Privacy Policy

1. Information We Collect

1.1 Personal Information

When you create an account, we collect:

• Name and email address
• Communication preferences
• Account passwords (encrypted)

1.2 Billing Information

We do NOT collect or store billing information:

• All payment processing is handled securely by Stripe
• Credit card details never touch our servers
• We only receive payment confirmation from Stripe
• Subscription status and billing dates are synced from Stripe

1.3 Photography Content

We store and process:

• Uploaded photographs and images
• Gallery metadata (titles, descriptions, tags)
• Client information and access permissions
• Portfolio settings and preferences

1.4 Technical Information

We automatically collect:

• IP addresses and location data
• Browser type and device information
• Usage patterns and analytics data
• Performance and diagnostic information

1.5 Communications

We record:

• Support tickets and email communications
• Feedback and feature requests
• Newsletter subscription preferences

2. How We Use Your Information

2.1 Service Provision

We use your information to:

• Create and manage your photography portfolio website
• Host and display your photo galleries
• Process client access and permissions
• Provide customer support and technical assistance

2.2 Service Improvement

We analyze usage data to:

• Improve platform performance and reliability
• Develop new features and functionality
• Optimize user experience
• Monitor for security threats and abuse

2.3 Communications

We may contact you for:

• Service announcements and updates
• Security notifications and important alerts
• Support responses and issue resolution
• Marketing communications (with consent)

2.4 Legal Compliance

We use information to:

• Comply with legal obligations
• Protect against fraudulent activity
• Enforce our Terms of Service
• Respond to legal requests and subpoenas

3. Information Sharing and Disclosure

3.1 We Do Not Sell Your Data

PhotoPort never sells your personal information or photographs to third parties. Your content remains your property.

3.2 Service Providers

We share information with trusted third-party services:

• Payment Processors: Stripe for secure payment processing
• Cloud Infrastructure: Digital Ocean, Netcup, and Cloudflare for hosting and CDN
• Analytics: Google Analytics and Cloudflare Analytics for usage insights
• Email Services: AWS SES for transactional emails

3.3 Client Access

You control access to your galleries:

• Client galleries are only accessible to users you authorize
• Public galleries follow your visibility settings
• Portfolio content respects your privacy preferences

3.4 Legal Requirements

We may disclose information when:

• Required by law or legal process
• Necessary to protect our rights or property
• Preventing fraud or security threats
• Protecting user safety or rights

4. Data Security

4.1 Security Measures

We implement essential security practices:

• 256-bit SSL encryption for data transmission
• Access controls and authentication systems
• Server monitoring for unauthorized access
• Regular security updates and patches

4.2 Data Protection

Your photos and data are stored on:

• Digital Ocean and Netcup servers in the United States
• Cloudflare CDN for content delivery and caching
• Regular server backups for data recovery
• Server-level monitoring for security threats

4.3 Payment Security

All financial processing is handled by Stripe:

• PCI DSS compliant payment processing
• Credit card details never touch our servers
• Secure Stripe payment gateway handles all transactions
• We only receive payment confirmations and subscription status
• Stripe provides fraud detection and prevention

5. Data Retention

5.1 Account Data

We retain your information:

• While your account is active
• For 90 days after account closure (for backup purposes)
• Longer when required by law or for legal claims

5.2 Content Deletion

When you delete content:

• Photos are removed from active servers after 7 days
• Backups may contain deleted content temporarily
• Cloudflare CDN cached versions may persist temporarily

5.3 Analytics Data

Usage analytics are retained:

• For 26 months in Google Analytics
• Cloudflare Analytics data retention per their policy
• In anonymized form for service improvement
• Aggregated data may be retained indefinitely

6. Your Privacy Rights

6.1 Access and Correction

You have the right to:

• Access your personal information
• Correct inaccurate or incomplete data
• Update account information anytime
• Request data export in machine-readable format

6.2 Deletion and Portability

You can:

• Delete your account and all associated data
• Download your photos and content before deletion
• Request data portability to other services
• Opt-out of marketing communications

6.3 Control Over Your Content

You maintain:

• Full ownership of your photographs
• Control over gallery visibility settings
• Ability to revoke client access anytime
• Choice to make galleries public or private

6.4 Exercise Your Rights

To exercise these rights:

• Contact our support team via email
• Use account settings for self-service options
• Allow 30 days for complex data requests
• Provide identification for privacy verification

7. Cookies and Tracking Technologies

7.1 Essential Cookies

We use necessary cookies for:

• Maintaining your login session
• Security and fraud prevention
• Service functionality and performance
• Remembering your preferences

7.2 Analytics Cookies

Google Analytics helps us:

• Understand how our service is used
• Identify popular features and issues
• Improve user experience
• Optimize website performance

7.3 Cookie Control

You can:

• Accept or decline non-essential cookies
• Configure browser cookie settings
• Clear cookies from your device
• Use privacy browser extensions

8. International Data Transfers

8.1 Data Location

Your information is stored in:

• Digital Ocean and Netcup servers in the United States
• Cloudflare global network for content delivery
• Facilities complying with applicable data laws

8.2 Cross-Border Transfers

International data transfers occur when:

• Cloudflare routes content through global edge locations
• Analytics services process data internationally
• Support tools operate across multiple regions
• Limited to necessary service operations

8.3 European Users

EU users have additional protections:

• GDPR-compliant data processing
• Enhanced consent requirements
• Right to lodge complaints with authorities
• Additional data protection safeguards

9. Children's Privacy

9.1 Age Requirements

Our service is intended for:

• Users 18 years and older
• Professional photographers and businesses
• Users who can form binding contracts

9.2 No Child Data Collection

We do not knowingly:

• Collect information from children under 18
• Target our services to minors
• Use data for marketing to children

9.3 Parental Consent

If we discover child data:

• We will delete it immediately
• Parents may contact us for removal
• Accounts will be terminated if necessary

10. Changes to This Policy

10.1 Updates and Revisions

We may update this policy when:

• Adding new features or services
• Changing data practices
• Responding to legal requirements
• Improving privacy protections

10.2 Notification Process

Significant changes will be communicated via:

• Email notification to affected users
• Website announcements
• Updated policy posting date

10.3 Continued Use

By continuing to use our service after changes:

• You acknowledge and accept the updated policy
• Major changes require explicit consent
• You may close your account if you disagree

11. Contact Information

11.1 Privacy Questions

For privacy-related inquiries, contact:

• Email: [email protected]
• General support: [email protected]
• Website: https://www.tryphotoport.com

11.2 Data Protection Officer

Our privacy team handles:

• Data subject access requests
• Privacy complaints and concerns
• Compliance documentation
• Security incident reporting

11.3 Response Times

We aim to respond to privacy inquiries within:

• 30 days for standard requests
• 45 days for complex cases
• 72 hours for urgent security matters