The Grand Moment helps couples and hosts picture their celebration and find the studios who can make it real. That work runs on personal details: your date, your guest count, the photos that inspire you. This policy explains, in plain terms, what we collect, who sees it, and the choices you have.
Who we are
The Grand Moment LLC ("we", "us"), based in Georgia, United States. We run thegrandmoment.events and decide how the personal data described here is used, which makes us the controller (or "business") for it.
For anything privacy related, write to hello@thegrandmoment.events. For everything else, hello@thegrandmoment.events.
What we collect and why
In shortWhat you tell us to plan your event, what studios tell us to list their business, and what your browser tells us when you visit.
What you give us
- Your event. Event type, date, guest count, city or venue, budget range, style and mood choices, and the vision you describe. We use this to create your vision and match you with studios.
- Your contact details. Name, email and, if you choose, phone. We use these to send your vision, sign you in with secure links, and pass your details to a studio when you ask us to (see section 4).
- Photos you upload, such as inspiration images or pictures of your venue. See section 3.
- Messages between you and studios on the platform, plus reviews you write.
- Studio accounts. Business name, contact details, portfolio, pricing, service area and any documents a studio uploads. Payment onboarding details go to our payment processor, not to us.
- Payments. Our payment processor handles card and bank details. We receive only payment status, amounts and identifiers such as the last four digits of a card.
What we collect automatically
- Device and connection data: IP address, browser, device type, and an approximate location (country, region, city) derived from the IP address. We use it for security, fraud and bot prevention, and to understand where visitors come from.
- Usage data: pages viewed, the link or ad that brought you here, clicks, scroll depth and how far you get through our forms. This is stored in our own database (our "analytics events").
- Session recordings of how pages are used, with form inputs masked. See section 7.
- Cookies and similar technologies, including advertising pixels. See section 6 and our Cookie Policy.
Why we use it
To provide the service you asked for (your vision, your matches, your account); to keep the platform safe; to measure and improve the site; to send service messages and, if you have not opted out, occasional planning emails; to advertise The Grand Moment and measure whether those ads work; and to meet legal obligations. We do not sell personal data for money.
Your photos and AI
In shortYour photos are used to create your vision. We don't sell them, and we don't use them in our marketing without your written permission.
When you upload a photo or describe your vision, we send that content to AI service providers that generate images and text for you. They process your content on our behalf to return a result, under their own business terms and privacy policies, which apply to that processing.
- We do not sell your photos or your generated visions.
- We do not use images of couples, or images you upload, in our marketing, social posts or ads without your written permission.
- The studios matched to you can see your generated vision as part of your brief (section 4).
- You can ask us to delete your photos and visions at any time by writing to hello@thegrandmoment.events.
What studios see
In shortYour top matches see your brief and first name. Your email and phone go to a studio only when you choose.
- Your top three matches. When your brief is ready, up to three of your best-matched studios can see your vision, event date, guest count, city, budget range and your first name. They do not see your email address, phone number or last name at this stage.
- When you choose to connect. Your contact details go to a studio only when you reply to that studio or tap Share my contact. Then that studio can reach you directly, and its own privacy practices apply to what it does with your details.
- When you write first. If you contact a studio directly, for example from its profile, you are sharing your contact details with that studio.
- Public profiles. Studio profiles, portfolios and reviews you publish are visible to anyone visiting the site.
Trackers and service providers
In shortEvery outside company that receives personal data from the site, by name.
Advertising (you can turn these off)
- Meta Platforms (Facebook and Instagram). The Meta Pixel in your browser, and the Conversions API from our server, tell Meta when someone views key pages or becomes a lead, so we can measure our ads and reach similar people. Server events include your IP address, browser, Meta cookie identifiers and hashed (scrambled) email, phone and name.
- Google Ads. The Google tag records ad clicks and conversions. Enhanced conversions send a hashed email, phone and name with a conversion.
- Pinterest. The Pinterest tag records page visits and leads from Pinterest ads, with a hashed email when you become a lead.
Analytics (you can turn these off)
- Google Analytics 4, when enabled, through the same Google tag.
- Site statistics from our hosting provider, which count visits and measure page speed without cookies.
- Our own analytics events (page views, clicks, scroll depth, form progress) and our own session recordings. These stay in our database and are not shared with other companies.
Service providers (needed to run the site)
- Hosting and file storage, including uploaded photos and generated images.
- Database hosting.
- Email delivery.
- Payment processing and studio payouts.
- Security and bot protection on our forms.
- Address and venue search.
- AI service providers (section 3).
These providers act on our instructions. We also share data when the law requires it, to protect our rights or the safety of others, and with a buyer or successor if our business is sold or reorganized, in which case this policy continues to apply to your data.
Session recordings
With analytics on, we record how pages are used (mouse movement, clicks, scrolling and page changes) so we can find and fix what gets in people's way. We use our own recorder, and the recordings stay in our own systems.
Everything typed into form fields is masked before it leaves your browser, including email, phone and password fields, and email addresses, phone numbers and sign-in tokens are scrubbed from error logs and page addresses. Signed-in staff are not recorded. Recordings are deleted after 30 days.
How long we keep data
- Session recordings: 30 days.
- Security logs: when we refuse a request that looks like an attack, we keep a record of it (time, IP address, approximate location, browser and the address requested) for 90 days.
- Your event brief, visions and photos: while your account or brief is active, or until you ask us to delete them.
- Account data: while your account is open, and up to two years after it closes for support and dispute handling.
- Payment and tax records: up to seven years, as accounting and tax law require.
- Analytics events: kept to measure the service over time. We are setting a fixed limit and will state it here when it is in place.
- Cookies: see the durations in our Cookie Policy.
When we no longer need data, we delete it or remove what identifies you.
Your rights in the US
In shortKnow, delete, correct, and opt out of the sale or sharing of your data for targeted ads. Use Your Privacy Choices, Global Privacy Control, or email us.
Residents of California and of other states with privacy laws (including Virginia, Colorado, Connecticut, Utah, Texas, Oregon and others) have rights over their personal data. We extend the same rights to every US visitor.
- Know and access what we hold about you, and get a copy.
- Correct data that is wrong.
- Delete your data, subject to records the law requires us to keep.
- Opt out of sale, sharing and targeted advertising. We do not sell personal data for money. When advertising is on, Meta, Google and Pinterest receive identifiers and activity from our site to measure and target ads. Under California law that counts as "sharing" for cross-context behavioral advertising, and some states may treat it as a "sale" or as targeted advertising. Opt out with or a Global Privacy Control signal, which stops this for your browser, including the server-side events.
- Limit sensitive data. We do not collect sensitive personal information to infer things about you.
- No discrimination for using any of these rights.
- Appeal. If we decline a request, you can appeal by replying to our answer, and we will respond within the time your state requires.
To make a request, email hello@thegrandmoment.events. We will confirm your identity, usually by writing to the email on file, and answer within 45 days. An authorized agent may act for you with your signed permission.
In the last 12 months we collected these categories of personal information: identifiers (name, email, phone, IP address, cookie IDs); commercial information (event details, budget range, purchases); internet activity (pages, clicks, recordings); approximate location; photos you upload; and inferences such as your style preferences. The sources, purposes and recipients are described above.
Your rights in the EU and UK
If you are in the European Economic Area, the United Kingdom or Switzerland, data protection law gives you the right to access, correct, delete, restrict or object to our use of your data, to receive it in a portable format, and to withdraw consent at any time without affecting earlier use. You can also complain to your local data protection authority.
Our legal bases are: performing our service for you (your vision, matches and account); our legitimate interests in keeping the platform secure and improving it; your consent, for analytics and advertising cookies and recordings; and legal obligations. Email hello@thegrandmoment.events to use any of these rights.
Global Privacy Control
We honor Global Privacy Control. If your browser or extension sends a GPC signal, we treat it as a request to opt out of the sale or sharing of your personal data for that browser: the Meta, Google Ads and Pinterest trackers do not load, and our server does not send conversion events to them. GPC applies even if you clicked Accept.
Security and transfers
We use encryption in transit, access controls, hashed passwords and single-use sign-in links, and we limit staff access to what the work needs. No system is perfectly secure, so we cannot promise absolute security.
We are based in the United States and our providers process data mainly in the United States. When data from the EEA, UK or Switzerland is transferred, we rely on the legal transfer mechanisms our providers offer, such as Standard Contractual Clauses.
Children
The Grand Moment is for adults planning events. It is not directed to children under 13, or under 16 in the EEA, UK and Switzerland, and we do not knowingly collect their personal data. We do not sell or share the personal data of anyone we know to be under 16. If you believe a child has given us personal data, write to hello@thegrandmoment.events and we will delete it.
Changes to this policy
When our practices change, we update this page and the date at the top. If a change is significant, we will tell you on the site or by email before it takes effect. This version was last updated on October 22, 2026.
Contact
The Grand Moment LLC
Georgia, United States
Privacy: hello@thegrandmoment.events
General: hello@thegrandmoment.events