Privacy policy
Effective [effective date]
Draft for lawyer review. Not in effect yet. Highlighted items still need details or a decision.
The short version
We collect what we need to deliver galleries, keep them private, and stop abuse. We don't sell personal information, and we don't use advertising or tracking cookies.
What we collect
- Photographer accounts: name, email, password, business name, contact email, and logo. Passwords are stored as a one way hash, so we can't read them.
- Client accounts: name, email, and password hash. Your photographer gives us your name and email when they invite you.
- Photos and videos: the files photographers upload. Originals are stored exactly as uploaded, including any information inside the file, like camera settings or location. The previews clients see have that information removed.
- Viewing marks: to discourage leaks, previews show the viewing client's name and a short code tied to their account.
- Technical details: your IP address and browser type, stored with your sign in session and used to limit repeated attempts.
- Reports: what you write in a report and the email you give us.
Cookies
We only use the cookies that keep you signed in. No advertising or analytics cookies.
How we use it
- To run The Perfect Book: store files, make previews and watermarks, and show galleries to the right people.
- To send account and gallery emails, like invites and "your gallery is ready".
- To keep accounts secure and to look into reports, abuse, and legal requests.
Who we share it with
- Service providers that run The Perfect Book for us: Cloudflare (hosting, storage, database, and email) and, once paid plans launch, Stripe (payments).
- Photographers see the names and emails of the clients they invite. Clients see their photographer's business name.
- Authorities, when the law requires it, including reports of child exploitation.
We don't sell personal information.
Photos of clients
Photographers decide which photos to upload and who sees them. If you're in a photo and want it removed, ask your photographer first. You can also report it.
How long we keep it
- Account details stay while the account is open.
- Deleted photos and videos are removed from storage right away.
- Database backups can keep deleted account records for up to 30 days.
- Content tied to an open report or legal request can be kept longer when the law requires it.
Security
Files sit in private storage. Clients only reach them through links that expire within minutes and work only for their own signed in account. The one exception is the cover picture in a "your gallery is ready" email, which loads from a long, unguessable link so it shows up in email apps.
Your choices
You can update your details in your account. To get a copy of your information or delete your account, email [contact email].For review: Which state privacy laws apply, and any rights wording they require.
Children
The Perfect Book isn't meant for children under 13, and we don't knowingly collect their information.
Changes
If we change this policy in a way that matters, we'll email account holders before it takes effect.
Contact
[company legal name]
[mailing address]
[contact email]