Privacy Policy

Photographers (account holders):

• your name, email address and password (stored only as a secure hash), or your Google account name and email if you sign in with Google;
• your studio's name, web address, time zone, booking settings and payment preferences;
• the photos and other content you upload, including the details stored in photo files;
• billing details: your plan and subscription status. Card numbers are handled by Stripe and never reach our servers;
• if you take deposits through Stripe, the business and identity details you give Stripe during onboarding are collected and held by Stripe; we receive your account status and transaction records.

Clients of photographers:

• when you book a session: your name, email address, and the phone number and notes you choose to add;
• when you sign a contract while booking: your signature, the contract text you agreed to, and a signing record (the time, your IP address and your browser type), kept as evidence of the agreement;
• when you save favorites in a gallery: your name, email address and the photos you pick;
• when a photographer invoices you: your name, email address and the invoice details;
• when you pay a deposit or invoice: payment is made on Stripe's checkout page; we receive the payment and refund status, not your card details.

Everyone: basic technical information our hosting provider records when you visit, such as IP address, browser type and the pages requested, kept in server logs for security and troubleshooting.

• to run PhotoCove: show galleries, take bookings, process payments and keep your account working;
• to send emails the service needs: password resets, gallery links a photographer sends, and booking confirmations and cancellations;
• to protect PhotoCove and its users, for example by limiting wrong PIN attempts and investigating misuse;
• to provide support and tell account holders about important changes;
• to meet legal obligations, such as keeping payment records.

We don't sell personal information, share it for advertising, or use your photos for anything other than providing PhotoCove to you.

We only use cookies PhotoCove needs to work. There are no advertising or analytics cookies.

• a sign-in cookie that keeps photographers signed in;
• a gallery cookie that remembers you entered a gallery's PIN (up to 30 days);
• a gallery cookie that remembers who you are for favorites (up to a year).

Stripe may set its own cookies on its checkout and onboarding pages, under Stripe's privacy policy.

We share personal information only with the photographer it belongs to and with providers that run PhotoCove for us:

• Render: hosting and database;
• Cloudflare: photo storage (R2) and our domain's DNS;
• Resend: sending email;
• Stripe: subscription billing and client deposit and invoice payments;
• Google: only if you choose to sign in with Google.

These providers may only use the information to provide their services to us. We may also disclose information if the law requires it, to protect the rights and safety of people or PhotoCove, or as part of a sale or merger of our business (in which case this policy continues to apply).

• Photos stay until the photographer deletes them, deletes the gallery, or closes their account.
• A Free-plan gallery that closes after its time limit is hidden from clients, not deleted; it stays in the photographer's account.
• Bookings, signed contracts, invoices, client details and favorites stay until the photographer's account is closed.
• Copies of emails we send are kept to enforce sending limits and to troubleshoot delivery.
• When an account is closed, we delete its data within a reasonable time, except records we must keep by law (such as payment records).

Photos are private: they're served only to the photographer and to people with access to the gallery (its link, and its PIN if one is set). Data travels over encrypted connections. No system is perfectly secure, so we can't guarantee absolute security, but we'll tell affected users if we learn of a breach that puts their information at risk, as the law requires.

• Photographers can view and update their studio details in the dashboard, and delete photos and galleries at any time.
• To get a copy of your information, correct it, or delete your account, email support@photocove.app.
• Clients can ask the photographer, or us, to see or delete the information they gave. We'll work with the photographer to respond.
• Depending on where you live (for example California), you may have additional rights under local law, such as knowing what we collect and asking us to delete it. We honor those requests and won't treat you differently for making them.

PhotoCove accounts are for adults. We don't knowingly collect personal information directly from children under 13. Photos of children uploaded by a photographer are the photographer's responsibility and are kept private as described above.

PhotoCove is run from the United States. Our providers process data in the United States and may also process it in other countries where they operate.

We'll post any changes here and update the date at the top. If a change is significant, we'll tell account holders by email before it takes effect. See also our Terms of Service.

Northline Software LLC · support@photocove.app