Privacy Policy
Last updated October 6, 2026
This policy explains what BoothKits ("we", "us") collects when you use BoothKits Booth, and when your guests use a booth run on it. We never sell personal information.
Operators (our customers)
- Account details: your email, business name, license key and subscription status.
- Payments: handled by Stripe. We don't see or store full card numbers.
- Booth information: device name, app version and basic status (for example, whether a booth is online), so the dashboard and updates work.
- Usage counts: numbers of sessions, prints and shares, for your reports.
Guests at your events
When a booth is connected to the cloud we store, on behalf of the operator running the event:
- Photos, GIFs and videos taken at the booth, and AI versions guests ask for.
- Contact details a guest chooses to enter (name, email or phone) and answers to any survey the operator sets up.
- A record that a photo was shared, and where it was sent.
For guest data, the operator decides what is collected and how it's used, and we process it for them. Questions about a specific event should go to the business that ran the booth.
How we use information
- To run the Service: show galleries, send photos by email, create AI portraits, sync events and deliver updates.
- To manage licenses, billing and support.
- To keep the Service secure and fix problems.
Service providers
We use trusted providers to run the Service, and they only process data for us: Supabase (database and file storage), Netlify (website hosting), Stripe (payments), Resend (email delivery) and OpenAI (AI portraits, only for photos a guest chooses to transform).
Public galleries
Event galleries and share pages can be opened by anyone who has the link or QR code. Operators can hide photos or galleries from the dashboard.
How long we keep data
We keep event photos and guest details while the operator's account is active, or until the operator deletes or hides them. After an account is closed, its data is deleted within a reasonable period, except where the law requires us to keep it.
Your choices and rights
You can ask us to access, correct or delete your personal information by emailing support@boothkits.app. Guests can also contact the operator who ran their event. Depending on where you live, you may have extra rights under laws such as the GDPR or CCPA.
Children
The Service is for businesses and isn't directed at children. Operators should get a parent's or guardian's consent before collecting a child's contact details.
Security
Data is sent over encrypted connections, and access to stored data is restricted. No system is perfectly secure, so please keep your license key private.
Changes
We may update this policy, and we'll change the date above when we do.