleted after processing
• Face-match indexes are maintained only for the applicable gallery and may be deleted when the feature is disabled or after the configured retention period
• We maintain audit records for compliance, troubleshooting, and abuse prevention, including consent status, feature status, eligibility status, and timestamps

Smart Photo Search may involve biometric or sensitive personal information under some laws. You may contact privacy@usermoment.com to ask questions or request deletion of information associated with this feature.

Supplying a phone number does not by itself enroll an accountless client in SMS updates. We send client SMS for a request only after a separate affirmative opt-in or another documented request. SMS consent is optional and is not a condition of purchase. Creators may separately enable operational notifications for their accounts.

Types of SMS Messages

• Booking Confirmations: Session confirmations and scheduling updates
• Account Notifications: Security alerts and important account changes
• Customer Support: Responses to your support inquiries
• Payment Updates: Transaction confirmations and payment-related notices

SMS Data Usage

• Phone Number Storage: We protect phone numbers through access controls and the security safeguards described below
• Message Logs: We may retain SMS delivery logs for troubleshooting and compliance
• Third-Party Services: SMS messages are sent through Twilio, a trusted third-party service
• No Marketing: We do not send promotional or marketing SMS messages without separate consent
• Data Protection: We do not share, sell, or disclose mobile numbers or SMS consent data with third parties or affiliates for marketing purposes

We do not sell your personal information. We may share your information in these limited circumstances:

Creators and Clients

We disclose the information reasonably needed to fulfill a booking or Dispatch request to the selected Creator, such as client name, service details, destination, schedule, visual description, optional reference photo, and operational status. We disclose Creator profile and service information to clients. We do not provide an accountless client's phone number to a Creator for marketing.

Service Providers

• Amazon Web Services: For primary media storage, content delivery, and, only when enabled and consented to, Smart Photo Search processing
• Firebase (Google): For authentication, databases, real-time features, and configured storage fallback
• Stripe: For secure payment processing
• Twilio: For SMS communications and notifications
• PostHog: For optional product analytics and service improvement
• Google Maps: For location-based features
• Vercel and email delivery providers: For application hosting, request processing, and transactional email

Legal Requirements

• When required by law, court order, or government request
• To protect our rights, property, or safety, or that of our users
• In connection with legal proceedings or investigations

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, with the same privacy protections.

We use administrative, technical, and organizational safeguards designed to protect personal information:

• Encryption: We use encrypted transport and rely on provider-supported encryption at rest where configured
• Access Controls: Strict access limitations to personal data
• Firebase Security: Leveraging Google's enterprise-grade security infrastructure
• Stripe Security: PCI DSS compliant payment processing
• Assessment: Security testing and review appropriate to the affected systems

Where We Store Data

• Primary media is stored and delivered through Amazon Web Services, including S3 and CloudFront
• Account, marketplace, booking, Dispatch, legal-acceptance, and operational data may be stored in Firebase/Google Cloud services
• Firebase Storage may be used as a configured fallback for certain media workflows
• Payment data is processed and stored by Stripe
• Service providers may process data in the United States and other locations where they operate, subject to their contractual and legal safeguards

How Long We Keep Data

• Account and Guest Request Data: Retained while needed to provide the Service, resolve disputes, prevent fraud, and satisfy legal obligations
• Gallery and User Content: Retained while maintained by the Creator or needed to provide purchased or contracted access, subject to takedown, deletion, backup, and legal-retention requirements
• Precise Location: Retained only as needed for the active request, safety, payment/cancellation decisions, fraud prevention, disputes, and required records; it is not intended as continuous client location history
• Smart Photo Search Data: Temporary selfie images are deleted after processing; face-match indexes are deleted when disabled or after the retention period presented for the feature; limited audit records may be retained for compliance and security
• Transaction and Legal Records: Retained for the period needed for tax, accounting, contract, payment, chargeback, and legal requirements, which may be up to seven years
• Analytics: Retained according to configured analytics settings and provider controls; server analytics are disabled unless expressly configured with pseudonymous identifiers

You have the following rights regarding your personal information:

Access and Portability

• Request a copy of your personal data
• Download your photos and gallery data
• Access your account information and settings, if you have an account

Correction and Updates

• Update profile information through available account controls, if you have an account
• Correct inaccurate personal data
• Modify your communication preferences

Deletion

• Request deletion of an account or accountless booking, Dispatch, gallery-access, or support data, subject to identity verification and lawful retention
• Request removal of specific galleries or photos
• Opt out of marketing communications

How We Use Cookies

• Essential Cookies: Required for basic site functionality and security
• Analytics Cookies: Optional product analytics, such as PostHog, to understand usage patterns when you allow them
• Preference Cookies: To remember your settings and preferences

Optional Analytics

We may use PostHog and similar product analytics tools to understand how users interact with our platform. This helps us improve our services, reliability, and user experience. Optional analytics are controlled by your cookie preferences.

Managing Cookies

You can control cookies through your browser settings. Note that disabling certain cookies may affect the functionality of our platform.

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons.

• We will notify you of significant changes via email or platform notification
• The "Last Updated" date at the top will reflect when changes were made
• Continued use of our services constitutes acceptance of the updated policy

If you have questions about this Privacy Policy or how we handle your personal information, please contact us: