Legal

Privacy Policy

Last updated October 14, 2026

This Privacy Policy explains how PicPost collects, uses, and protects information when you visit picpost.app, buy PicPost for an event, or share photos at an event that uses PicPost. PicPost is operated by RAND Meridian, LLC, based in Phoenix, Arizona (“PicPost,” “we,” “us”).

1. Two kinds of information

Event content. When a host uses PicPost for a wedding or party, the photos, captions, and guest details shared at that event belong to the host’s event. We process that information on the host’s behalf to run the service. Our Data Processing Addendum applies to this processing.

Our own information. We are responsible for the information we collect to run our business — for example, host account details, purchase records, and messages you send us.

2. Information we collect

From hosts (people who buy PicPost)

  • Your name and email address, and the login details for your PicPost account.
  • Your event details: event name, dates, branding (such as a photo, logo, background, and colors), and settings.
  • Purchase information. Payments are handled by Stripe. We receive the email address you enter at checkout, what you bought, and the payment status. We do not receive or store your full card number.
  • Names and email addresses of people you invite to help manage your event.

From guests (people who share photos)

  • Your first name, so the host knows who shared each photo.
  • Your phone number, only if the host chooses to ask for it. If the host turns on text-message verification, we send a one-time code to that number.
  • The photos you share and any captions you add. When a photo is shared, your phone usually re-saves it in a way that removes hidden location and camera details. In some cases (for example, if your browser can’t re-save the image), the original file is uploaded as-is.
  • A random identifier stored in a cookie for that event, so your uploads stay linked to you on that device.

From everyone

  • Basic technical information our service providers receive when you connect — such as your IP address, browser type, and the pages you request — used for security, abuse prevention, and keeping the service running.
  • Anything you send us by email.

The picpost.app website does not use advertising or analytics tracking cookies. Our website fonts are loaded from Fontshare, which receives your IP address and browser information when a page loads.

3. How we use information

  • To provide PicPost: collecting photos, showing them on the event’s photo wall, and letting the host review and download them.
  • To keep inappropriate content off photo walls. Every shared photo is checked by an automated safety filter that looks for prohibited content. This check does not identify people or recognize faces, and we do not use your photos to train AI models.
  • To process purchases, create host accounts, and send service emails (such as your account link, event summaries, and receipts).
  • To prevent spam, fraud, and abuse, and to keep the service secure.
  • To answer your questions and provide support.
  • To comply with the law.

We do not sell personal information, we do not share it for targeted advertising, and we never use event photos for advertising.

4. Who can see what

  • The host and their event team can see every photo shared to their event, each guest’s first name, and the guest’s phone number if the host asked for it. They can download the photos and a list of uploads.
  • The photo wall shows approved photos and can be viewed by anyone who has the event’s wall link while the event is on.
  • Our service providers process information for us to run PicPost. They are listed on our Subprocessors page.
  • Legal reasons. We may disclose information if required by law, or to protect the rights, safety, or property of our users, the public, or PicPost.
  • Business transfers. If PicPost is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to this policy.

5. How long we keep information

  • Photos, captions, and guest details are available to the host for 10 days after the event ends so they can be downloaded. After that they are scheduled for deletion, and are deleted no later than 30 days after the event ends. Copies in backups are overwritten within 90 days.
  • Host account information is kept while the account is active, and deleted on request unless we need to keep it to meet legal obligations.
  • Purchase records are kept as long as needed for tax, accounting, and legal purposes.

6. Your choices and rights

You can ask us to access, correct, or delete your personal information, or ask questions about how we use it, by emailing [email protected]. Guests who want a photo removed from an event can ask the host, who can remove it at any time, or email us. Depending on where you live (for example, California or the European Union), you may have additional rights under local law, and you may complain to your local data protection authority. We will not treat you differently for exercising your rights.

When a request concerns event content, we may refer it to the host who controls that event and help them respond.

7. Security

We use industry-standard safeguards, including encrypted connections (HTTPS), encryption of stored data by our infrastructure providers, and access controls that limit who can see event content. No system is perfectly secure, but we work to protect your information and will notify affected users of a breach as required by law.

8. Children

PicPost is not directed to children under 13, and we do not knowingly collect personal information from them. Photos at family events may include children; hosts and guests are responsible for sharing those photos thoughtfully. If you believe a child under 13 has given us personal information, email [email protected] and we will delete it.

9. Where information is processed

PicPost is operated from the United States, and our service providers process information primarily in the United States. If you use PicPost from outside the US, your information will be transferred to the US.

10. Changes to this policy

We may update this policy from time to time. We’ll post the new version here and change the “Last updated” date. If changes are significant, we’ll provide additional notice, such as an email to hosts.

11. Contact us

RAND Meridian, LLC (PicPost) · Phoenix, Arizona · [email protected]