Privacy Notice

1. Privacy contact and operator

Wedding Quest is operated by Yu Xia (XIA, YU), an individual sole trader with ABN 26 279 572 948 and principal business location at WA 6000, Australia. Send privacy enquiries, access requests and complaints to rain.yuxia@outlook.com.

2. Information we may collect

• Host account: name, email address, password verifier, account settings and sign-in/security records.
• Event: names, dates, event type, stories, trivia, prompts, guest limits and moderation choices.
• Guest participation: display name, answers, scores, mission progress, event session and timestamps.
• Media: uploaded source images, captions, technical metadata, metadata-stripped display copies and moderation status. Invited guests receive only the display copy; an authorised host may download the private source file, which can retain device metadata such as capture time or location.
• Transactions: plan, amount, currency, payment status and processor reference. Full card details should be handled by the payment processor, not stored by us.
• Technical and support: IP address, browser/device information, audit and abuse-prevention logs, correspondence and consent records where applicable.

3. Why we use information

We use information to create and operate events, authenticate hosts, let guests participate, process payments, moderate and deliver media, provide support, prevent misuse, diagnose reliability issues, meet legal obligations and improve the product using appropriately aggregated information. We should obtain consent before sending optional marketing messages.

4. Host and guest choices

Hosts choose what story information and prompts to provide and should avoid unnecessary sensitive information. Guests can choose not to upload a photo or complete a mission. Hosts must give invitees an appropriate event notice and obtain permissions needed for children, private venues, memorials or other sensitive contexts.

5. Sharing and service providers

Information may be shared with invited event participants according to event settings and with contracted providers needed for hosting, storage, payments, email, security, analytics or support. Our principal infrastructure provider is Cloudflare, including its compute, database, media-storage, security and email services. Stripe processes payments and related transaction information. These providers may process information outside Australia under their service arrangements. We do not sell personal information or event photos.

6. Retention and deletion

Event galleries remain available for the plan’s stated period: 7 days, 30 days or 12 months after the configured event end. Operational backups may take a limited additional period to expire. Account, transaction, fraud-prevention and audit records may be retained where reasonably needed for legal, accounting or security purposes. Automated jobs close guest access, purge realtime rooms and remove stored media when the plan period ends.

7. Security

We intend to use access controls, encrypted transport, secure password derivation, restricted storage bindings, audit logging and upload validation. No system is perfectly secure. We will maintain an incident response process and handle eligible data breaches under applicable law, including the Notifiable Data Breaches scheme where it applies.

8. Cookies and local storage

Essential cookies or browser storage may keep a host signed in, maintain a guest event session, protect requests and remember required preferences. Optional analytics or advertising storage must not be enabled until a current disclosure and, where required, consent choice are provided.

9. Children

The service is purchased by adults but event photos can include children. Hosts are responsible for appropriate guardian notice and consent. The service is not designed for a child to create a host account or independently purchase a pass. Reports involving a child’s privacy or safety should receive priority handling.

10. Access, correction and complaints

You may ask for access to or correction of personal information we hold about you, or request deletion where applicable. We may need to verify your identity and may lawfully refuse or limit a request in some circumstances, with reasons. Privacy complaints should first be sent to rain.yuxia@outlook.com. If we cannot resolve a complaint, you may have the right to contact the Office of the Australian Information Commissioner or another regulator with jurisdiction.

11. Changes

We will date material updates and notify hosts where a change materially affects how their information is handled. The practices stated in the published notice must stay aligned with the deployed service and vendor contracts.