Privacy Policy

Effective date: November 5, 2026

This Privacy Policy explains what personal information Elijah's Photobooth LLC ("we", "us"), a company of ITPRO360 LLC, collects through Elijah's Photobooth Company: our website at elijahsphotobooth.com, our photo booths and booth software, guest photo pages, galleries and slideshows, and the operator console. It also explains how we use and share that information and the choices you have.

If you have questions or requests, email [support email].

1. Who is responsible for your information

• Our own events (direct rentals). When you book Elijah's Photobooth Company for your event, we decide how the event's information and photos are handled.
• Events run by Partner Operators. Independent photo booth businesses ("Operators") also run their own events on our software. For those events the Operator is responsible for the event and its photos, and we store and process the information on the Operator's behalf to provide the service. If you have a request about an Operator's event, you can contact the Operator or us; we will help the Operator respond.

2. Information we collect

Photos and event content. Photos taken at the booth, including the faces of people in them, the background and frame chosen, the time each photo was taken, and any text added to the photo (such as an event name or date). Photographers hired for an event may upload their own photos to the same gallery. Hosts and Operators may upload frames, logos, backgrounds, music, ads and other pictures.

Information you give us.

• Bookings and quotes: your name, email address, phone number, event date, times, venue and address, event type, and anything you tell us in your message. If you book by phone or message, our team enters these details for you. We also record who on our team took the booking, any convenience fee and the reason if it was waived, and when and how you agreed to the booking policy (by ticking the box on the review page, with the network address it came from, or verbally on the call, with the name of the team member who recorded it).
• Operator sign-up and accounts: name, email address, phone number, business name, plan, and account settings. Passwords are stored only in hashed form. If you turn on two-step sign-in, we store the secret for your authenticator app and hashed recovery codes.
• Signing in with Tooly SSO: our team and invited Operators can sign in with a Tooly account. Tooly SSO is our own sign-in service, operated by itpro360 LLC (Tooly SSO Privacy Policy). When you do, we receive your Tooly account ID (`sub`), email address, name, profile photo and roles, and keep them on your GreenBooth account to know who you are and what you may access. Your Tooly password and authenticator codes are handled by Tooly SSO and never reach GreenBooth.
• Instant booth (self-serve, at the app address): to set up your own booth, you give your email address and confirm it with a 6-digit code we email you (no password). We keep your email, when you signed up and last signed in and the network address it came from, plus the events you create (name, date, times, occasion) and anything you upload (frames and backdrops). Sign-in codes are stored only in hashed form and expire after 15 minutes. You can also sign in with your Tooly account ("Continue with Tooly"): we then receive your Tooly account ID (`sub`), email address, name, profile photo and Tooly groups, keep them on your booth account, and record when you agreed to these terms. Your Tooly password and authenticator codes never reach us (Tooly SSO Privacy Policy). Sign-ins, and Tooly sign-ins we refuse (with the name, email and groups Tooly sent, so we can help), are recorded in our activity log with the network address and a reference code. If you pay for an upgrade, Stripe handles the payment (see Payments below). If you order a custom design, we keep what you tell us about it (theme, colours, names, wording, notes), the files you send (such as an invitation or a logo) and our messages with you. Your files are deleted 30 days after the order is finished or cancelled, or when your event's photos are deleted, whichever is first; the order record is kept with payment records.
• Help requests, feedback and messages: your name, email address, the message, any screenshot you attach, and the event or photo it's about. Support conversations are kept so we can follow up.
• Trying our demo booth: to get the demo booth link on our website, you give your name and email address and say whether you are planning an event or own a photo booth. We email you the link (and, for booth owners, the weekly settings PIN) and may follow up once about your event or booth. News and offers are sent only if you tick that separate box.
• Photo contest: when you vote in an event's gallery, we store your votes, changes to your votes, and your network address with a random ID created on your phone. We use this to count votes fairly and stop automated voting. We don't ask for your name to vote. If you enter your photo in a contest from your photo page, we save your email and when you agreed to the contest rules, and use your email to tell you if you win and to send you your prize.
• Photo delivery by email or text (where a booth offers it): the email address or phone number you enter, used only to send you your photos.
• Getting your photo by email (where the event offers it): after you scan the booth's code, your photo page can email the photo to you. We save your email address and, if you choose, your name, the time and the event. It's optional; you can tap "No thanks". We use your email to send you your photo. We only send news and offers if you tick the separate box, which is never ticked for you. Every news email has an unsubscribe link.

• Contest votes: to count votes fairly and stop automated voting, we keep a log of votes and vote changes with the random voter ID and the network (IP) address they came from.
• Background removal: when an event uses the cut-out mode (no green screen), the booth device separates people from the background in each photo. This runs on the device only; it does not identify anyone or create face templates or other biometric data.

Payments. Payments are handled by Stripe. Card details go directly to Stripe and never reach our servers. That includes a card you read to our team over the phone: it is typed directly into Stripe's secure payment page, and we never write down or store card numbers. We receive and keep payment records, such as the amount, date, plan, and Stripe customer and payment IDs, for accounting, receipts, refunds and support.

Text messages (SMS). If you give us your mobile number when booking and agree to texts (an optional, unticked box on the booking form, or by telling us when you book by phone), Elijah's Photobooth Company ("Elijahs Photo Booth" in text messages) may text you about that booking: a link to review and pay, your confirmation and balance reminders. Message frequency varies by booking, usually a few texts in total. Message and data rates may apply. Reply STOP to any text to stop receiving them, or HELP for help. Texts are sent through Twilio. We don't send marketing texts. We keep a log of texts we send (the number, the message, and whether it was delivered) for support and to show we respect opt-outs. We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes. Mobile numbers and text consent are never shared with third parties or affiliates for their marketing; they are shared only with Twilio to deliver our texts.

Information collected automatically.

• Sign-in and security records: sign-in times and IP addresses for operator and staff accounts, failed sign-in attempts (to block repeated guessing), and an activity log when our staff view or change an Operator's account or event.
• Booth devices: a random ID for each booth device, its online status and app version, so Operators and our support team can see which booths are working.
• Server logs: like most websites, our servers and our network provider record technical information such as IP address, browser type and the pages requested, to keep the service secure and working.

3. Cookies and storage on your device

We use only what the service needs to work. We don't use advertising cookies or third-party tracking, and we don't sell or rent your information.

• Sign-in cookie: keeps operators and staff signed in to the console.
• Instant booth cookie: keeps hosts signed in to the instant booth app for up to 30 days (12 hours after a Tooly sign-in). Your light/dark theme choice is saved in your browser.
• On the booth: the booth link, its settings, a copy of the event setup, and photos waiting to upload are saved on the booth device so it keeps working without internet.
• On your phone: the gallery saves a random voter ID (for the photo contest), and pages may remember small preferences.

You can clear this in your browser settings; some features (like staying signed in, or keeping your contest votes) will then stop working until you sign in or vote again.

4. How we use information

• To run the booth and deliver photos: QR codes, photo pages, galleries, slideshows, prints and downloads.
• To provide bookings, quotes, operator accounts, plans and passes, and to process payments.
• To answer help requests, provide support and troubleshoot booths.
• To send service messages, such as booking confirmations, payment links, account invitations, security notices and replies to your requests.
• To keep the service secure, prevent fraud and abuse, and enforce our Terms of Service.
• To improve the service.
• For our own direct rentals only, and as described in our Terms, a small selection of event photos may be used in our portfolio, website and social media unless the host opts out; we will remove any photo on request and do not use photos of children for marketing without permission.
• To meet legal obligations.

5. How information is shared

• Event hosts and Operators see and manage their event's photos, gallery, slideshow, contest votes and guest messages.
• Anyone with an event's link. Galleries and slideshows can be viewed by anyone who has their link or QR code, and a guest's photo page can be opened by anyone with that photo's link. Hosts and Operators can hide photos or turn the gallery off. At public events (open to anyone, such as our website demo), the gallery shows only photos you chose to enter in a contest and that we approved, and the slideshow shows only approved photos. Your own photo stays on its private link.
• Service providers who help us run the service under contract, only for that purpose: Stripe (payments), Cloudflare (website delivery, security and photo storage), our email services (sending messages: Tooly Mail Relay, itpro360 LLC's own mail relay on our server, which passes emails to an email delivery provider such as SMTP2GO or Amazon SES, or the email account we set up ourselves) and Twilio (booking text messages, when used).
• Our staff and support team, who can access accounts and events to provide support, keep the service running and handle privacy or abuse reports. That access is limited to what each role needs (for example, Marketing Specialists see email addresses only partly), kept confidential and logged under each person's name.
• Legal reasons: when required by law, or to protect the rights, safety and property of our customers, guests, the public or us.
• Business changes: if our business is sold or merged, information may transfer to the new owner, who must respect this policy.

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

6. How long we keep information

• Event photos are kept for 30 days after the event by default (the host or Operator can extend this), then deleted automatically. Photos taken on our public website demo are deleted automatically within a short time.
• Photo contest winners: when a contest's voting ends, we keep a record of its winners (the winning photo, place, votes and the email the winner entered with) after the event's other photos are deleted, as a record of the contest and its prizes. A winner can ask us to remove it at any time by emailing [support email].
• Instant booth photos are deleted automatically 24 hours after the event ends on the free version, or 7 days after it ends on a paid event. A host can download them as a ZIP before then. A host's email and event list are kept while they keep using the instant booth and deleted on request.
• Bookings, payment and tax records are kept as long as needed for accounting and legal requirements.
• Operator accounts are kept while the account is active and for a reasonable time after it closes, unless you ask us to delete them sooner where the law allows.
• Support conversations, security records and logs are kept as long as needed for support, security and legal purposes. The text message log keeps the most recent texts only (older entries are removed automatically).

7. Children

Our service is not directed to children under 13, and we don't knowingly collect personal information from them online. Children may appear in photos taken at events by their families and hosts. A parent or guardian can ask the host, the Operator or us to remove a photo of their child at any time by emailing [support email].

8. Your choices and rights

• Remove a photo: ask the host, the Operator, or us at [support email] and we will remove a photo of you.
• Access, correct or delete: you can ask for a copy of your information, ask us to correct it, or ask us to delete it. Operators can update their account details in the console.
• Messages: service messages are part of using the service; you won't receive marketing emails from us unless you tick the news & offers box, and you can unsubscribe at any time with the link in any of those emails.
• California residents: you may ask what personal information we have collected about you, ask us to delete or correct it, and you won't be treated differently for using these rights. We don't sell or share personal information as those terms are defined under California law. To make a request, email [support email]; we may need to verify your identity, and you may use an authorized agent.
• Do Not Track: we don't track you across other websites, so we don't change our practices in response to browser "Do Not Track" signals.

9. Security

We protect information with encrypted connections (HTTPS), hashed passwords, optional two-step sign-in for operators (required for our support staff), limited and logged staff access, and automatic deletion of event photos. No system is perfectly secure, so please keep your password private and turn on two-step sign-in.

10. Changes to this policy

We may update this policy as the service changes. We'll change the effective date above and, for significant changes, give notice on the website or by email before they take effect.

11. Contact us

Elijah's Photobooth LLC Email: [support email]