Privacy Policy
Guest Moments by StanlyPhoto
Effective: Upon publication on the Guest Moments website.
Last updated: 1 November 2026.
1. Who we are and what this policy covers
Guest Moments by StanlyPhoto (“Guest Moments,” “we,” “us,” or “our”) is an online service for event organizers to create galleries where invited guests can contribute photographs, videos, and messages. This Privacy Policy explains how we collect, use, store, disclose, and protect personal information when people use our website, accounts, event pages, galleries, and support channels.
The service is operated by Stanislav Nemashkalo, an individual carrying on business activity in Mexico (persona física con actividad empresarial), based in Cancún, Mexico. Contact: moments@stanlyphoto.com.
This policy applies to account holders, event organizers, guests who visit or contribute to a gallery, and people who contact us. An organizer may also have responsibilities for informing guests about the event gallery and choosing its access settings.
2. Information we may collect
Depending on how you use the service, we may process:
- Account and sign-in information: name, email address, account identifier, authentication credentials or authentication status, and profile information returned by a sign-in provider. When Google Sign-In is used, the exact information depends on the permissions requested and the data the application actually receives.
- Event and gallery information: event name, date, settings, organizer contact details, gallery identifiers, access settings, and access-code or link-related data.
- Contributions: photographs, videos, captions, messages, and associated upload details or file metadata that you or an organizer submit. Media may include personal information about people shown or heard in it.
- Service and security information: device/browser information, IP address, request and diagnostic logs, timestamps, and information needed to protect accounts, galleries, and the service. The exact information depends on the deployed configuration.
- Communications and support: the contents and contact details of messages sent to us and records needed to answer them.
- Transaction information: if a paid service is offered, payment status, amount, currency, receipt or transaction references, and related customer-support records may be processed. Payment card or bank credentials are handled by the checkout/payment provider where applicable; we do not intend to collect full payment credentials directly. The payment provider and fields must be confirmed in the live product before publication.
We do not intentionally request sensitive personal data. Please do not upload highly sensitive information. Event photos or videos may nevertheless incidentally reveal sensitive details about people; organizers and contributors should consider that before uploading or sharing them.
3. How we use information
We use personal information only as needed to:
- create and administer accounts, events, galleries, and access settings;
- allow organizers and guests to upload, view, organize, and manually download event media and messages;
- authenticate users, including through Google Sign-In where enabled;
- send service-related communications, security notices, and any reminders that the product actually supports;
- process and support transactions, refunds, and customer inquiries where applicable;
- maintain, secure, troubleshoot, and improve the service, including preventing abuse and complying with legal obligations; and
- respond to valid legal requests and protect rights, safety, and property.
We do not use private event photos or videos for our marketing, advertising, portfolio, or promotional materials. We do not use users’ private media to train artificial-intelligence or machine-learning models. We do not sell personal information.
We do not provide a Google Drive export or automatic Google Drive backup. Google Sign-In, if enabled, is used for authentication only and does not itself authorize access to a user’s Google Drive.
4. Gallery access and sharing
Gallery access settings are selected by the organizer from the options actually available in the product. A gallery may be configured for broader/public access or restricted access, which may use a link, QR code, access code, account, or other controls supported by the current version. A QR code may simply encode a gallery link. Anyone who receives a public link, QR code, or access code may be able to view or contribute according to the gallery settings. Organizers are responsible for sharing access details only with people they intend to invite and for reviewing the selected settings.
No online access control can guarantee that a person who can view content will not copy, save, photograph, or further share it. A “private” setting limits access through the controls provided; it cannot control recipients’ later actions or copies outside Guest Moments.
5. Service providers and disclosures
We may use service providers to host and operate the service, store and deliver content, send email, authenticate accounts, process payments if enabled, and protect the service. The known providers include Cloudflare for hosting/infrastructure and Resend for email, and Google for Google Sign-In where enabled. Their exact roles, data flows, locations, and any additional providers must be checked against the deployed application before publication.
Service providers may process information on our behalf under their applicable terms and privacy documentation. We may also disclose information when required by law or a valid legal process, to protect people or the service, to enforce our terms, or in connection with a business transfer subject to applicable law. We do not disclose personal information to unrelated third parties for their own advertising.
Some providers may process information in countries outside Mexico. International processing and any legally required notice or consent will be handled in accordance with applicable law. The operator should verify the actual provider locations, transfer arrangements, and legal basis before publication.
6. Retention and deletion
Event media and gallery content are intended to remain available for 90 calendar days after the event date, after which the gallery is scheduled to expire and its media is scheduled for deletion from active service storage. Organizers and contributors should manually download any media they wish to keep before the gallery expires. Guest Moments does not promise automatic transfer to Google Drive or another personal storage account.
Deletion from active systems may not immediately remove copies held in backups or records that must be retained for legal, security, accounting, or dispute-resolution purposes; those copies will be restricted and removed according to the applicable retention schedule. Account, transaction, support, security, and legal records may be retained as long as reasonably necessary for their stated purposes or required by law.
We send download reminders approximately 30, 60, 83, and 89 days after the event. An organizer-specific extension or deletion hold may apply. Existing overdue galleries receive a transition grace period; deletion is retried if necessary and follows a final warning sent at least 24 hours earlier.
7. Security
We use administrative, technical, and organizational safeguards designed to protect information against unauthorized access, loss, alteration, or disclosure. No internet service or storage method can be guaranteed completely secure. If a security incident materially affects individuals’ rights, we will provide notices required by applicable law.
8. Your privacy choices and rights
You may contact us to request access to, correction of, cancellation of, or objection to the processing of your personal information, and to ask questions about its use. Some information may need to be retained where required by law or necessary to complete a transaction, resolve a dispute, protect security, or exercise or defend legal rights. A request concerning media that depicts you may require enough detail to locate the content and verify your identity or authority, while respecting other people’s rights.
To make a privacy request, email moments@stanlyphoto.com with the subject “Privacy Request,” identify the relevant account, event, gallery, or information, describe the request, and provide reasonable evidence that you are the data subject or authorized representative. Do not send passwords or unnecessary sensitive information. We may request further information needed to verify a request. We will respond within the time limits required by applicable law.
For users in Mexico, the rights of access, rectification, cancellation, and opposition (derechos ARCO) and other applicable rights may be exercised through the contact above. You may also limit optional communications by using the unsubscribe method in a message, where available, or contacting us. Essential account, security, transaction, and service messages may still be sent.
9. Children and event guests
Guest Moments is not designed for children to create accounts independently. An organizer must ensure that invitations and collection of media involving minors are handled with appropriate authority, notices, and consents under applicable law. Do not use the service to upload content unlawfully or in violation of another person’s privacy, publicity, or intellectual-property rights.
10. Changes to this policy
We may update this policy to reflect changes in the service or applicable requirements. We will post the current version on the website and update the “Last updated” date. If a change materially affects how information is used, we will provide any notice or choice required by law.
11. Contact
Stanislav Nemashkalo — Guest Moments by StanlyPhoto
Cancún, México
Email: moments@stanlyphoto.com