Privacy Policy
Last updated: June 10, 2026 · Operated by Openground LLC (Ohio)
Short version: We temporarily store your photos to build your gallery. We delete everything after 30 days. We never sell your data. Face recognition data is only stored with your explicit consent and deleted on the same schedule.
Who we are
everkept is a product of Openground LLC, based in Ohio, USA. You can reach us at hello@emberphotos.com.
What data we collect
Photos and videos — When you connect your Facebook account or upload a zip file, we receive your photos and videos. These are stored temporarily in secure cloud storage (Amazon S3, US East) to power your gallery.
Face embeddings — We run face detection on your photos using InsightFace, an open-source model. This generates mathematical representations (embeddings) that let us group photos by person. We store embeddings — not face images — alongside your gallery data. Embeddings are deleted with everything else after 30 days.
Payment information — Payments are processed by Stripe. We never see or store your card number. Stripe's privacy policy applies to payment data.
Email address — If you contact us or purchase, we store your email to communicate with you about your gallery. We do not add you to marketing lists without a separate opt-in.
Usage logs — Standard server logs (IP address, browser type, pages visited). Not linked to your identity and not shared.
Cookies — We use a session cookie to keep you logged in during your visit. We also set a localStorage item to remember your cookie consent. No third-party tracking cookies are set.
How we use your data
- To generate your photo gallery and make it accessible via your unique link
- To group photos by person using face embeddings
- To process your payment via Stripe
- To send you transactional emails (gallery ready, expiry warnings) via Resend
- To understand product usage via PostHog and Google Analytics (anonymized)
- To respond to support requests
We do not use your photos or face data for advertising, training AI models, or any purpose beyond delivering your gallery.
Data retention
30 days. Your photos, videos, and face embeddings are automatically and permanently deleted 30 days after your gallery is created. If you renew, the clock resets for another 30 days. Your gallery link expires at the end of the active period.
Facebook / Meta data
everkept uses the Facebook Graph API with your permission to access your photos and videos. We request only user_photos and user_videos permissions. We do not request access to your messages, friends list, posts, or any other data. You can revoke everkept's access at any time in your Facebook settings under Settings → Apps and Websites.
everkept is an independent service, not affiliated with or endorsed by Meta Platforms, Inc.
Data sharing
We share data with the following service providers only as necessary to operate the Service:
- Amazon Web Services (S3, CloudFront) — stores and serves your photos and videos
- Modal Labs — runs GPU face detection processing
- Stripe — handles payment processing
- Railway — hosts the everkept web application and database
- Resend — sends transactional emails
- PostHog / Google Analytics — anonymized product analytics
We do not sell your data. We do not share your data with advertisers.
Security
Your photos are stored in a private Amazon S3 bucket, served only through signed CloudFront links tied to your gallery token. Face embeddings are stored in an encrypted database. We use HTTPS everywhere. No data is stored on our servers longer than 30 days.
Children
everkept is not directed at children under 13. We do not knowingly collect data from children. If you believe a child's data has been submitted, contact us and we will delete it immediately.
Your rights (GDPR / CCPA)
Depending on where you live, you may have the right to access, correct, or delete the data we hold about you, withdraw consent for processing, or request a copy of your data. To exercise any right, use the form below or email hello@emberphotos.com. We will respond within 30 days.
California residents: we do not sell personal information. You have the right to know what data we collect and to request deletion.
Data deletion & access request
Use this form to request deletion of your data, access to your data, or to revoke face-processing consent. We process all requests within 48 hours and confirm by email.
Changes to this policy
If we make material changes, we will update the date above and notify active users by email where possible.
Contact
Questions? Email hello@emberphotos.com. We read every message.
Openground LLC · 1284 Som Center Rd, Ste 169 · Mayfield Heights, OH 44124