Privacy Policy

Effective September 29, 2026

What we collect. For photographers: your email, studio details and billing status. For photographers' clients: the details entered when booking or buying (name, email, phone, answers to the photographer's questions, signatures), favorites, and download activity. Photos are stored so we can deliver them.

Why. To run the service you signed up for: bookings, reminders, galleries, payments and receipts. We send emails on a photographer's behalf only about their sessions and galleries.

Who else sees it. Stripe (payments), Supabase (database and file storage, US), Vercel (hosting), Resend (email delivery), and PostHog (product analytics of the photographer dashboard only — never client galleries). Each acts under contract as our processor.

Cookies. A sign-in session cookie for photographers; for clients, small cookies that remember a gallery password, your favorites and purchases on that device. No advertising cookies.

Retention and deletion. Photographers can delete galleries and clients at any time, and can export all of their data and photo originals from Settings → Account. Canceling an account stops billing and permanently deletes the studio's data, including originals and derivatives, 30 days later (restorable until then). Backups age out within 30 days. Clients can delete their fotobooq login from their profile, or ask the photographer, or us, to delete their data.

Your rights. Email hello@fotobooq.com to access, correct or delete your data. We'll respond within 30 days.