Privacy Policy

Vesprel (“Vesprel,” “we,” “us”) is a tool that lets wedding photographers collect photos taken by guests. This policy explains what we collect, how we use it, and the choices you have. Questions? Email catpanetta@gmail.com.

Who this covers

Two kinds of people use Vesprel: photographers, who create an account and set up events, and guests, who take and upload photos at an event. We handle a little information about each.

What we collect from photographers

When you create a Vesprel account we store your email address and a securely hashed version of your password (we never store the password itself). For each event you create, we store the details you enter: couple names, date, a guest link, an optional hashtag and tagline, an accent color, and a hashed gallery password.

Photos and event media

Photos and videos uploaded by guests are stored in the destination the photographer chooses for that event — either Vesprel’s default media storage or a storage account the photographer connects (such as their own Google Drive). Guests may optionally enter a name so the couple knows who to thank; that name is stored alongside the photo. Uploaded media is private to the photographer and the couple, accessible only with the event’s gallery password.

Google user data and the Limited Use requirements

If you connect a Google Drive account, Vesprel requests only the narrow drive.file permission, which lets the app create and manage only the files it creates — it cannot see or touch any of your other Drive files. We use this access solely to create a per-event folder and upload that event’s photos into it, and to list and display those photos back to you in the private gallery. We store an encrypted Google refresh token so uploads can continue during your event; it is encrypted at rest and never shared.

Vesprel’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, and we do not sell it or transfer it to others except as needed to provide the service or as required by law.

Service providers we use

Vesprel runs on infrastructure from Amazon Web Services (hosting and database). Photos and videos are stored in the storage account the photographer connects to each event — their own Google Drive, Dropbox, or Amazon S3 — and that provider processes the media on the photographer’s behalf. These providers process data as needed to run the service.

How we protect data

Passwords are hashed, connected-storage credentials are encrypted at rest, and galleries are protected by per-event passwords. No method of storage is perfectly secure, but we take reasonable measures to safeguard your information.

Retention and deletion

We keep account, event, and media data for as long as your account or event is active. You can ask us to delete your account, an event, or a connected-storage authorization at any time by emailing catpanetta@gmail.com. You can also revoke Vesprel’s access to your Google account at any time from your Google account permissions.

Changes

We may update this policy as the service evolves. Material changes will be reflected by the date at the top of this page.