Privacy

A photography studio signs up with us and becomes our customer. Their clients and guests visit galleries the studio publishes. We hold data about both, but the studio decides what happens to their clients' data — we only act on their instructions.

Name, email, studio handle, password (hashed), plan and payment history, and the photographs uploaded. Card details are held by our payment provider, never by us.

Email and name when they identify themselves, the photographs they star or put in albums, what they download and order, and — if the studio switches on browsing insights — which photographs they opened and for how long. Visitors can turn that last one off from inside the gallery.

When a studio enables face matching, a visitor may upload a selfie to find their own photographs. We convert faces into mathematical representations (embeddings) so they can be compared. This is sensitive personal data, so: it is only ever collected with the visitor's explicit consent, it is scoped to the single gallery it came from, it is never shared between studios, it is never used for anything but matching within that gallery, and a visitor can delete it at any time. Deleting a gallery or an account destroys the embeddings and selfies with it.

The infrastructure that runs the service: our hosting provider, our object storage and CDN provider, our email sender, and the payment gateway used for a given transaction. Album drafting sends photo metadata — not photographs, and never faces or names — to a language model provider. We do not sell data to anyone.

Photographs stay until the studio deletes them, deletes the gallery, or the storage-lock deletion runs after a long period over quota. Browsing insights are trimmed automatically after about six months. Deleting a studio account removes everything associated with it.

Studios can export their photographs and delete their account from their account page. Gallery visitors can ask the studio that invited them, or email us directly. Under Malaysian data protection law you can ask what we hold about you, correct it, or ask us to delete it.