Privacy Policy

1. Information We Collect

Account information: Name, email address, business name when you register.

Client information: Names, emails, phone numbers, and property addresses that you enter for your clients.

Media content: Photos, videos, and other files you upload to the Service.

Usage data: Pages visited, features used, and technical information such as browser type and IP address.

2. How We Use Your Information

We use your information to provide and improve the Service, process payments, communicate with you about your account, and ensure the security of the platform.

3. Data Storage

Your data is stored securely using Supabase (PostgreSQL) and Cloudflare R2. Media files are stored on Cloudflare's global network. We use industry-standard encryption for data in transit (TLS) and at rest.

4. Third-Party Services

We integrate with the following third-party services:

• PayPal — for processing delivery payments between photographers and clients
• Google Calendar — for syncing bookings (optional, requires your authorization)
• Supabase — for authentication and database services
• Cloudflare — for media storage and delivery

5. Data Sharing

We do not sell your personal information. We only share data with third-party services as necessary to operate the platform, or when required by law.

6. Your Rights

You may request access to, correction of, or deletion of your personal data at any time by contacting us. You can export your media files at any time through the Service. Account deletion will remove all associated data within 30 days.

7. Cookies & Product Analytics

We use essential cookies for authentication and session management. We do not use third-party advertising or retargeting cookies.

To understand how our tools are used — so we can fix what's broken and improve what isn't — we run a lightweight product analytics pipeline built on two pieces:

• PostHog — a product analytics service that records which features get used, funnel drop-offs, and aggregate retention. Session recording is disabled. We do not send filenames, image data, EXIF, or any content you load into the tools.
• A usage_events table in our own database — metadata only: which tool you opened, how many files you imported (count and size bucket), output format, duration, error codes. Never the images themselves, never filenames, never EXIF.

Your photos never leave your device. That promise holds for the editing tools and for this analytics pipeline — the only thing we log is aggregate metadata about tool use.

Location: we record the country your request comes from (for example, US or GB) by reading a header our hosting provider adds. Your full IP address is not stored in the analytics database.

Opting out: the cookie banner on your first visit offers a Reject button. If you reject, the analytics helper becomes a no-op and PostHog capture is disabled on your device. You can change your choice at any time by clearing our cookies and revisiting the site.

Retention: raw analytics events are automatically deleted after 180 days. Rolled-up aggregates (counts with no user-identifying data) may be retained longer for year-over-year trend analysis.

8. Data Retention

We retain your account and media data for as long as your account is active. After account deletion, data is permanently removed within 30 days. Inactive accounts may be deleted after 12 months of inactivity with prior notice. Raw analytics events (see section 7) are deleted on a rolling 180-day window regardless of account state.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the Service.

10. California Residents (CCPA / CPRA)

If you are a California resident, you have the right to know what personal information we collect, to request deletion, to correct inaccurate data, and to opt out of the “sale” or “sharing” of your personal information.

We do not sell or share your personal information as those terms are defined by the CCPA/CPRA. If this ever changes, we will post an update here and notify you.

To exercise any CCPA right — including the right to know, delete, correct, or opt out — email [email protected] with the subject “CCPA Request”. We will respond within 45 days. You may also designate an authorized agent to make a request on your behalf.

We will not discriminate against you for exercising any of these rights.

11. Contact

For privacy-related questions, contact us at [email protected].