Movebooth

Privacy Policy

Effective: Oct 14, 2026 · Last updated: Oct 14, 2026

Update, Oct 14, 2026: We added Section 3.1 on text messages, and updated Sections 1 and 3 on marketing by Movebooth and Operators, Section 4 on what Operators may do with guest mobile numbers, and Section 6.1 on opting out. No other section changed.

Update, Oct 14, 2026: We updated Section 2.2 to list the device information our booth app collects, including device names, status and identifiers, and that, other than crash and performance reports, it may be linked to the signed-in Operator's account. We updated Section 2.4 on how any optional feature that uses your face would work, Section 3 on our marketing to Operators, and Section 6.2 on how Operators can unsubscribe. On October 2, 2026 we removed Section 7.1 and the matching paragraph in Section 7, because we no longer use a visitor identification service on our website. No other section changed.

Update, Oct 1, 2026: We corrected Section 2.4, now titled “Face-Derived Data.” It previously said Movebooth does not collect or process biometric identifiers. It now explains the face-derived data previously computed from event photos on our behalf, the records we still keep, and our commitment to delete them by November 30, 2026, except any specific records the law requires us to keep. We also corrected Section 9 (Security) to describe our safeguards as they are today, including that anyone with a photo's direct link can open it. We also updated Section 4 to add the categories of service providers we use for phone-number validation, logging and error monitoring, and customer support, and Section 2.1 to list name, ZIP code and date of birth, which we collect when an Operator's event form asks for them, and clarified Sections 4 and 7 on Operator access to event entries and on analytics for event gallery pages. No other section changed.

This Privacy Policy explains how Movebooth, LLC (“Movebooth,” “we,” “us,” “our”) collects, uses, shares, and safeguards information when you use our Sites, Applications, and Services. By using the Services, you agree to this Privacy Policy. If you do not agree, do not use the Services.

1) Roles Under Privacy Law

  • Event Data (photos, contact details, selections) captured at an event configured by an Operator: the Operator is the “controller,” and Movebooth is the “processor.” The Operator determines purposes and means. Movebooth also collects the email address you give at the booth for its own marketing emails (Section 3); for that use, Movebooth is the controller.
  • Movebooth Operations Data (account/billing, product analytics, security, Sites): Movebooth is the “controller.”

Where required by law, international transfers are supported by appropriate safeguards (e.g., EU Standard Contractual Clauses and the UK IDTA/Addendum). Our principal processing location is the United States.

2) Information We Collect

2.1 You provide

  • Event captures and inputs (photos, GIFs, videos, text), sharing destinations, contact details (email, mobile number, social media handle), and preferences, and, where an Operator's event form asks for them, your name, ZIP code and date of birth.
  • Operator registration details (name, business info, email, phone, billing/contact, role).
  • Communications you send to us (support requests, surveys).

2.2 Automatically collected

  • Device and usage data (IP address, device type, name and status, OS, app version, device identifiers (including push notification tokens), browser/user-agent, referral URLs, event logs, crash/diagnostic data, and limited analytics data). While an Operator is signed in to our booth app, the data it collects, other than crash and performance reports, may be linked to that Operator's account.

2.3 From third parties

  • Payment processors (limited transaction metadata); service providers (fraud prevention, security signals); optional social platforms you choose for sharing.

2.4 Face-Derived Data

Movebooth no longer collects face-derived data and does not run facial analysis, except in an optional feature you choose to use after giving your written release, as described below. Previously, we used third-party image-analysis service providers to compute attributes from faces in event photos, including estimated age, sex, smile, a “beauty” score, estimated race, emotion, pose, and face position; some of those historical records are still retained and will be deleted no later than November 30, 2026, except any specific records the law requires us to keep, which we will identify here. To request deletion, contact us at pip@movebooth.com.

Optional features that use your face. If we offer an optional feature that processes your photos, including the geometry of your face, such as AI-generated headshots or stylized portraits, we will first update this section to describe it, including what we collect, why, how long we keep it, and which categories of service providers process it. Before you use the feature, the booth will tell you that it uses your face, link to this section, and ask for your written release. We will process your photos for that feature only after we receive that release. If you decline, you can still use the booth's other photo modes.

3) How We Use Information

  • Provide, operate, secure, and troubleshoot the Services;
  • Deliver your requested features (capture, galleries, links to your device, and optional sharing);
  • Communicate with you (transactional messages, service notices, and an event host's note or offer in your photo text; other marketing only with consent where required);
  • Send marketing emails to End Users who give their email address at a booth, and let the Operator of that event do the same (see Section 5 of our Terms);
  • Send Operators news and offers about Movebooth's products and services;
  • Analyze and improve the Services (quality, performance, safety);
  • Comply with law and enforce our terms.

If you give your email address at a booth to receive your photos, Movebooth and the Operator that ran the booth may also send you marketing emails. Each marketing email we send has an unsubscribe link; unsubscribing from one sender's emails doesn't stop the other's, and unsubscribing from marketing emails doesn't stop the photos you ask for. Movebooth and the Operator may send marketing emails to every email address entered at the booth.

Operator Marketing. Operators may use contact details collected at their events for marketing according to their own privacy notices and legal obligations, but they may not use mobile numbers for marketing texts or marketing calls, other than the offer an Operator may add to the photo text Movebooth sends (see Text messages). Operators are solely responsible for their marketing.

3.1 Text messages

When you ask a Movebooth booth to text you your photo, Movebooth uses the mobile number you enter to send that text, which may include a note, an offer or a link from the event's host, and to handle your STOP and HELP replies. We send one text each time you ask. Msg & data rates may apply. Reply STOP to opt out or HELP for help, or email pip@movebooth.com. We keep a list of numbers that replied STOP so we don't text them again. If you enter a mobile number when signing in to the Movebooth app, we use it only to text that sign-in link.

We do not share, sell, rent or provide mobile phone numbers, or text-message opt-in data and consent, to third parties or affiliates for marketing or promotional purposes. Our text-delivery and number-check providers use your number only to provide those services to us. The host of the event where you entered your number can see and export it from their event's guest records. Our Terms don't allow hosts to use it for marketing texts or marketing calls, or to sell or share it for anyone's marketing. The only host words Movebooth sends you by text are those the host adds to the photo text.

4) Sharing of Information

  • Operators (for End-User captures at their events, and the contact details and other entries collected there, which Operators can view and export; Operators may not use mobile numbers for marketing texts or marketing calls, or sell or share them for anyone's marketing);
  • Service providers (cloud hosting, storage/CDN, SMS/email delivery and phone-number validation, analytics, logging and error monitoring, customer support, payments) under contracts restricting their use of data;
  • AI service providers, to review guest lead entries (name, email, and social handle) for likely test or placeholder entries, and Operator-written channel copy for links; this processing occurs in the United States, your content is not used to train models, and none of it is shared with analytics providers;
  • Law enforcement or regulators where required;
  • Successors/assigns in a merger, acquisition, or corporate transaction.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising unless you explicitly consent via cookie/banner choices.

5) Retention

We retain event photos and associated contact information for as long as necessary to provide the Services, fulfill the purposes described in this Privacy Policy, and comply with our legal obligations. Operators may configure retention periods through Admin tools where available.

6) Your Choices & Rights

6.1 End Users

  • Access/Deletion. Request access to or deletion of your photos and related contact info via links provided with your event gallery or by emailing pip@movebooth.com. If you've asked us to stop texting you, we keep your number on our do-not-text list so we can honor that.
  • Opt-outs. For marketing emails, use the unsubscribe link. For texts from Movebooth, reply STOP.

6.2 Operators

Use account settings or contact us to exercise access, correction, or deletion for your account data. To stop marketing emails from us, use the unsubscribe link in any of them.

6.3 EU/UK and other regional rights

Where applicable, you may have rights to access, correct, delete, restrict or object to processing, and data portability. You may withdraw consent at any time. You may lodge a complaint with a supervisory authority.

7) Cookies, Analytics, and Ads

We use essential cookies and similar technologies for authentication, security, and core functionality. With consent where required, we use analytics/advertising cookies. You can manage choices via our Your Privacy Choices page or browser settings.

When you view an event gallery or a shared photo page, we collect device and usage data, including your IP address, through our analytics providers to measure page views and keep the Services working. This uses analytics cookies or similar browser storage, which you can block or clear in your browser settings.

We honor Global Privacy Control (GPC) signals where required. Our Your Privacy Choices page describes how California users can exercise their “Do Not Sell or Share My Personal Information” and “Limit the Use of My Sensitive Personal Information” rights.

8) Children

We do not knowingly collect personal information online from children under 13 without verifiable parental consent. End Users ages 13 and older may independently consent to use the Photo Features. For unaccompanied minors, the Operator must secure verifiable parental or guardian consent prior to use.

9) Security

We protect the information we handle with the measures below. This section describes what we do today.

  • Encryption in transit. Our websites and APIs use HTTPS (TLS), and our apps connect to our APIs over HTTPS.
  • Database storage. Our application database, which holds contact details collected at events, is hosted on storage that our hosting provider encrypts at rest.
  • Photo links. Photos, GIFs and videos are stored with our cloud storage provider and delivered by web link. Anyone who has a photo's direct link can open it without signing in, whether or not the Operator has made the event gallery public or protected it with a password. Share links only with people you want to see them. To have your photos deleted, see Section 6.
  • Accounts. Operator and administrator accounts require sign-in.
  • Logs and updates. We keep system logs to operate and troubleshoot the Services, and we monitor the software we rely on for known vulnerabilities.

No security program can guarantee absolute security.

10) International Transfers

We primarily process data in the United States and may transfer data internationally consistent with applicable law and approved transfer mechanisms (e.g., EU SCCs and UK addendum).

11) Changes to this Policy

We may update this Policy. Material changes will be notified and the “Effective” date will be updated. Continued use indicates acceptance.

12) Contact Us

Movebooth, LLC
7901 4th St N, STE 8225, St Petersburg, FL 33702
Privacy: pip@movebooth.com
Legal: legal@movebooth.com