Privacy and image handling
This page explains how MyPortraitBooth uses, reviews, stores, delivers, displays, and deletes guest photos and finished portraits.
Last reviewed September 4, 2026
Who is responsible
MyPortraitBooth's founders are responsible for the personal information used to answer inquiries and deliver the event service. Privacy, access, correction, and deletion questions can be sent directly to events@myportraitbooth.com.
Booking inquiries
The inquiry form collects the name and email address you provide, event date, estimated guest count, venue or city, event type, likely service window, and any note you add. The form sends those details to the founders through Resend, our inquiry email provider, and Resend sends your confirmation email. We use the information to answer, quote, plan, and administer a possible booking. An inquiry does not subscribe you to marketing. Inquiry and booking correspondence may remain in our business email and event records for as long as needed to handle the request, booking, administrative follow-up, and applicable recordkeeping obligations.
Event participation
Portrait photography is part of the event. Guests choose whether to participate. A guest may decline before photography or ask us to remove applicable copies that remain under our control. Copies already printed, delivered, or downloaded may be outside our control.
Event information we use
For each participating group, we use the source photographs, exact headcount, selected portrait number and instructions, generated attempts, approved portrait, approval and print status, and any optional delivery email addresses. This information is used only to capture, create, privately review, reveal, approve, print, hand off, recover, and deliver that group's portrait, unless separate marketing permission is given.
Production and delivery providers
Supabase authenticates the founders and provides the private event database and capture storage that move guest photos from the event camera to the production computer and keep the generation record. The private server-side workflow sends the selected guest photos, portrait reference, headcount, and creation instructions to OpenAI for image editing. For guests who request digital delivery, the approved portrait is placed in a restricted Google Drive delivery location and a link to that group's approved portrait is sent through the founders' Gmail workflow. Lovable hosts the website, and Resend delivers booking inquiries and their confirmation emails. We do not send source photos or rejected attempts to the digital-delivery folder.
Minors
For events with children or teens, we follow the participation rules set by the host, venue, school, or organization.
Event production use
Our founders privately review each result before it is shown or printed. After guest approval, a small display copy may also appear on that event's guest monitor while the event is running. This on-site display is part of the event service and is not public marketing. The public portrait-browsing page does not collect a guest photograph, name, email address, or portrait request.
Website browsing data
Lovable, as the website host, may collect basic technical request information such as the page address, referring page, browser and device details, language, approximate location derived from an IP address, and temporary request or session identifiers. This is separate from portrait production and is used to deliver, operate, and secure the website.
Finished-picture email delivery
Each person pictured may provide an email address if they want the finished picture emailed to them. Every recipient receives a link to the same approved picture within 48 hours after the event. The link remains active for 14 days. We use the address only for picture delivery and related support unless the person separately chooses to receive marketing. Anyone who receives or forwards the link may be able to open it, so recipients should not share it publicly.
Marketing use
Digital delivery consent is separate from marketing consent. We use guest portraits in public marketing only with separate permission, and we do not add delivery addresses to a promotional mailing list.
Storage and retention
A prepared photo may be held temporarily in a device-local outbox until upload succeeds or the guest is cancelled. Guest photos then move through private Supabase capture storage to the private production computer used to create and print the portrait. After the physical print is checked and handed over, the source group photo and close-up photos are removed from the production workspace and private capture storage. The approved portrait and delivery record remain long enough to complete requested delivery. Google Drive links expire after 14 days, and remaining finished portraits, delivery records, or event exports under our control are deleted within 30 days unless the event agreement sets a shorter period. These deadlines apply to copies under MyPortraitBooth's control; copies already printed, delivered, downloaded, or held by a service provider under its own legal and security requirements may not be removable by us.
Access, correction, and deletion requests
Email events@myportraitbooth.com and include enough information to identify the inquiry or event, such as the event date. We will verify the request, explain what applicable information remains under our control, and correct or remove it as appropriate. If a pictured person withdraws before printing, we stop that person's display, delivery, and marketing use and remove applicable controlled copies. Copies already printed, delivered, downloaded, reposted, or held by another person may be outside our control.
Request limits
We may decline or adapt requests that are offensive, unsafe, invasive, or ask for an exact celebrity, character, logo, or protected image.
Questions? Email the founders at events@myportraitbooth.com. We handle privacy requests directly.