Privacy & Data Practices
Your Privacy Matters. We believe in complete transparency about how your data is used. Here's everything you need to know about our AI features, facial recognition, and data handling practices.
The Quick Version
- •Your photos are never used to train AI models. Not by us, not by AWS, not by OpenAI, not by anyone.
- •Photos are analyzed by AI (OpenAI for tagging, AWS for face detection) but processed only - never stored or learned from.
- •Face data is isolated per-project and permanently deleted when you delete your project.
- •We don't sell your data. Your information stays with us and our trusted service providers.
- •You can delete everything at any time with a single click.
Facial Recognition: How It Works
We use Amazon Web Services (AWS) Rekognition to detect and match faces in your photos. This is how we automatically identify which guests appear in which photos, so each household receives a personalized slideshow.
What happens to your photos:
- When you upload a photo, we send it to AWS Rekognition for face detection
- AWS creates a mathematical representation ("face embedding") of each face
- These embeddings are stored in an isolated collection just for your project
- We compare faces to group similar ones together (clustering)
- You manually assign names to face clusters to identify guests
Critical Privacy Protections
No training on your data
Per AWS's terms, Rekognition does not use your images or face data to train or improve their AI models. Your data is processed, not learned from.
Project isolation
Each project gets its own face collection. Your guests' faces cannot be matched against photos from other users' projects.
Complete deletion
When you delete your project (or reset face data), we permanently delete the AWS collection and all associated face embeddings.
No biometric database
We don't maintain a cross-project database of faces. Face data exists only within your project's scope.
Photo Analysis & Tagging: How It Works
We use OpenAI's Vision API to analyze your photos and automatically generate helpful tags and descriptions. This powers features like photo categorization, quality scoring, and smart filtering.
What happens when we analyze a photo:
- The photo is sent to OpenAI's API
- OpenAI's vision model analyzes the image content
- We receive back: scene descriptions, category tags (ceremony, reception, candids), mood tags (joyful, romantic), and quality assessments
- This metadata is stored with your photo to enable smart filtering and sorting
What OpenAI receives:
- • The photo image itself
- • Information about detected faces (position, but NOT identity)
- • No names, emails, or other personal information is sent to OpenAI
OpenAI's Data Policy
OpenAI does not train on API data. Per OpenAI's API data usage policy:
"OpenAI does not use data submitted via the API to train or improve our models, unless you explicitly opt in."
We have not opted in. Your photos are processed for analysis only and are not used to train OpenAI's models.
AI-Generated Music: How It Works
We use Suno to generate custom songs for each household. You provide a text prompt describing the song you want, and Suno's AI creates original music.
What data is sent to Suno:
- • The text prompt you write (e.g., "An upbeat country song thanking the Johnson family")
- • Style preferences (genre, mood)
What We Don't Send
- • No photos or images
- • No email addresses or contact information
- • No personal details beyond what you include in your prompt
The song prompts you write are entirely under your control. We recommend keeping prompts general (e.g., "the Smith family") rather than including sensitive personal details.
What Data We Store
Here's a complete list of the data we collect and store:
Account Information
- • Email address (for login and notifications)
- • Password (securely hashed, never stored in plain text)
- • Project/event name
Guest Information
- • Names (first and last)
- • Email addresses (optional, only if you choose to email slideshows)
- • Household groupings
- • Gift descriptions (if you add them)
- • Attendance status
Photos & Face Data
- • Your uploaded photos (stored securely in cloud storage)
- • Face detection results (bounding boxes, confidence scores)
- • Face-to-person assignments (which faces belong to which guests)
- • Face embeddings (mathematical representations, stored in AWS)
Generated Content
- • AI-generated song files and URLs
- • Song prompts you created
- • Custom greeting messages
Third-Party Services We Use
We partner with trusted industry providers. Here's who has access to what:
| Service | Purpose | Data Accessed |
|---|---|---|
| Supabase | Database & file storage | All stored data (encrypted at rest) |
| AWS Rekognition | Face detection & matching | Photos (temporarily), face embeddings |
| OpenAI | Photo analysis & tagging | Photos, face positions (no identity info) |
| Suno | AI music generation | Song prompts only |
| Resend | Email delivery | Recipient emails, email content |
| Stripe | Payment processing | Email, payment details (we never see card numbers) |
| PostHog | Analytics & bug tracking | Usage patterns, anonymized interactions |
Important: None of these services use your data to train AI models. They process your data solely to provide their services to us.
Deleting Your Data
You have complete control over your data. Here's how deletion works:
Delete Your Project
From your Settings page, you can delete your entire project. This permanently removes:
- • All uploaded photos
- • All guest and household information
- • All face data (including AWS face collections)
- • All generated songs
- • All email records
Reset Face Data Only
If you just want to start over with face detection, you can reset face data while keeping your photos and guest list. This deletes the AWS face collection and all face-to-person assignments.
Delete Your Account
Contact us at support@offkeycards.com to delete your account entirely. We'll remove all associated projects and personal information.
Note: Deletion is permanent and cannot be undone. Make sure to download any photos or songs you want to keep before deleting.
Our No-Training Guarantee
We guarantee that your data is never used to train AI models.
AWS Rekognition: Per their service terms, customer images and face data are not used to train Amazon's models. Your photos are processed for detection only.
OpenAI: Per their API data usage policy, API data is not used to train models unless explicitly opted in. We have not opted in - your photos are analyzed and immediately discarded by OpenAI.
Suno: Song prompts are used to generate your specific songs. We use their API in a way that does not contribute to model training.
Our own systems: We do not train any AI models. We use third-party AI services via their APIs - we don't build or train our own.
The tech industry has sometimes been unclear about how user data feeds into AI training. We want to be crystal clear: your wedding photos, your guests' faces, and your personal information are not and will never be used to train artificial intelligence models.
Questions?
We're happy to answer any questions about how we handle your data.
Contact us: support@offkeycards.comLast updated: January 2026