Privacy

Privacy Policy

Wish You Were Here stores uploaded photos, generated previews, final images, account records, and payment status only to provide the photo editing and download service.

Photos and likeness data

Vacation photos and reference photos are private to the signed-in account. Reference photos should only be uploaded when the person has given permission to use their likeness for the requested edit.

Payments

Payment card details are handled by Stripe. Wish You Were Here stores checkout identifiers, order status, purchase status, and related product metadata, not raw card numbers.

Retention and deletion

Archived projects are hidden from the dashboard while private assets remain available for support review and recovery for 30 days before permanent deletion.

How we handle stored data

Different records have different retention needs. We minimize access to private media, keep enough operational history to support customers and process payments, and use longer retention only where accounting, fraud prevention, security, or legal obligations require it.

• Staged upload files: temporary files used during upload processing. These are intended for short-lived cleanup after the final private assets are created.
• Vacation originals and person reference photos: private project assets. They are hidden immediately when a project is archived and are recoverable by support during the 30-day soft-delete window.
• Person likeness data: reference photos and consent records are treated as sensitive customer data. They should only be uploaded with permission and are included in the same project archive and deletion workflow.
• Watermarked previews: private preview assets used for customer review before purchase. Unpurchased previews may be removed with the archived project after the 30-day recovery window.
• Purchased final images: private final assets unlocked after payment. These may need a longer recovery or support window than unpaid previews, especially when connected to an order.
• Orders, receipts, and payment status: transaction records are retained as needed for customer support, tax, accounting, chargeback, fraud-prevention, and legal purposes. Raw card numbers are not stored by Wish You Were Here.
• Analytics, email logs, and admin audit events: operational records are used to understand service health, diagnose failures, confirm email delivery, and review support/admin actions.
• Account records: account profile data is used for sign-in, project ownership, support, and order access. Account deletion requests hide active project data first and then move through the 30-day recovery policy.

Permanent deletion

Permanent deletion removes eligible private media and project records after the recovery window. Some order, receipt, payment, security, and audit records may be retained when required for legitimate business, accounting, legal, or dispute-resolution purposes.

Support access

Limited support access may be used to troubleshoot failed uploads, generation jobs, payment unlocks, or download issues. Contact sfluegge@gmail.com for support.