This page is maintained by the M23 Booth team to explain, in plain language, what data the app handles when you host an event or scan a guest QR code. It describes controls visible in the product today and is not a certification or legal opinion — for binding terms see our Terms of Service.
Who runs M23 Booth
M23 Booth is operated by the studio account holder you signed up under ("we", "us"). The app runs on the Lovable Cloud platform, which provides hosting, database, authentication and storage infrastructure.
What we collect
- Account data — email address, display name and studio branding (logo, colors, contact email) you enter in Studio Settings.
- Event data — event name, slug, default effect and any branding overlays you configure per event.
- Clips — short video recordings (typically 15–30 seconds) captured at the booth, optionally re-encoded with an on-device effect before upload.
- Operational metadata — clip counts, effect selected, upload timestamps and the unguessable share token attached to each clip.
- Guest leads — only fields a host explicitly enables on a guest-facing lead form. The live booth does not require guests to enter any personal information to receive their clip.
What we do not collect
- No email or SMS capture in the guest clip flow.
- No third-party advertising trackers or ad-network cookies.
- No social-media data beyond the standard Google sign-in identifier, when used.
How clips are stored and shared
Clips live in private cloud storage. They are never publicly listed. Each clip is reachable only through a unique, unguessable share token embedded in the QR code shown at the booth. Public access flows through server endpoints that validate the token before streaming the file — the underlying storage bucket does not allow anonymous reads.
How long we keep data
Clips remain in your event until you delete them. Deleting a clip removes the file from storage and immediately revokes its share link. Account and event records are retained while your studio is active and removed on request.
Sub-processors
We rely on the Lovable Cloud platform (database, authentication, storage) and, when configured, Google Sign-In for authentication. We do not sell clip content or share it with any third party.
Your choices
- Delete any clip, event or your entire studio from inside the app.
- Request a copy or full deletion of your account data by emailing hello@m23booth.co.za.
Contact
Privacy questions, deletion requests or security disclosures: hello@m23booth.co.za.