BoothLab
Create my pack

Last updated 10 October 2026

Privacy Policy

Introduction

Algoritmo Software Inc., trading as BoothLab (“we”, “us” or “our”), takes its obligations under data protection laws seriously. This Privacy Policy (“Policy”) sets out our commitment to respecting your privacy and to complying with the applicable laws governing how and when your personal information is collected, used and disclosed while you access our Website and Services (each as defined in our Terms and Conditions).

Please read this Policy together with any other privacy notice we may provide on specific occasions when we collect or process personal information about you, so that you are fully aware of how and why we are using your information. This Policy supplements those notices and is not intended to override them.

Your access to and use of the Services is subject to our Terms and Conditions. Capitalized terms used but not defined in this Policy have the meaning given in the Terms and Conditions.

About us

BoothLab makes matched design kits (print templates, attract screens and touchscreen buttons) for photo booth operators. It is owned and operated by Algoritmo Software Inc., which has offices (at the time of writing) in Canada.

For the purposes of applicable data protection law, Algoritmo Software Inc. is responsible for this Policy and is the controller of your personal information. Where an Account Holder includes personal information about other people in an event brief (for example the names of a couple or a Client’s logo), the Account Holder is responsible for having the right to share it with us.

U.S. residents: if you live in the United States, please also see the US Annex below for your rights under applicable U.S. privacy laws, including the California Consumer Privacy Act.

Definitions

  • “Account Holder” means the individual or business that creates an Account on the Website or uses our Services.
  • “Client” means the business or individual for whom an event is being run. This may be the Account Holder, or someone who has engaged the Account Holder to run their event.
  • “Personal Information” means any information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with an identified or identifiable natural person or household.

1. How we collect information

  • Information you give us. This is information you provide by using our Website and Services or by corresponding with us, for example when you create an Account, brief an event, upload a logo or reference image, place an order or report a problem. If you contact us, we keep a record of that correspondence.
  • Information we collect about you and your device. When you use our Website or Services we automatically collect technical information, including the Internet protocol (IP) address used to connect your device to the Internet, your browser type and version, and the date and time of your sign-ins and requests.
  • Information we receive from other sources. If you sign in with Google, Google gives us your name, email address and profile picture. Paddle, our merchant of record, tells us that an order has been paid, with your email address and the order details. We do not receive your card number.

We may also collect, use and share aggregated data, such as statistics about how the Services are used. Aggregated data may be derived from your Personal Information but does not directly or indirectly reveal your identity. If we combine aggregated data with your Personal Information so that it can identify you, we treat the combined data as Personal Information under this Policy.

2. Types of information we collect

We collect information only as far as is necessary or appropriate for your interaction with us.

  • Profile and contact information: your name (if you provide it or sign in with Google) and your email address. Account Holders.
  • Event content: your event briefs, including wording such as names, dates and titles, and the logos and reference images you upload, along with the designs made from them and your edits in the Studio. Account Holders.
  • Transaction information: your orders, credit balance and credit history, and the order details Paddle sends us. Account Holders.
  • Technical information: IP address, browser type and version, and sign-in and session records. Website visitors and Account Holders.
  • Communications: emails you send us and the service emails we send you. Website visitors and Account Holders.
  • Aggregated data: statistical data about use of the Services. Website visitors and Account Holders.

We do not collect biometric information. Reference images you upload are used only as visual inspiration for your designs, and we do not use facial recognition or try to identify anyone in them. We do not collect precise location data.

3. How we use the information we collect

We use your information for the purposes identified in this Policy or for a related purpose, and only when the law allows us to. The lawful basis for each purpose is shown in brackets.

  • Registration and sign-in: to create your Account and sign you in with Google or an email link. (Contract; legitimate interest in providing services to Account Holders.)
  • Providing the Services: to generate, store, deliver and let you edit your designs, and to carry out our obligations under our contract with you. This includes sending your brief and uploaded images to the artificial intelligence providers that generate your designs. (Contract.)
  • Payments and credits: to fulfil orders that Paddle has processed and to keep your credit balance and order history. (Contract; legitimate interest in collecting fees for the services we provide.)
  • Service communications: to send sign-in links, receipts and notices that a pack is ready, and to answer your questions. (Contract; legitimate interest.)
  • Administration and security: to administer and protect our business, Website and Services, including rate limiting, preventing abuse of free previews, troubleshooting, error monitoring and auditing. (Legitimate interest in keeping the Website and Services secure.)
  • Improving the Services: to understand how the Services are used and to maintain and improve them. (Legitimate interest.)
  • Marketing: to send you news and offers by email, only if you have given your consent. You can withdraw that consent at any time. (Consent.)
  • Legal obligations: to keep records and respond to lawful requests. (Legal obligation.)

We do not use your briefs, uploads or designs to train our own artificial intelligence models, and we do not make decisions about you based solely on automated processing that produce legal or similarly significant effects. We do not run advertising on the Website and do not use advertising or cross-site tracking technologies.

There are limited circumstances in which we may collect, use or disclose Personal Information without your consent, including when permitted or required by law, in an emergency that threatens an individual’s life, health or security, to obtain legal advice, to collect a debt, to protect ourselves from fraud, or to investigate an anticipated breach of an agreement or a contravention of law.

4. How we share the information we collect

We disclose Personal Information to fulfil the purposes in this Policy and to provide the Services, as follows:

  • within our organization, including with our affiliates, where necessary for product development, maintenance and compliance;
  • with the service providers that help us run the Services:
    • Paddle, our merchant of record, which takes payment and holds your card and billing details;
    • Railway, which hosts our servers and database, and Cloudflare, which stores your files;
    • Google, if you choose to sign in with it;
    • OpenAI and Google, whose image and vision models receive your brief and images in order to generate your designs;
    • Postmark, which sends our emails; and
    • Sentry, which reports software errors to us;
  • with third parties to whom we may sell, transfer or merge parts of our business or assets, or whose business we acquire or merge with. If a change happens to our business, the new owners may use your Personal Information in the same way as set out in this Policy; and
  • where required by law, or in the good faith belief that disclosure is reasonably necessary to comply with legal process, enforce our Terms and Conditions, respond to claims, or protect the rights, property or safety of Algoritmo Software Inc., our affiliates, our service providers or the public.

We do not sell your Personal Information.

5. Retention of your personal information

We keep your Personal Information only for as long as necessary to fulfil the purposes we collected it for.

Your events, uploads and designs stay in your Account so that you can re-open, edit and re-export them, until you ask us to delete them or to delete your Account. Order and tax records are kept for as long as the law requires. In setting other retention periods we consider the amount, nature and sensitivity of the information, the risk of harm from unauthorized use or disclosure, the purposes for which we process it, and applicable legal and regulatory requirements and limitation periods.

To have your Account and its files deleted, contact us at privacy@boothlab.ai.

6. International data transfer

The Website and Services are provided using servers and service providers located in various countries, including the United States. Personal Information about you may therefore be transferred, processed and stored outside the country where you use the Website or Services, including outside the European Economic Area (EEA), the United Kingdom (UK) and Switzerland.

We ensure that an equivalent degree of protection is in place by transferring Personal Information only to countries with adequate data protection regimes, or by using appropriate safeguards such as the European Commission’s standard contractual clauses, the UK International Data Transfer Agreement or Addendum, or an approved transfer mechanism such as the EU-US Data Privacy Framework and the UK-US Data Bridge. Contact us if you want more information about the mechanisms we use.

7. Security of personal information

We have put in place appropriate technical, organizational and security measures designed to prevent your Personal Information from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed. We limit access to your Personal Information to those employees, agents, contractors and other third parties who have a business need to know. They process it only on our instructions and are subject to a duty of confidentiality.

Payments are taken by Paddle over an encrypted connection, and we never see or store card numbers. We do not use passwords: you sign in with Google or with a link sent to your email address, so keep access to that inbox and account secure.

We have procedures to deal with any suspected Personal Information breach and will notify you and any applicable regulator of a breach where appropriate or where we are legally required to do so.

8. Minors

Our Website and Services are not designed for use by minors (persons under the age of 18, or under the age of majority where they live). Minors are not permitted to be Account Holders. If you are aware that a minor has provided us with Personal Information, please contact us at privacy@boothlab.ai. If it comes to our attention that we have collected Personal Information from a minor, we may delete it without notice.

9. Cookies and similar technologies

Cookies are small files that a site places on your device through your browser. We use only what is needed to run the Website:

  • Strictly necessary cookies, which keep you signed in and protect the sign-in process.
  • Local storage in your browser, which remembers your light or dark theme and keeps an event brief you have started so that it is not lost before you sign in.
  • Cookies set by Paddle when you open the checkout, which Paddle uses to process your payment and prevent fraud.

We do not use analytics, advertising or targeting cookies. You can block or delete cookies through your browser settings, but if you block strictly necessary cookies you will not be able to sign in.

10. Third-party links

The Website and Services may include links to third-party websites and services. Following those links may allow third parties to collect or share data about you. We do not control those websites and are not responsible for their privacy statements, content or activities. When you leave our Website, we encourage you to read the privacy notice of every website you visit.

11. Consent under Canadian privacy laws

If you are in Canada, we will not collect, use or disclose your Personal Information without your consent, except where the law permits. Your consent may be express or implied. You may give express consent in writing, verbally or by electronic means. In some circumstances your consent is implied by your actions: for example, providing us with Personal Information in order to use our Services as an Account Holder is implied consent to our reasonable collection and use of it for the purposes for which it was given.

12. Your rights

Depending on the data protection laws that apply to you, and subject to their limits, you can:

  • Access: request a copy of the Personal Information we hold about you.
  • Rectification and erasure: ask us to correct or delete Personal Information that is incomplete, incorrect, unnecessary or outdated.
  • Objection: object at any time to your Personal Information being processed for direct marketing.
  • Restriction: ask us to restrict processing for certain reasons, for example while the accuracy of the information or an objection is being considered.
  • Data portability: receive the Personal Information we hold about you in a commonly used, machine-readable form.
  • Withdraw consent: where processing is based solely on your consent, withdraw it at any time. This does not affect the lawfulness of processing before the withdrawal, and we may not be able to provide some Services to you afterwards.
  • Complain: lodge a complaint with your local data protection authority if you believe our processing is inconsistent with applicable law.

To exercise any of these rights, contact us as set out in section 13 with enough detail for us to respond. We process requests in accordance with applicable law and aim to do so within thirty (30) days, or we will tell you if we need longer. We may need to verify your identity first. Where the law permits a fee for access, we will tell you in advance so that you can choose whether to proceed.

13. Contact us

If you have any questions about this Policy, want to exercise your rights, or wish to contact us about your Personal Information, email us at privacy@boothlab.ai or write to:

Algoritmo Software Inc.
222 Bay Street
Toronto, Ontario
M5K 1E7

14. Changes to this Policy

This Policy is effective as of the date at the top of this page. We review it regularly and may update it at any time; the last updated date shows when it last changed. We may, but are not obliged to, give you notice of material changes. Your continued use of the Website or Services after a change constitutes your acceptance of it.

15. Additional rights

Applicable laws may give you additional rights that are not described in this Policy.

US Annex: if you are in the United States

This Annex is for visitors and customers in the United States who want to know how their personally identifiable information (“PII”) is used online. The PII we collect, when we collect it, how we use it and how we protect it are set out in sections 1, 2, 3 and 7 of this Policy.

California residents: in the past 12 months we have collected and disclosed to our service providers the following categories of PII. We have not sold PII, and we have not shared it for cross-context behavioural advertising.

  • Identifiers (name, email address, IP address, account identifier): collected and disclosed to service providers.
  • Customer records information (name and email address): collected and disclosed to service providers.
  • Commercial information (orders, credits and purchase history): collected and disclosed to service providers.
  • Internet or network activity (sign-in and session records, technical logs): collected and disclosed to service providers.
  • Audio, electronic or visual information (the logos and reference images you upload): collected and disclosed to service providers.
  • Biometric information, precise geolocation, protected classification characteristics, professional or education information, inferences and sensitive personal information: not collected.

Your rights: you have the right to request that we disclose what PII we collect, use and disclose about you, to request that we correct or delete it, and to direct us not to sell or share it. To make a request, email privacy@boothlab.ai from the email address on your Account. We are required to verify your identity before acting on a request, and may ask you questions to do so. Requests may be granted in whole, in part or not at all, depending on the request and applicable law, and where the law requires we will tell you why if we decline. You may designate an authorized agent to make a request for you; we may deny a request from an agent who does not provide proof of authorization. We will not discriminate against you for exercising any of these rights.

Children: in compliance with the Children’s Online Privacy Protection Act (COPPA), we do not market our products to children under the age of 13 and do not knowingly collect PII from them.

Data breaches: in line with the Fair Information Practice Principles, should a data breach occur we will notify the affected parties by email within seven business days. We also agree to the Individual Redress Principle, under which individuals have the right to pursue legally enforceable rights against data collectors and processors who fail to adhere to the law.

Email: in accordance with the CAN-SPAM Act, we will not use false or misleading subject lines or email addresses, we will identify advertising messages as such, we will include our business address in marketing emails, and we will honour unsubscribe requests promptly. To stop receiving marketing emails from us, use the unsubscribe link in any such email or write to privacy@boothlab.ai.