Privacy policy

Last updated: October 28, 2026

This is an English translation of our politique de confidentialité, provided for convenience. If the two versions differ, the French version prevails.

This page distinguishes two audiences. The rental business is our customer: it has an account and has read these terms. The guest has signed nothing; they stepped in front of a booth at a wedding, and yet it is their face being photographed. That distinction drives everything else.

1. Roles

For the rental business’s data (account, subscription), the publisher is the data controller.

For guests’ data (photos, email addresses, consents), the rental business is the data controller and the publisher acts as a processor: it uses this data only to provide the service, on the rental business’s instructions.

2. Data processed

Rental business account

• first name, last name, email address, phone number (to help you during the trial and call you back) and display name;
• subscription status and payment identifier;
• paired booths: name given to the machine, health status, last activity.

Guests

• photos and videos produced by the booth;
• email address, only if the guest enters it to receive their photo;
• proof of consent when the consent screen is enabled: timestamp and full text shown to that guest. The text is stored with each record so that a proof never points to a text changed since;
• survey answers when the rental business enables the survey;
• sharing log: which channel, at what time, with what result.

Contact form

• name, email address, subject and message: forwarded by email to our support inbox so we can reply, without being stored in our database;
• IP address: kept for 24 hours to limit abusive sending.

No advertising tracker is installed, neither on the website nor on the booth. The website counts visits with Vercel Web Analytics, with no cookie or persistent identifier: page views are aggregated, and no visitor can be followed from one day or one site to another. The booth itself measures nothing.

3. What the client export does not contain

The log handed over at the end of an event masks email addresses: l***a@gmail.com. Enough to recognize an address you already know, not enough to rebuild a list. This file leaves our scope and lands with a third party who has no need for the guests’ address book.

4. Where the data is

The photos themselves do not leave the European Union. A guest’s email address passes through Resend for the time of sending.

5. Retention periods

• Event gallery: 90 days by default, adjustable by the rental business event by event. After that, the link no longer gives access to the photos.
• Photos on the booth: kept locally until the operator purges them from the console.
• Consents and sharing log: kept with the event, as they are its proof.
• Contact form messages: in our mailbox, for the time needed to handle the request and follow it up. The IP address used to limit sending is erased within 24 hours.
• Rental business account: until it is deleted, then erased within 30 days, except for accounting records kept for 10 years as required by law.

6. Legal bases

• Account and subscription: performance of the contract.
• Photographing a guest and sending their photo: consent, collected by the rental business through the dedicated screen.
• Message sent through the contact form: legitimate interest in replying to the person who wrote to us.
• Security and technical logs: legitimate interest in keeping the service running.

7. Your rights

Everyone has the right of access, rectification, erasure, objection, restriction and portability.

You are a guest and want a photo removed: contact the company that ran the booth, as it is responsible for this processing. If you cannot identify it, write to us at contact@froozbooth.com with the gallery link: we will pass the request on and can carry out the removal technically.

You are a rental business: you can delete your account from Settings, or on request at the same address.

A complaint may be lodged with the CNIL, the French data protection authority, 3 place de Fontenoy, 75007 Paris, cnil.fr.

8. Security

Database access is isolated per account at the database engine level: a request can only reach the events of the account that sends it. Public galleries can be protected by a code, with a limited number of attempts. Exchanges are encrypted in transit.

Each booth has an operator access code, which the operator must change after installation.

9. Changes

Any change to this policy is published on this page, whose last update date appears at the top. A substantial change is notified by email to account holders.