Privacy Policy
Last updated: October 3, 2026
Introduction
Missions.Photos is a brand of Constellation ("we", "our", or "us"). Missions.Photos is a party photo service: an organizer buys an event, guests join it by scanning a QR code, and take photos against mission prompts. This policy covers this service only — not any other Constellation product.
It describes what personal information we collect, why, who receives it, where it is processed, and how long we keep it, in accordance with Québec's Act respecting the protection of personal information in the private sector (Law 25), Canada's Anti-Spam Legislation (CASL), and, for our US users, the California Consumer Privacy Act / California Privacy Rights Act (CCPA/CPRA).
Who we are
Constellation
Email: info@missions.photos
Personal Information We Collect
We limit collection to what is strictly necessary to run a party:
- Organizer: payer name and, if given, company name, collected during card payment, email address and password (account), the event's name, venue, and dates, as well as the timestamp of your adult confirmation.
- Guest: a name (chosen when joining), an optional email address, your choice to receive or not receive our marketing communications, the timestamp of your consent, and the timestamp of when you joined the event.
- Content: the photos you submit, your comments, and your reactions to other guests' photos.
- Cover image: the image the organizer picks for their event's welcome page. Picked at purchase, it is first kept in a private space, from which it is deleted no later than 8 days after the purchase, whether or not the purchase is completed. The image shown in the event is deleted with it.
- Technical: a hashed (non-reversible) version of your IP address, used to rate-limit requests and prevent abuse. Your display preference (interface language) is kept only in your browser's local storage (localStorage) — it is never sent to us. The language you choose at the time of purchase, however, is stored with your order so we can send our emails in it.
- Contact form: name, email address, and, if you provide it, phone number.
- Portal help: when a signed-in organizer uses the portal help form, we keep the message, their email address, their name if their account has one, the language of the request, the event it concerns, and our replies. By default the form also attaches a screenshot of the portal screen they were viewing. They can remove it before sending. Guests' photos are left out of the screenshot. We delete the screenshot 30 days after we resolve the request, or with the request if that comes first.
- Waitlist outside Canada and the United States: email address, the billing country you chose, and the page language. If you tick the newsletter box, we also sign you up for the newsletter once you confirm by email.
Purposes of Collection
Your information is collected and processed solely to:
- create and run your event, or your participation in one;
- display the event's photo feed to guests who have joined;
- automatically moderate submitted content (see "Automated Decision-Making" below);
- send you the emails the service requires (confirmation, souvenir, cancellation notice);
- send you our newsletter, only if you gave explicit consent;
- respond to requests submitted through our contact form;
- limit abuse and keep the service technically secure;
- meet our legal and regulatory obligations.
We do not sell or rent any personal information.
Who Receives Your Information
We rely on the following processors to run the service:
- Google Firebase / Google Cloud — authentication, database, photo storage, and server functions.
- Google Cloud Vision (SafeSearch) — automatically scans every submitted photo before it is published.
- Stripe — processes the organizer's payment; we never see or store your card number.
- An SMTP provider — delivers our transactional emails and newsletter.
- Google reCAPTCHA / Firebase App Check — tells a real person apart from an automated bot.
None of these processors is allowed to use your information for its own purposes; each handles it for us, under our instructions.
Transfer Outside Québec
Your photos and the event's data are stored in the northamerica-northeast1 region (Montréal). The code that runs the service (our server functions) runs in the us-central1 region, in the United States: a piece of personal information can
therefore pass through a US server while a request is processed. We disclose this here and
require our providers to give contractual guarantees equivalent to our own protection
standards.
Automated Decision-Making
Every photo a guest submits is automatically scanned by Google Cloud Vision (SafeSearch) at upload time, with no human involved. This scan decides whether the photo is published to the event's feed or refused. The event's organizer can, at any time, manually exclude any photo already published.
Retention Period
Photos, the event's data, and the souvenir album (if published) stay accessible for the length set by the package purchased — 3, 6, or 12 months after the event ends. Republishing the album does not extend this period: it is fixed from the moment the event ends.
This album is more than a copy of the photos: at the moment it's published, it also keeps guests' names and the comments left on the event, for the same period.
Once that period ends, guest access to the photos, the event's data, and the album stops — the album's own check is immediate, and the live event feed is cut by a process that runs once a day, so within 24 hours at the latest. The organizer keeps access during the grace period that follows, so they can still act. A link to one specific photo that was already shared may keep working until that file is erased. The data itself (photos, album, ZIP file, event record) is permanently erased during that grace period, at most 15 days after access stops.
Three records outlive this period, each for its own reason. Your order record — the amount paid, the package chosen, your organizer contact details — is a financial record: we keep it 7 years. Each order's invoice shows the payer's name, their company's name if they gave one, and the event name. Each payment on a personalized quote, deposit and balance alike, also gets its own invoice, showing the name entered when the quote was accepted, the company's name if one was given, and the event name. It is a tax record: we keep it 7 years from the day it is issued, even if you delete your account, and then erase it. Deleting your account erases your name and email address from the order record. When one of our staff looks at a guest's photo to help you, we also keep a log of that access — who looked, at what, and why — also for 7 years, so we can account for it. If you submit a request for a personalized quote through the pricing form, everything you enter there — your name, email address, the date you have in mind, your guest estimate and your message — is also kept for 7 years from when it was sent, along with a fingerprint of your IP address. These records are erased after 7 years, counted from their own creation date.
Each portal help request is kept for one year after it is marked as resolved, or, if it is never resolved, for one year after it is received, and then deleted. It is deleted earlier if the associated account is deleted.
The address left on the waitlist is used once, to tell you the service has opened in your country. We delete it after that email or 12 months after your request, whichever comes first. A newsletter subscription, if you asked for one, follows the newsletter rules.
Your Rights (Law 25)
You may exercise the following rights at any time by writing to info@missions.photos:
- Right of access: obtain confirmation that your data is being processed and receive an understandable copy of it.
- Right to rectification: have inaccurate, incomplete, or outdated information corrected.
- Right to erasure: request the permanent deletion of your data.
- Right to portability: receive your information in a structured, commonly used format.
- Withdrawal of consent: revoke your agreement to any consent-based processing, such as the newsletter.
A guest can also ask to be "forgotten" directly from the app: we then permanently delete their photos and remove their comments and reactions from the event. If that erasure fails, even partially, the operation reports as an error rather than finishing silently half done.
People in the Photographs
A guest may photograph other people at the event — people who never created an account and never agreed to anything with us. It is the guest taking the photo who is responsible for getting the consent of the people who appear in it before submitting it. Someone shown in a photo who wants it taken down can ask the event's organizer, or write to us at info@missions.photos.
Ask for a Photo to Be Removed
Anyone who appears in a photo, or the parent or guardian of a minor who appears in it, can ask for it to be removed by writing to info@missions.photos with the event's name and a description of the photo. Within 2 business days of receiving the request, we hide the photo and forward the request to the organizer, who decides with that person, since the organizer collected the consents. The organizer may restore a hidden photo only if they hold the consent of the person pictured, or of a parent or guardian for a minor, and can show it. Copyright infringement notices go to the same address.
US Residents (CCPA/CPRA)
If you live in California or elsewhere in the United States, the categories of personal information described above (identifiers, content you submit, technical data) are what we collect about you. You hold the same access, rectification, and deletion rights listed above, and you may exercise them through an authorized agent. We do not sell or share your personal information as those terms are defined under the CCPA/CPRA.
Minors
Missions.photos is not intended to be purchased or used independently by a minor. Responsibility for minors attending an event rests with the organizer: at the time of purchase, the organizer confirms they are an adult and hold parental authority, or the consent of a parent or guardian, for any minor who will take part.
A form for a parent or guardian to sign is available: See the parental authorization forms (French and English)
Data Security
We deploy technical and organizational security measures to prevent unauthorized access, alteration, disclosure, or destruction of your information, including encryption of data in transit and at rest, access restricted to staff who need it, and logging of access.
Changes to This Policy
We may amend this policy to reflect changes in the service or the legal framework. The revision date at the top of the page is authoritative. For any material change, we will notify you directly by email.
Contact Us
For any question, complaint, or to exercise your rights, write to info@missions.photos.