Privacy Policy
Last updated: June 21, 2026 · Operated by Openground LLC (Ohio)
Short version: We store your photos and videos to build your private gallery. If you buy, we keep it for as long as you want — and you can download a full copy or delete everything anytime. If you don't buy, we delete your preview within 30 days. We never sell your data or use it to train AI. Face grouping runs only with your explicit consent, and deleting your gallery deletes your face data with it.
Who we are
everkept is a product of Openground LLC, based in Ohio, USA. You can reach us at hello@emberphotos.com.
What data we collect
Photos and videos — When you connect your Facebook or Instagram account or upload an export file, we receive your photos and videos. These are stored in secure cloud storage (Amazon S3) to power your gallery — kept for as long as you keep a paid gallery, or deleted within 30 days for an unpaid preview.
Face embeddings — With your explicit consent, we run face detection (using InsightFace, an open-source model) to generate mathematical representations (embeddings) that let us group your photos by person. We store embeddings — not face images. Face grouping is optional and off unless you turn it on, and you can withdraw consent at any time. When you delete your gallery — or when an unpaid preview is purged — your face embeddings are permanently deleted with it.
Payment information — Payments are processed by Stripe. We never see or store your card number. Stripe's privacy policy applies to payment data.
Email address — If you contact us or purchase, we store your email to communicate with you about your gallery. We do not add you to marketing lists without a separate opt-in.
Usage logs — Standard server logs (IP address, browser type, pages visited). Not linked to your identity and not shared.
Cookies — We use a session cookie to keep you logged in during your visit. We also set a localStorage item to remember your cookie consent. No third-party tracking cookies are set.
How we use your data
- To generate your photo gallery and make it accessible via your unique link
- To group photos by person using face embeddings
- To process your payment via Stripe
- To send you transactional emails (gallery ready, expiry warnings) via Resend
- To understand product usage via PostHog and Google Analytics (anonymized)
- To respond to support requests
We do not use your photos or face data for advertising, training AI models, or any purpose beyond delivering your gallery.
Data retention
Paid galleries are kept for as long as you want them. Your gallery stays live, and you always have a complete download. You can delete everything at any time. A paid gallery left unused for years (or an unusually large one) may be moved to download-only — we'll email you first, and you never lose your photos or videos.
Unpaid previews — your photos, videos, and any face embeddings are automatically and permanently deleted within 30 days.
Deletion is always available — one click, anytime — and removes your photos, videos, and face data together.
Facebook / Meta data
everkept uses the Facebook Graph API with your permission to access your photos and videos. We request only user_photos and user_videos permissions. We do not request access to your messages, friends list, posts, or any other data. You can revoke everkept's access at any time in your Facebook settings under Settings → Apps and Websites. If you upload an export file instead of connecting your account, everkept never accesses your Facebook or Instagram account at all.
everkept is an independent service, not affiliated with or endorsed by Meta Platforms, Inc.
Data sharing
We share data with the following service providers only as necessary to operate the Service:
- Amazon Web Services (S3, CloudFront) — stores and serves your photos and videos
- Modal Labs — runs GPU face detection processing
- Stripe — handles payment processing
- Railway — hosts the everkept web application and database
- Resend — sends transactional emails
- PostHog / Google Analytics — anonymized product analytics
We do not sell your data. We do not share your data with advertisers.
Security
Your photos are stored in a private Amazon S3 bucket, served only through signed CloudFront links tied to your gallery token. Face embeddings are stored in an encrypted database. We use HTTPS everywhere. Unpaid previews are removed within 30 days; paid galleries are kept until you delete them.
Children
everkept is not directed at children under 13, and we do not knowingly collect data from children as users. everkept is intended for adults organizing their own photos and videos. By turning on face grouping, you confirm you are the adult account holder and you consent to processing the media you provide, which may include family members, including children. If you believe a child's data has been submitted improperly, contact us and we will delete it immediately.
Your rights (GDPR / CCPA)
Depending on where you live, you may have the right to access, correct, or delete the data we hold about you, withdraw consent for processing, or request a copy of your data. To exercise any right, use the form below or email hello@emberphotos.com. We will respond within 30 days.
California residents: we do not sell personal information. You have the right to know what data we collect and to request deletion.
Data deletion & access request
Use this form to request deletion of your data, access to your data, or to revoke face-processing consent. We process all requests within 48 hours and confirm by email.
Changes to this policy
If we make material changes, we will update the date above and notify active users by email where possible.
Contact
Questions? Email hello@emberphotos.com. We read every message.
Openground LLC · 1284 Som Center Rd, Ste 169 · Mayfield Heights, OH 44124