Privacy policy

ShotSlip is operated by Vista Tech Solutions LLC (“we”). ShotSlip lets organizations (campaigns, brands, nonprofits and event hosts, our “customers”) take photos of guests at events, print a slip with a QR code, and let each guest get their photo. At some events, guests can also add their own photos to a shared event album. This policy explains what we collect and how it is used.

Guests who get their photo

When you scan a ShotSlip QR code and claim your photo, we process:

• Your photo, taken by the event staff.
• The details you enter on the claim page: first and last name and email, and, if the organizer asks for them, phone number and ZIP code. Some organizers use photo-only mode and collect nothing.
• Your choices: whether you asked for the photo by email, and whether you ticked the organizer’s optional opt-in box (always unticked by default), with the exact wording you agreed to.
• Your language (English or Spanish) and technical data needed to protect the service, such as IP address for rate limiting.

The organizer whose event you attended controls this information and decides how to use it. They receive it in their ShotSlip dashboard and can export it. Each organizer’s contacts are kept separately and are never shared with other organizers. We use it only to deliver your photo, run the service and keep it secure.

Guests who add photos to an event album

Some organizers turn on a shared album for their event. Guests scan the event’s QR code or enter its code at shotslip.com/e, sign in, and add their own photos. When you do, we process:

• Your sign-in details: first and last name and email, and, if the organizer asks for them, phone number and ZIP code. We email you a 6-digit code to confirm the email address is yours.
• The photos you add, the time you added them, and any reports you make about other photos. Our guest page re-saves each photo before uploading it, which removes the location data a phone camera may attach.
• Your choices: your confirmation that you have permission to share the photos you add, and whether you ticked the organizer’s optional opt-in box (always unticked by default).
• A sign-in token kept in your browser’s local storage so you stay signed in. It stops working when the event’s album closes, and you can sign out at any time.

Who can see what:

• Photos you add go into the event’s shared album, where other signed-in guests of that event can view and download them, shown with your first name. The organizer may approve photos before they appear, and may play the album on a screen at the venue (without names).
• The organizer sees your sign-in details and all photos in their ShotSlip dashboard, can download them, and can hide or remove photos. Your details become one of the organizer’s contacts, the same as for guests who claim a photo.
• You can delete your own photos from the album at any time while it is open. A photo that several guests report is taken out of the album until the organizer reviews it.
• Guests can add photos for a limited time set by the organizer, at most 30 days.

Only add photos you took or have permission to share, and think before adding photos of people who haven’t agreed to it, especially children.

Staff and customers who use the app

• Account details: name, email and a securely hashed password.
• Photos you take and the time and event they belong to.
• On your device only: the camera is used to take photos; Bluetooth is used to connect to your thermal printer; Face ID or Touch ID, if you turn it on, unlocks sign-in details stored in your device’s secure keychain. Biometric data never leaves your device and we never receive it. Photos taken without signal are kept on the device until they upload.

What we don’t do

• We don’t sell personal information.
• We don’t use advertising, ad tracking or third-party analytics in the app or on claim pages.
• We don’t use your information to track you across other companies’ apps or websites.

Where it is stored

ShotSlip runs in the United States on Amazon Web Services (photo storage and email delivery) and Supabase (database). Data is encrypted in transit, and photos are only reachable through short-lived signed links.

How long we keep it

We keep photos and contact details while the organizer’s account is active, or until the organizer or you ask us to delete them. Backups are kept for a limited time for recovery.

Your choices and rights

To access, correct or delete your information, or to stop receiving messages, contact the organizer of the event or email us at admin@vistatechsolutions.io. We will respond within 30 days. ShotSlip itself only emails you the photo you asked for or a sign-in code you requested; it never sends you marketing.

Children

ShotSlip is not directed to children under 13, and we do not knowingly collect their information.

Changes

If we change this policy, we will update the date above and post the new version on this page.

Contact

Vista Tech Solutions LLC · admin@vistatechsolutions.io