WITNESSED – Privacy Policy

Effective Date: April 1, 2026

Witnessed App (“Witnessed,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the rights you have regarding your personal data when you use our platform at joinwitnessed.com (the “Service”).

By using Witnessed, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

1. Information We Collect

1.1 Information You Provide We collect information you give us directly when you:

• Create an account: name, email address, and password;
• Set up an event: event name, date, and any optional customizations;
• Make a purchase: billing name, email address, and payment information (processed by our third-party payment processor — we do not store full card details);
• Order physical products: shipping name, address, and contact details;
• Contact our support team: any information included in your messages.

1.2 Information Collected Automatically When you use the Service, we automatically collect certain technical data, including:

• Device information: device type, operating system, and browser type;
• Usage data: pages visited, features used, and interactions with the Service;
• IP address and approximate geographic location (country/city level);
• Referral source (how you arrived at Witnessed);
• Timestamps of activity.

We use cookies and similar technologies to collect some of this information. For full details, see our Cookie Policy at joinwitnessed.com/cookie-policy.

1.3 Photos and Event Content Photos uploaded by hosts and guests are stored on our servers for the purpose of delivering the shared event gallery. Photos are associated with the event they belong to and are not linked to identifiable user profiles unless the uploader is a registered account holder.

1.4 Guest Information Guests who join a Witnessed event via QR code or shared link do not create accounts. We collect minimal technical data from guests (device type, browser, IP address) to operate the Service. We do not collect guest names, email addresses, or other identifying information unless voluntarily provided.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, operate, and maintain the Service;
• To process your event setup and deliver your gallery;
• To process payments and fulfill physical product orders;
• To communicate with you about your account, events, and support requests;
• To send transactional emails (event confirmations, gallery-ready notifications);
• To send marketing communications, where you have opted in;
• To improve and personalize the Service;
• To analyze usage trends and diagnose technical issues;
• To detect and prevent fraud, abuse, and security incidents;
• To comply with legal obligations.

3. Legal Bases for Processing (EEA/UK Users)

If you are located in the European Economic Area or the United Kingdom, we process your personal data on the following legal bases:

• Contract performance: to provide the Service you have requested;
• Legitimate interests: to operate and improve our Service, prevent fraud, and communicate with you about updates relevant to your use;
• Consent: for optional marketing communications and non-essential cookies;
• Legal obligation: to comply with applicable laws and regulations.

4. How We Share Your Information

4.1 With Other Event Participants Photos you upload to a Witnessed event are visible to all participants who have access to that event gallery. Access is controlled by the event link or QR code. You should only share your event link with people you intend to invite.

4.2 With Service Providers We share information with trusted third-party service providers who help us operate the Service, including:

• Cloud hosting and storage providers;
• Payment processors (e.g., Stripe);
• Email delivery services;
• Analytics providers;
• Customer support tools.

These providers are contractually required to use your data only to perform services on our behalf and to maintain appropriate security measures.

4.3 For Legal Reasons We may disclose your information if we believe in good faith that doing so is necessary to:

• Comply with a legal obligation or valid legal process;
• Protect the rights, property, or safety of Witnessed, our users, or the public;
• Detect, prevent, or address fraud or security issues.

4.4 Business Transfers If Witnessed is involved in a merger, acquisition, or sale of all or substantially all of its assets, your information may be transferred as part of that transaction. We will notify you via email or a prominent notice on our website before your data is subject to a different privacy policy.

4.5 We Do Not Sell Your Data We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

5. Photo Storage and Retention

5.1 Event Photos Photos uploaded to a Witnessed event are stored on our servers and remain accessible through your event gallery. We retain event photos for a period of 12 months from the event date for paid plans. Free plan events retain photos for 30 days from the event date. You will receive advance notice before your photos are deleted, and you may download your full gallery at any time within this window.

5.2 Account Data We retain your account information for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required for legal compliance, fraud prevention, or dispute resolution.

5.3 Deletion Requests To request deletion of your data or event photos before the standard retention period, contact us at hello@joinwitnessed.com. We will process deletion requests within 30 days.

6. Cookies and Tracking

We use cookies and similar technologies to operate our Service, remember your preferences, and analyze usage. You can control cookie settings through your browser or our cookie consent tool.

For a full description of the cookies we use and your choices, see our Cookie Policy at joinwitnessed.com/cookie-policy.

7. Data Security

We implement industry-standard technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction. These measures include:

• Encryption of data in transit using TLS/SSL;
• Encrypted storage for sensitive data;
• Access controls limiting who can access personal data;
• Regular security assessments and monitoring.

No method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. If you become aware of any security issue related to the Service, please notify us promptly at hello@joinwitnessed.com.

8. Children’s Privacy

The Service is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected data from a child under 13, we will delete it promptly. If you believe a child under 13 has provided us with personal information, please contact us at hello@joinwitnessed.com.

Users between 13 and 18 may use the Service only with the consent and involvement of a parent or guardian.

9. Your Rights and Choices

9.1 All Users Regardless of where you are located, you have the following rights:

• Access: request a copy of the personal information we hold about you;
• Correction: request that we correct inaccurate or incomplete data;
• Deletion: request that we delete your personal data, subject to legal retention requirements;
• Opt-out of marketing: unsubscribe from promotional emails at any time using the unsubscribe link or by contacting us.

9.2 EEA, UK, and Swiss Users If you are located in the EEA, UK, or Switzerland, you additionally have the right to:

• Data portability: receive your data in a structured, machine-readable format;
• Restriction of processing: request that we limit how we use your data in certain circumstances;
• Object to processing: object to our use of your data where we rely on legitimate interests;
• Withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting prior processing;
• Lodge a complaint with your local data protection authority.

9.3 California Residents If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and how it is used, the right to request deletion, and the right to opt out of the sale of personal information (we do not sell personal information). To exercise your rights, contact us at hello@joinwitnessed.com.

9.4 How to Exercise Your Rights To exercise any of your rights, please contact us at hello@joinwitnessed.com. We will respond to verified requests within 30 days. We may need to verify your identity before processing your request.

10. International Data Transfers

Witnessed is operated from the United States. If you access the Service from outside the United States, your information may be transferred to and processed in the United States, where data protection laws may differ from those in your country.

For transfers from the EEA or UK, we rely on appropriate transfer mechanisms, such as Standard Contractual Clauses approved by the European Commission, to ensure your data receives adequate protection.

11. Third-Party Links

The Service may contain links to third-party websites. This Privacy Policy applies only to Witnessed. We are not responsible for the privacy practices of third-party sites and encourage you to review their privacy policies before providing any personal information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other reasons. When we make material changes, we will notify you by updating the effective date and, where appropriate, by email or prominent notice on our website.

Your continued use of the Service after the updated policy becomes effective constitutes your acceptance of the changes.

13. Contact Us

Witnessed App Website: joinwitnessed.com Email: hello@joinwitnessed.com

We are committed to resolving privacy inquiries and will respond to all requests within 30 days.