Privacy policy

Last updated 15 October 2026

Petal QR is run by James Massari, a sole trader based in Victoria, Australia (“we”, “us”). This policy explains what we collect when couples use Petal QR and when guests upload to a Petal QR page, why, and what control you have.

The short version

• Guests’ photos and videos go straight from their phone into the couple’s own Google Drive. We never keep a copy.
• We can only see the folder and files Petal QR creates in your Drive, nothing else.
• We don’t sell data, show ads, or use tracking cookies.

If you create an album (couples)

When you sign in with Google we receive your name, email address and Google account ID. We also receive a Google access token, which we store encrypted, so Petal QR can work with your album folder while you’re away, for example when a guest uploads at your reception.

We store the album details you enter: names, wedding date, web address, theme, page text and any logo you upload. When you pay, Stripe processes your card. We never see or store card numbers; we keep a record of the payment amount, currency, date and Stripe’s reference numbers.

If you upload to an album (guests)

You don’t need an account and we don’t ask for your name. The files you choose are sent directly from your device to the couple’s Google Drive folder. To make the upload work, our server briefly holds a temporary upload link for up to six hours; it doesn’t hold the file itself (except for passing pieces through if your network blocks the direct route).

Each file keeps its original name and a note of whether you chose to show it in the album. Once uploaded, files belong to the couple and are governed by their Google account. If you want a file removed, ask the couple, or contact us and we’ll pass your request on.

Google user data

Petal QR asks Google for your basic profile (name, email) and the drive.file permission. That permission only lets Petal QR see and manage files and folders it created. It cannot see anything else in your Drive.

We use it only to: create your album folder; let guests upload into it; read the list of files guests chose to share so we can show your album; turn sharing links for those files on or off when you change your album setting; and read your storage usage so we can warn you when your Drive is nearly full.

Petal QR’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We don’t use Google user data for advertising, we don’t sell it, we don’t use it to train AI models, and no person reads it unless you ask us to (for support), it’s needed for security, or the law requires it.

You can remove Petal QR’s access at any time at myaccount.google.com/permissions. Your photos stay in your Drive; your guest page will pause uploads until you reconnect.

Who we share data with

Only the services that run Petal QR: Cloudflare (hosting and storage of album settings), Stripe (payments) and Google (sign-in and your Drive). Each processes data under its own privacy terms. We may disclose information if Australian law requires it.

Cookies

We use one cookie to keep you signed in, and two short-lived cookies during Google sign-in to protect it from forgery. We don’t use analytics or advertising cookies.

How long we keep data

We keep your account and album details while your account exists. Ask us to delete your account and we will delete your details and stored Google token within 30 days; files in your Drive are not affected. Payment records are kept as long as Australian tax law requires (generally five years).

Your rights

You can ask to see, correct or delete the personal information we hold about you. We handle personal information in line with the Australian Privacy Principles. If you’re unhappy with how we’ve handled a request, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

Children

Albums are created by adults. Guests of any age may appear in photos the couple’s guests upload; those files are held in the couple’s Drive, not by us.

Changes and contact

If we change this policy we’ll update the date above, and show a notice in your dashboard if the change is significant. Questions or requests: email info@petalqr.com or use our contact form.