Last updated: June 2026
Toastbox (“we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our website and services at toast-box.com (the “Service”). This policy applies to event organizers (“Users”) and event attendees (“Guests”) who interact with the Service.
Account information: name, email address, and wedding/event date when you request access or create an account. Event content: video recordings and photos uploaded by you or your guests through the Service. Branding assets: logos, color preferences, and event customization settings. Payment information: processed securely through Stripe; we do not store credit card numbers.
Guest name (self-provided, used to identify recordings and photos). Video recordings and photos captured through the Service. Device camera access is requested solely for recording and photo capture.
Browser type and version. Device type. Pages visited and time spent on the Service. We do not use third-party tracking cookies or advertising pixels. We do not sell or share your data with advertisers.
We use your information to: provide, maintain, and improve the Service; create and manage your account and event booth; store and deliver video recordings and photos; process payments through Stripe; respond to your requests, questions, and support inquiries; send transactional emails related to your account (e.g., account setup, service updates); comply with legal obligations.
We do not use your information for advertising, profiling, or any purpose unrelated to delivering the Service.
We do not sell your personal information. We may share your information with: service providers who help us operate the Service (Firebase/Google Cloud for hosting and storage, Stripe for payment processing, Vercel for web hosting); law enforcement or government authorities if required by law; other parties with your explicit consent.
Guest-submitted content (videos and photos) is accessible to the event organizer through their dashboard. If the live photo feed is enabled, guest photos may be visible to other guests at the same event.
Your data is stored on Google Firebase (Google Cloud Platform) servers located in the United States. We implement reasonable technical and organizational measures to protect your data, including encrypted data transmission (HTTPS/TLS), secure authentication, and access controls. However, no method of electronic storage is 100% secure, and we cannot guarantee absolute security.
We retain your account information for as long as your account is active. Video and photo content is retained according to your plan tier (as described in our Terms of Service). You may request deletion of your account and all associated content at any time by contacting us. Upon account deletion, we will remove your personal information and content within 30 days, except where retention is required by law.
Depending on your jurisdiction, you may have the following rights regarding your personal information: the right to access and obtain a copy of your personal information; the right to correct inaccurate information; the right to request deletion of your personal information; the right to restrict or object to certain processing of your data; the right to data portability (receiving your data in a structured, commonly used format).
To exercise any of these rights, contact us at toastboxsupport@gmail.com. We will respond to your request within 30 days.
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA).
Identifiers (name, email address). Internet or electronic network activity (browser type, pages visited). Audio, electronic, or visual information (video recordings, photos). Commercial information (payment and plan details).
Right to Know: You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which it was collected, the business purpose for collecting it, and the categories of third parties with whom it is shared.
Right to Delete: You may request that we delete the personal information we have collected from you, subject to certain exceptions permitted by law.
Right to Correct: You may request that we correct inaccurate personal information we maintain about you.
Right to Opt-Out of Sale/Sharing: We do not sell or share your personal information for cross-context behavioral advertising. No opt-out is necessary.
Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.
To submit a request, email toastboxsupport@gmail.com with the subject line “California Privacy Request.” We will verify your identity and respond within 45 days as required by law.
You may also designate an authorized agent to make a request on your behalf. We may require verification that you authorized the agent to act for you.
The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected information from a child under 13, we will delete it promptly. If you believe a child has provided us with personal information, please contact us.
The Service uses the following third-party services: Google Firebase (authentication, database, and file storage), Stripe (payment processing), Vercel (web hosting). Each of these services has its own privacy policy governing the data they process. We encourage you to review their respective privacy policies.
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised “Last updated” date. For significant changes, we may also notify you by email. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.
If you have questions about this Privacy Policy or wish to exercise your privacy rights, contact us at:
Toastbox
Email: toastboxsupport@gmail.com