Privacy

Photographers Office HQ is software for professional photographers: managing clients and projects, delivering photo galleries, sending contracts and invoices, and running a studio website. This policy covers photographersofficehq.com, every studio site we host, and the iPhone app.

• Your account — name, email address, and the password you set (stored only as a cryptographic hash we cannot reverse), or, if you sign in with Google, your name and email as Google reports them.
• Your studio — business name, logo, website, timezone, currency, and the settings you choose.
• Your clients' details, which you enter — names, email addresses, phone numbers, shoot dates, notes. This is your data about your clients; see “Your clients’ data” below.
• Photographs you upload, and the versions we generate from them for display and download.
• Gallery activity— when a gallery is opened, which photos were favourited or downloaded, and the email address a visitor gives at a gallery's email gate. Views are recorded against a one-way hash of the visitor's network address and browser, never the address itself.
• Website visit counts— how many times each page of a studio's website and booking page was opened, by day, and the name of the site a visitor came from (the site, never which page of it). No cookie is set, no address or browser details are kept, and a visitor whose browser asks not to be tracked is not counted. An approximate visitor count comes from a one-way code that changes every day.
• Visits to our own pages — which pages of photographersofficehq.com, and of your dashboard, get opened, counted for us by Vercel without cookies and without names, so we can see what people read before they decide. It does not run on your galleries, your website, your booking pages or your clients' portal, and it counts nobody whose browser asks not to be tracked.
• Payment records — amounts, dates, and status. We never see or store card numbers; card details go directly to Stripe.

There are two separate, optional ways to connect Google. Neither is required to use the product, and each can be disconnected at any time.

Signing in with Google

If you choose “Continue with Google”, we receive your name and email address only, and use them for one thing: to create and identify your account. Nothing else about your Google account is requested or received.

Connecting your Gmail to send from

If you connect your Google account so the product can send your client email as you, we request exactly one permission — https://www.googleapis.com/auth/gmail.send — plus your email address so we can show you which account is connected.

That permission allows sending only. It does not grant, and we do not have, the ability to read, search, list, download, modify, or delete any message in your mailbox. We use it for one purpose: to send the emails you or your automations trigger — gallery notices, contracts, invoices, receipts — so they come from your own address, arrive reliably, and thread naturally when your client replies. Messages we send appear in your Sent folder like any other.

We store the access token Google issues so sending keeps working. It is held server-side only, is never sent to a browser, and is not readable by any other customer. Disconnecting in Settings revokes it with Google and deletes it from our systems immediately; you can also revoke it yourself at myaccount.google.com/permissions.

Photographers Office HQ's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data to serve advertising, we do not sell it, we do not transfer it to others except as needed to provide the feature you asked for or as required by law, and we do not allow humans to read it except with your explicit consent, for security or legal reasons, or on data that has been aggregated and anonymised.

• We do not sell your data, or your clients' data, to anyone.
• We do not use your photographs to train AI models.
• We do not email your clients on our own behalf. Every message goes out because you or your workflow sent it.
• We do not run third-party advertising or tracking on your galleries.

Running this product means trusting a small number of specialist companies. Each one sees only what its job requires:

• Supabase — the database and sign-in system that stores your account and studio data.
• Cloudflare R2 — where your photographs are stored.
• Stripe — payments, both your subscription and the money your clients pay you. Stripe handles card details; we never receive them.
• Resend — delivers email that is not sent through your own connected mailbox.
• Vercel — hosts the website and the studio sites, and counts visits to our own pages.
• Google — only if you connected it, and only as described above.

These providers process data in the United States. We may also disclose information if the law requires it.

The contacts, notes, and photographs you put into your studio are yours. Your clients are your clients: we hold their details on your behalf, use them only to run the features you use, and never contact them for our own purposes. You decide what to collect and what to delete.

Photographs and galleries follow the published storage policy, which is specific about every clock that exists: Storage & retention. Account and business records — invoices, payments, contracts — are kept while your account is open, and afterwards only as long as tax and accounting rules require.

Everything travels over encrypted connections and is encrypted at rest. Access between studios is enforced by the database itself, not only by the app, so one studio cannot read another's rows. The most sensitive credentials — your Google token, payment keys — are reachable only by server code and never by any browser.

No system is perfect. If we ever discover a breach affecting your data, we will tell you what happened, what was affected, and what we did about it.

You can export your original photographs at full resolution at any time, from any gallery, without asking us. You can correct your details in Settings, disconnect Google whenever you like, and ask us to delete your account and its data. Depending on where you live you may have additional rights over your personal data — ask, and we will honour them.

This is a tool for working professionals and is not intended for anyone under 16. We do not knowingly collect data from children. A photograph of a child taken and uploaded by a photographer is the photographer's content, held under their agreement with the family.

If this policy changes in a way that matters, we will say so here and date it — and if the change affects how your Google data or photographs are handled, we will email you rather than rely on you noticing.

Questions, requests, or anything that reads wrong to you: chavezmarcoa2023@gmail.com.