Privacy Policy

Effective Date: March 29, 2026
‍

1. INFORMATION WE COLLECT

1.1 Personal Information You Provide

Name, email address, phone number, and event affiliation
Account credentials (e.g., username, password)
Uploaded content, metadata, and custom map references
Billing and payment information (if applicable)

1.2 Automatically Collected Information

Device type, browser type, and operating system
IP address, location data (if permission granted), and time zone
Log data, access times, and usage patterns
Cookies, pixels, and similar tracking technologies

1.3 AI-Generated Content Disclosure

Event Rewind may use artificial intelligence and machine learning tools to generate, suggest, or enhance certain Platform features, including but not limited to event descriptions, captions, search results, content recommendations, and layout suggestions. Where AI-generated content is surfaced to users, it is provided as a convenience tool and does not represent editorial endorsement or guaranteed accuracy. Users are responsible for reviewing and verifying any AI-generated content before publishing or relying upon it. Event Rewind does not use AI to make automated decisions that produce legal or similarly significant effects on users without human review. Any personal information processed by AI tools on the Platform is handled in accordance with this Privacy Policy and our data processor agreements with applicable vendors.

1.4 Event Privacy Settings

Users who create or manage events on the Platform may configure privacy settings that control the visibility of event content and associated media. Available settings may include, but are not limited to: public access (viewable by any Platform user or visitor), access-code-protected (viewable only by individuals with a valid event access code), and private (viewable only by the event organizer and designated collaborators). The privacy setting selected by the event organizer determines how content is displayed, shared, and indexed on the Platform. Event Rewind will honor the privacy setting applied to an event and will not intentionally disclose privately designated content to unauthorized parties, except as required by law or as otherwise described in this Privacy Policy. Users should be aware that access-code-protected and public events may be accessible to individuals who share or discover an event link, and that Event Rewind cannot guarantee the security of access credentials shared by event organizers with third parties.

2. HOW WE USE INFORMATION

We may use collected information to:

Provide and maintain our services
Authenticate users and process logins
Display media in connection with time and location references
Respond to inquiries and provide customer support
Moderate content and enforce platform policies
Improve platform functionality and personalize the user experience
Send transactional and service-related communications
Process payments and manage subscriptions

2.1 AI Processing (Google Gemini)

Certain features of the Platform utilize Google Gemini, a generative AI service provided by Google LLC, to process user inputs and generate responsive content. When you interact with AI-assisted features on the Platform (such as search queries, caption generation, event description tools, or AI-powered content suggestions), your inputs may be transmitted to and processed by Google Gemini in accordance with Google’s applicable terms of service and privacy policies. Event Rewind does not intentionally transmit sensitive personal information (as defined under applicable law) to Google Gemini as part of standard Platform operations. However, users should be aware that any content voluntarily entered into an AI-assisted input field may be processed by Google’s infrastructure. Event Rewind implements prompt-level controls and data minimization practices to limit the personal information transmitted to AI services. Google’s processing of data through Gemini is governed by Google’s Privacy Policy (available at https://policies.google.com/privacy) and any applicable data processing addendum. Users in the EEA or United Kingdom should note that Google Gemini data processing may involve international transfers subject to Standard Contractual Clauses or equivalent safeguards. To the extent you do not wish your inputs to be processed by AI tools, you may refrain from using AI-assisted features, which are optional and not required for core Platform functionality.

3. SHARING OF INFORMATION

We may share personal information:

With your consent or at your direction
With service providers (e.g., cloud storage, analytics, payment processors) bound by confidentiality obligations
With event organizers, if content is uploaded to a shared event space
As required by law, subpoena, or valid legal process
To protect the rights, safety, and property of Event Rewind, its users, or the public
As part of a merger, acquisition, or sale of assets, with notice to affected users

4. COOKIES AND TRACKING TECHNOLOGIES

We use cookies and similar technologies to:

Remember user preferences and session information
Enable essential platform features
Analyze user behavior and traffic patterns
Deliver relevant content or messages

You may disable cookies in your browser settings, but some features may not function properly. See our Cookie Banner and Cookie Policy for more details on how to manage your preferences.

5. DATA RETENTION AND ARCHIVED MEDIA

5.1 General Retention

We retain personal data as long as necessary for the purposes outlined in this policy, compliance with legal obligations, and resolution of disputes and enforcement of agreements.

5.2 Archived and Expired Event Media

Media uploaded to a Rewind experience (e.g., Wedding Rewind, Festival Rewind) is retained for the duration of the applicable access window, as described in our Terms and Conditions (currently twelve (12) months from the event date). Upon expiration of that window, your media and associated metadata may be archived in compressed or reduced-access storage. Archived media is not publicly accessible but may be retained internally for a reasonable period for backup, legal, and compliance purposes before permanent deletion. You will receive advance notice by email before any permanent deletion occurs.

5.3 Deletion Requests

You may request deletion of your data at any time by contacting us at privacy@eventrewind.com. We will process requests within thirty (30) days, subject to applicable legal hold obligations.

6. SECURITY MEASURES

We implement reasonable technical and organizational safeguards to protect user data, including:

Encryption of sensitive data in transit and at rest
Access controls limited to authorized personnel
Ongoing monitoring for unauthorized access or vulnerabilities

All users assume risk inherent in transmitting data online. No method of transmission or storage is 100% secure.

7. YOUR RIGHTS AND CHOICES

Depending on your jurisdiction, you may have the right to:

Access, correct, or delete your personal data
Object to or restrict certain types of processing
Withdraw consent at any time (where processing is consent-based)
Request portability of your data in a machine-readable format
Lodge complaints with your local data protection authority

To exercise these rights, contact privacy@eventrewind.com.

8. GDPR NOTICE – USERS IN THE EUROPEAN ECONOMIC AREA

If you are located in the European Economic Area (“EEA”), you have additional rights under the General Data Protection Regulation (“GDPR”):

Legal Basis for Processing: We process your data based on your consent, the performance of a contract, compliance with legal obligations, or our legitimate interests.
Data Transfers: Your data may be transferred to and processed in the United States. We rely on Standard Contractual Clauses or other lawful transfer mechanisms approved under GDPR.
Right to Erasure (“Right to Be Forgotten”): You may request deletion of your personal data where it is no longer necessary for the purpose it was collected.
Right to Lodge a Complaint: You may contact your local supervisory authority if you believe your rights have been violated.

Our EU Data Protection Contact: privacy@eventrewind.com.

9. CCPA NOTICE – CALIFORNIA RESIDENTS

If you are a California resident, the California Consumer Privacy Act (“CCPA”) grants you additional rights:

Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you in the past 12 months.
Right to Delete: You may request deletion of personal information we have collected, subject to certain exceptions.
Right to Opt Out of Sale: Event Rewind does not sell personal information. If this practice changes, you will be notified and provided a clear opt-out mechanism.
Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To submit a CCPA request, contact: privacy@eventrewind.com or write to the mailing address below. We will verify your identity before processing requests.

10. CHILDREN’S PRIVACY

The Platform is not intended for children under 13 (or the equivalent minimum age in relevant jurisdictions). We do not knowingly collect data from children. Parents or guardians who believe we have collected data from a minor should contact us immediately at privacy@eventrewind.com so we may delete such data.

11. INTERNATIONAL USERS

If you are located outside the United States, your information may be transferred to and processed in the U.S. where data protection laws may differ from those in your jurisdiction. By using the Platform, you consent to this transfer in accordance with applicable law.

12. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy periodically to reflect changes in our practices or applicable law. We will notify you of material changes by posting a notice on the Platform or by sending an email to the address on file. Continued use of the Platform after updates constitutes acceptance.

13. CONTACT US

For questions, concerns, or requests related to this Privacy Policy:

Email: legal@eventrewind.com
Mailing Address: Event Rewind LLC, P.O. Box 10222, Parkville, MD 21234