Privacy Policy
Effective date: 7 June 2026
Last updated: 7 June 2026
This Privacy Policy explains how Say I Do Wedding Planning Pty Ltd, trading as PicsPics Party ("PicsPics Party", "we", "us", "our"), collects, uses, stores and shares personal information when you use https://picspics.party and any related apps or services (the Service).
PicsPics Party is a photo-sharing service. We don't run wedding websites, manage guest lists, collect RSVPs, ship printed goods or maintain registries — so we don't collect that kind of information either.
If anything here is unclear, email us at privacy@picspics.party and we'll explain.
1. The short version
- The Host (the person who creates an Event) gives us their account details. Guests upload photos and don't need an account.
- We use the information you give us to run the Service — store your photos, show the Event to the right people, keep your account working, contact you about the Service.
- We don't sell your data. We don't share your photos with advertisers. We don't use your photos to train AI models, and we don't let anyone else do that either.
- Events are private by default. They're not indexed by search engines and they're not visible to anyone without the QR code or link.
- You can delete your photos, your Event or your whole account at any time. We action erasure requests within 10 business days.
The rest of this policy is the detail.
2. Who this policy covers
Hosts — people who create an account and an Event. We collect the information you give us when you sign up and use the Service.
Guests — people who scan a QR code or open an Event link to view or upload photos. Guests don't need an account. We collect very little about Guests — typically just the photos and any optional caption or name they choose to add.
People who appear in photos — wedding guests, family, friends, the person taking the photo's plus-one. They may not have uploaded anything themselves, but their image is in the Event. Section 6 covers how we handle this.
3. Information we collect
From Hosts
- Account details — name, email address, password (stored hashed), and any optional details you add to your account profile.
- Event details — Event name, event date if you provide one, cover image, privacy and moderation settings.
- Billing details (if and when paid plans are available) — name, billing address, and payment method details, processed by our payment provider. We don't store full card numbers on our servers.
- Communications — emails or support messages you send us.
From Guests
- Uploaded Content — photos and videos you choose to upload, plus any caption, name or other text you add.
- Event access — the fact that you opened a particular Event link or QR code, so we can show you the right Event.
From everyone using the Service
- Device and technical information — IP address, browser type and version, device type, operating system, screen size, referring URL, language, time zone.
- Usage information — pages you visit on the Service, features you interact with, time spent, error logs. We use this to keep the Service reliable and to improve it.
- Cookies and similar technologies — see section 9.
We do not run facial recognition, biometric identification, automated face-grouping or face-search on uploaded photos. If we ever introduce features that would, we'll update this policy first and ask for explicit opt-in.
4. How we use information
We use information to:
- create and manage Host accounts;
- store and display the Content in your Event to the people you've authorised to see it;
- process payments and keep billing records (when paid plans exist);
- send you service messages (security, account, billing, important changes to the Service);
- respond to your support requests;
- monitor, debug and improve the Service, including investigating errors and abuse;
- send you marketing emails about PicsPics Party's own features and offers, where you've opted in or where the law otherwise allows — you can unsubscribe from any marketing email at any time using the link in the email; and
- comply with our legal obligations and enforce our Terms.
We do not:
- sell or rent your personal information to anyone;
- share your photos with advertisers or third-party marketers;
- use your photos or other Content to train AI or machine-learning models, ours or anyone else's;
- make your Events searchable from the public web; or
- read, analyse or share the contents of your photos for any purpose other than running the Service (e.g. format conversion, thumbnails, backups, abuse detection).
5. Legal bases (UK / EU users)
If UK GDPR or EU GDPR applies to you, we rely on these legal bases:
- Contract — to provide the Service to Hosts who've signed up, and to Guests who upload to an Event.
- Legitimate interests — to keep the Service running, secure and free from abuse; to communicate with users about the Service; to develop and improve features. We balance these interests against your rights and you can object — see section 10.
- Consent — for any optional marketing emails, optional cookies and any future features that require it (such as anything involving biometric processing — if we ever introduce them).
- Legal obligation — where we have to retain or disclose information to comply with the law.
6. Photos of people who didn't upload them
A wedding photo almost always contains people other than the person who uploaded it — other Guests, family, kids, vendors, passers-by. We take this seriously.
Host responsibility. Hosts must make their Guests aware that photos taken at the event may be uploaded to a shared Event, that those photos will be stored on our servers, and that other people with access to the Event will see them. A line on a table card, in a welcome speech, or on the QR sign is usually enough.
Guest responsibility. When a Guest uploads, they confirm they've taken the photo or have the right to share it.
If you appear in a photo and want it removed, contact the Host of the Event in the first instance — they can delete it themselves and it disappears straight away. If you can't reach the Host, or the photo isn't being removed, email us at privacy@picspics.party with enough detail to identify the photo (which Event, roughly when it was uploaded, what's in it). We'll act within a reasonable time and, in clear-cut cases involving identifiable individuals, we'll remove or restrict access to the photo while we look into it.
Children. Hosts are responsible for ensuring any necessary parental consent for photos of children at their event. A request from a parent or guardian to remove a photo of their child will be actioned quickly and without question.
7. Sharing your information
We share personal information only in these situations:
- With the people you choose to share an Event with. Photos are visible to the Host and (depending on Event settings) to other Guests with the QR code or link. That's the point of the Service.
- With our service providers — companies that help us run the Service, such as cloud hosting and storage, payment processing, email delivery, error monitoring and customer support tools. They process your information on our behalf, under contract, and only for the purposes we tell them to.
- If required by law — we may disclose information where we're legally compelled to (court order, valid legal process, regulator request) or where we believe in good faith that disclosure is necessary to protect someone's safety, prevent fraud or enforce our Terms.
- In a business transaction — if PicsPics Party is sold, merged or reorganised, your information may transfer to the new owner. We'll notify you by email and explain your options before that happens.
We don't sell your information and we don't share it with advertisers.
8. Where we store your information and international transfers
Our primary data storage is in Singapore (AWS Singapore). Some of our service providers (for example, email delivery, error monitoring or customer support) are based outside Australia, which means your personal information may be transferred to and processed in other countries.
When we transfer personal information across borders, we use providers that offer appropriate protection — for example, providers covered by the EU/UK Standard Contractual Clauses, the UK International Data Transfer Addendum, or equivalent safeguards. Where Australian Privacy Principle 8 applies, we take reasonable steps to ensure overseas recipients handle your information consistently with the Australian Privacy Principles.
9. Cookies and similar technologies
We use a small number of cookies and similar technologies:
- Strictly necessary — to keep you logged in, remember your Event, keep the Service secure. These can't be turned off without breaking the Service.
- Functional — to remember preferences (e.g. language, last Event visited).
- Analytics — to understand how the Service is used in aggregate so we can improve it. We use a privacy-respecting analytics provider and don't use these cookies to build advertising profiles.
We don't run third-party advertising cookies or sell data to ad networks. You can control cookies through your browser settings; disabling strictly necessary cookies may stop parts of the Service working.
10. Your rights
Depending on where you live, you have some or all of these rights:
- Access — ask for a copy of the personal information we hold about you.
- Correction — ask us to fix information that's wrong or out of date.
- Erasure — ask us to delete your personal information (see section 12).
- Restriction — ask us to pause processing while we look into something.
- Objection — object to processing we do on the basis of legitimate interests, including any direct marketing.
- Portability — get a copy of the personal information you provided to us, in a portable format.
- Withdraw consent — where we rely on consent, you can withdraw it at any time without affecting earlier processing.
- Complain — to your local data protection authority. In Australia that's the Office of the Australian Information Commissioner (oaic.gov.au); in the UK it's the Information Commissioner's Office (ico.org.uk). We'd appreciate the chance to fix things first — email privacy@picspics.party.
To exercise any of these rights, email privacy@picspics.party. We'll respond within 30 days (or as soon as practicable, and we'll tell you if we need longer). There's no charge unless your request is manifestly unfounded or excessive.
To opt out of marketing emails, use the unsubscribe link in any marketing email, or email privacy@picspics.party.
11. Retention — how long we keep things
| What | How long |
|---|---|
| Host account details | While your account is open, plus up to 90 days after closure for backup expiry and dispute resolution. |
| Event Content (photos, videos, captions) | For the retention period stated on your plan when the Event was created. For free-tier Events, the period stated on our pricing page at the time. |
| Billing records | As long as required by tax and accounting law (typically 7 years in Australia). |
| Support communications | Up to 3 years after the matter is closed. |
| Technical logs (IP, errors) | Typically 30–90 days, longer where needed for security investigations. |
| Marketing preferences | Until you change them or close your account. |
If your account is inactive for an extended period, or your plan expires and isn't renewed, we may delete Events and Content after giving you reasonable notice by email.
We strongly recommend Hosts download a backup of their Event before any retention period ends. Once Content is deleted from our active systems it's removed from backups within a reasonable period and isn't recoverable.
12. Deleting your account and data
You can delete individual photos and your Event at any time from inside the Service. You can close your Host account from your account settings or by emailing privacy@picspics.party.
When you request deletion of your account or specific personal information, we'll action it within 10 business days. After that point the data is removed from active systems, and from backups within a reasonable subsequent period. Deletion is permanent and can't be undone.
Some information may be retained for the periods set out in section 11 where we're legally required to do so (for example, billing records) or to defend a legal claim.
13. Security
We use reasonable and industry-standard measures to protect personal information — encrypted connections (HTTPS/TLS) for data in transit, encryption at rest for stored Content, access controls, regular security reviews, and reputable infrastructure providers.
No service can promise perfect security. If something does go wrong and your personal information is compromised, we'll notify affected users and the relevant regulator(s) in line with our legal obligations under the Australian Notifiable Data Breaches scheme and UK/EU GDPR.
You're responsible for keeping your password safe and not sharing your account login with others.
14. Children
The Service is not directed at children under 13, and Host accounts are restricted to adults (18+).
Photos of children may appear in an Event because they were present at the event. Section 6 covers our approach to those photos and to requests from parents and guardians.
15. Third-party links
The Service may link to third-party sites or services (for example, payment processors, or sites you choose to download or share an Event to). Their privacy practices are governed by their own policies, which we don't control. Please read them.
16. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we'll post the revised version here and update the "Effective date" above. If a change meaningfully reduces your rights or expands how we use your information, we'll let Hosts know by email or in-product notice before it takes effect.
17. Contact
Privacy questions, requests or complaints — email us at privacy@picspics.party.
PicsPics Party is operated by Say I Do Wedding Planning Pty Ltd, Australia.