Privacy Policy

Harry McLaughlin Photography, LLC, doing business as Capture Club (“Capture Club,” “we,” “us”) operates a shared gallery service that lets event hosts collect photos and videos from their guests (the “Service”). This Privacy Policy explains what information we collect, how we use it, who we share it with, and the rights you have over your information. It applies to visitors to our websites, signed-in account holders, and guests who upload moments to an event.

If you do not agree with this policy, please do not use the Service. Questions can be directed to hello@captureclub.app.

1. The short version

• We collect the information you give us (email, event details, photos/videos) and a small amount we capture automatically (IP, device type, basic analytics).
• We use it to run the Service - authenticate you, host your gallery, process payments, send transactional email.
• We never sell your personal information.
• We share information only with the vendors we need to run the Service (listed in Section 6).
• You can export your data, delete your account, or ask us to remove specific uploads at any time - see Section 9.

2. Information we collect

2.1 Information you provide

• Account data - name, email address, profile photo (optional), and authentication credentials managed by our identity provider.
• Event data - couple or event name, date, venue, cover photo, custom URL, branding preferences.
• Guest uploads - photos, videos, optional guest name, moment tag (e.g. “Ceremony”), and any caption provided at upload.
• Payment data - when you purchase a Starter subscription ($19/mo or $190/yr), a Pro subscription ($49/mo or $490/yr), or a Lifetime Founding seat ($249), card information is collected and processed directly by our third-party payment processor. We receive only a transaction ID, last 4 digits, and status. We never see or store full card numbers or CVVs. A legacy per-event Couple tier ($9) was previously offered and is no longer sold; any unused credits from that tier remain redeemable.
• Support messages - anything you write in a support ticket, help form, or chat with our support bot.

2.2 Information collected automatically

• Log data - IP address, browser type, device type, operating system, referring page, timestamps of requests.
• Cookies and similar technologies - we use first-party cookies and localStorage to keep you signed in, remember your cookie preferences, preserve event drafts, and track which dashboard tour tips you have seen. We use our hosting provider's built-in analytics (aggregated page views, no per-user tracking) when you consent to “Accept all” in the cookie banner. We do not use third-party advertising trackers (no Google Ads, Meta Pixel, etc.).
• Media metadata - when a guest uploads a photo or video, we read standard file metadata (type, size, duration). EXIF GPS coordinates, if present, are stripped from preview copies and not surfaced in the gallery.

2.3 Information we do not collect

We do not collect government-issued IDs, biometric identifiers, social security numbers, precise geolocation, or data about your other online activity off Capture Club.

3. How we use your information

• Deliver the Service - create your account, host your gallery, process uploads, deliver downloads, render live streams.
• Process payments - charge your card (via our payment processor), apply referral credits, send receipts.
• Send transactional email - password resets, ticket confirmations, subscription renewals, Pro welcome messages (via our email provider).
• Provide support - our optional in-app chat uses a third-party AI provider to answer common questions; messages you send to the bot are processed by that provider under their Enterprise API terms and are not used to train their models.
• Improve the product - aggregated usage counts, error logs, and feature telemetry. Never combined with personal identifiers for marketing.
• Security and fraud prevention - detect abuse, enforce our Terms, respond to legal process.
• Legal compliance - respond to valid subpoenas, court orders, and comply with applicable law.

4. Legal bases for processing (GDPR / UK GDPR)

If you are in the European Economic Area, the United Kingdom, or another jurisdiction with similar laws, we process your information under these bases:

• Contract - to deliver the Service you signed up for (hosting your gallery, processing uploads).
• Legitimate interests - to improve the product, secure our infrastructure, and provide support, in ways that do not override your rights.
• Consent - for optional analytics cookies (via the banner) and marketing email, which you can withdraw at any time.
• Legal obligation - to respond to valid legal requests and meet tax and accounting requirements.

5. Photos, videos, and guest consent

When you upload a photo or video as an event guest, the host who owns the event can view, download, and share that content within the scope of the event. By uploading, you represent that you have the right to share the content and consent to its use for the event.

Event hosts are the data controllers of their event's uploads; Capture Club is a data processor acting on the host's behalf. If you are a guest and want an upload removed, first ask the event host; if that is not possible, email hello@captureclub.app and we will remove it within 7 days.

Hosts are responsible for informing their guests that the gallery exists and for displaying appropriate notice at the event. We provide a default signage kit inside the host dashboard.

6. Third-party processors

We share the minimum data necessary with third-party processors, each of whom is contractually bound to protect it. A current list is available below.

We do not sell or rent personal information to anyone. We do not share personal information for cross-context behavioral advertising. “Do Not Track” browser signals are honored as a request to opt out of any non-essential analytics.

7. International transfers

Capture Club is operated from the United States. Our processors operate in the United States and other regions. If you access the Service from the EEA, UK, or Switzerland, your data is transferred to the U.S. under Standard Contractual Clauses with each processor, and additional safeguards where required. EU-U.S. Data Privacy Framework participation is maintained by our sub-processors where applicable.

8. Data retention

• Account data - retained while your account is active, plus 30 days after deletion for backup consistency, then purged.
• Free-tier galleries - retained for 60 days after the event date, then archived.
• Starter-tier galleries - retained while your subscription is active.
• Couple-tier galleries - retained for 12 months from purchase, then archived. Extendable on request.
• Pro-tier and Founding galleries - retained while your subscription or membership is active.
• Support tickets - retained for 24 months for quality and legal purposes, then deleted.
• Payment records - retained for 7 years to satisfy tax and accounting requirements.

9. Your rights

Depending on where you live, you may have the right to:

• Access - request a copy of the personal information we hold about you.
• Correct - update inaccurate information.
• Delete - request deletion of your account and associated personal data.
• Export - receive your data in a portable format (JSON + ZIP of your uploads).
• Object - object to processing based on legitimate interests, or withdraw consent for optional analytics.
• Non-discrimination - exercise these rights without being denied service or charged a different price.
• Authorized agent - California residents may designate an agent to submit requests on their behalf.
• Appeal - if we deny a request, you may appeal by replying to our decision email within 45 days.

To exercise a right, email hello@captureclub.app from the address on your account. We verify identity before fulfilling any request and respond within 30 days (45 days for California requests, extendable by 45 days with notice).

10. Children's privacy

Capture Club is not directed to children under 16. We do not knowingly collect personal information from children under 16. Event guests who upload content must be at least 16 years old (or the minimum digital-consent age in their jurisdiction). If you believe a child has uploaded to the Service without parental consent, contact hello@captureclub.app and we will remove it promptly.

11. Security

We protect your data with TLS in transit, encryption at rest (AES-256) on our storage providers, industry-standard password hashing (Argon2) managed by our identity provider, role-based access control for internal tooling, and audit logging. No system is perfectly secure. If we become aware of a breach affecting your personal information, we will notify you without undue delay consistent with applicable law.

12. California residents (CCPA / CPRA)

We treat the rights described in Section 9 as fully applicable to California residents. In the past 12 months we have collected the categories of information described in Section 2 (identifiers, commercial information, internet activity, audio/visual information, inferences drawn from any of the above). We have not sold or shared personal information for cross-context behavioral advertising. We do not use sensitive personal information beyond what is necessary to provide the Service.

13. Do Not Track

We honor browser DNT signals for optional analytics. Our cookie banner defaults to “Essential only” if DNT is on. Essential cookies required for sign-in, uploads, and payments cannot be disabled because the Service cannot function without them.

14. Changes to this policy

We will post any material changes to this page and update the “Last updated” date. Substantial changes will be notified by email to account holders 30 days before taking effect.

15. Contact

Harry McLaughlin Photography, LLC (DBA Capture Club)
Privacy requests and data rights: hello@captureclub.app (subject line: “Privacy Request”)
General support: captureclub.app/support
EU/UK representative: available on request.