videowishes
Set up your event
Home / Privacy
Privacy

Privacy Policy.

What we collect when you host an event or leave a video message, who can see it, and how to have it deleted.

Last updated: October 5, 2026 TODO: set the real effective date after legal review

TODO: draft for legal review — do not treat as final

Who we are

VideoWishes (videowishes.com) is operated by Restaurant Logic LLC, a Michigan limited liability company TODO: confirm state of organization and add a mailing address. In this policy, "we," "us," and "our" mean Restaurant Logic LLC. Questions about this policy or your information: privacy@videowishes.com TODO: confirm this inbox exists and is monitored.

VideoWishes has two kinds of users. Hosts create an account, set up an event, and share a recording link or QR code. Guests open that link on their own phone and record a short video message for the host. Guests don't create an account.

What we collect from hosts

  • Account details: your email address and password. Sign-in is handled by our authentication provider, Clerk; we never see or store your password.
  • Event details: the event name, type, and date, and the card you design for guests: the line above the name, the display name(s), your message to guests, your accent color, and an optional photo you upload.
  • Plan details: your event's plan and status. During our free launch period we don't collect payment information. TODO: update this section when paid plans and Stripe go live

What we collect from guests

  • Your name or names, as you type them before recording. Your name is attached to your video so the host knows who it's from.
  • Your video message, including the picture and sound recorded by your phone's camera and microphone. Recording starts only when you press record, and your browser asks for camera and microphone permission first. You can review your clip before sending, and nothing is uploaded until you choose to send it.
  • A still thumbnail taken from your video, so the host can see it in their gallery.
  • The date and time your message was sent.

We don't ask guests for an email address, phone number, or account.

What we collect automatically

  • Analytics: we use Google Analytics on videowishes.com to understand how people use the site, such as which pages are visited, the type of device and browser, and approximate location. Google Analytics uses cookies. On host and guest pages we strip event codes from page addresses before they're sent, and we never send guest names, email addresses, or event codes to Google Analytics. TODO: confirm Google Signals and ads personalization are off in GA4, and decide whether a cookie notice is needed
  • Sign-in cookies: Clerk sets cookies to keep hosts signed in.
  • Server logs: like most websites, our hosting provider records technical information such as IP addresses, browser type, and the pages requested, which we use to run and secure the service.
  • Fonts: our pages load fonts from Google Fonts, which means your browser connects to Google's servers.

How we use information

  • To run VideoWishes: show the host's card to guests, deliver guests' messages to the host's gallery, and let the host download them.
  • To process videos so they play everywhere: we automatically convert clips to the MP4 format and create thumbnails. The original file is kept alongside the converted copy.
  • To provide support, keep the service secure, prevent abuse, and fix problems.
  • To understand and improve how the site is used.
  • To comply with the law.

We don't sell personal information, and we don't use guest videos in our own marketing without permission. TODO: automatic highlight reels are coming soon; update this section before launch if that feature processes videos with AI or a new service provider

Who can see guest videos

  • The host of the event can watch, download, and delete every message sent to their event. Once a host downloads a video, what they do with it is up to them.
  • Our team can access event details and videos when needed to operate the service, provide support, or investigate misuse. For support, an administrator may sign in to a host's account with the host's knowledge. TODO: confirm admin access practice and wording
  • Service providers who host and process data for us (listed below), only to provide the service.
  • Others when required by law, or to protect the rights, safety, or property of our users, us, or the public.

Videos are stored at web addresses that aren't published or listed anywhere, but they aren't password-protected: anyone who has the direct link to a video can view it. TODO: review this access wording with counsel and engineering before launch — see the open items list

Service providers

  • Vercel: website hosting and server functions
  • Clerk: host sign-in and account management
  • Supabase: database for host and event details (United States)
  • Cloudflare R2: video, thumbnail, and card photo storage
  • Google: Google Analytics and Google Fonts

TODO: confirm this list is complete, including SMS/email vendors once chosen and Stripe once billing is live; confirm R2 storage region

How long we keep information

We keep guest videos, thumbnails, and event details until the host deletes them or asks us to delete their event or account. There is currently no automatic expiration. Host account details are kept while the account exists. TODO: decide on a retention period, e.g. how long after the event clips are kept, and whether archived events are deleted

Deleting videos and accounts

  • Hosts can delete any message, or several at once, from their event gallery. Deleting a message removes the video, its thumbnail, and any converted copy from our storage. To delete a whole event or your account, email privacy@videowishes.com TODO: confirm this inbox exists and is monitored.
  • Guests who want a message removed can ask the host to delete it, or email us with the event name, the name you entered, and roughly when you recorded. We'll confirm the request and delete the message. TODO: decide how guest requests are verified and the response time we commit to

We can't delete copies a host has already downloaded or shared.

Your choices and rights

You can ask to access, correct, or delete personal information we hold about you by emailing privacy@videowishes.com TODO: confirm this inbox exists and is monitored. Depending on where you live, you may have additional rights under local law. TODO: legal review: state privacy laws (e.g. California) and GDPR/UK GDPR if serving users outside the US

Security

We use encrypted connections (HTTPS), require hosts to be signed in to their own account before they can edit their event or delete messages, and keep our database closed to direct access from browsers. No system is perfectly secure, so we can't guarantee absolute security.

Children

Hosts must be at least 18. VideoWishes isn't directed to children, but guests at family events may include young people. Children under 13 should record a message only with a parent's or guardian's permission. If you believe a child under 13 sent us personal information without that permission, contact us and we'll delete it. TODO: COPPA review — bar/bat mitzvah and birthday pages will attract guests under 13

Where information is processed

VideoWishes is operated from the United States, and information is stored and processed in the United States. TODO: confirm for every provider

Changes to this policy

We may update this policy. We'll change the date at the top, and for significant changes we'll let hosts know by email or on the site.

Contact

Restaurant Logic LLC · privacy@videowishes.com TODO: confirm this inbox exists and is monitored TODO: add mailing address