Privacy Policy

• Your account: name, email address, hashed password, studio profile (studio name, timezone, contact email, branding).
• Billing: subscription and payment status via Stripe. Card numbers go directly to Stripe — we never see or store them.
• Your studio content: photos, videos, RAW files, contracts, invoices, leads, and bookings you create or upload.
• Your clients' data (as your processor): the email addresses you deliver to, one-time codes sent to them, their favorites, selections and notes, download requests, and gallery viewing activity shown in your dashboard.
• Security and operations logs: sign-in records, gallery access logs (kept 180 days), rate-limiting counters, and an internal audit trail of actions taken in your studio.

Snap uses only essential cookies: your sign-in session, gallery access grants, and download authorizations. We run no third-party analytics, advertising, or tracking scripts on any Snap surface — the usage numbers you see in your dashboard are computed from our own first-party logs.

To provide the service you signed up for (storing and delivering your work, running bookings and contracts, sending transactional email such as gallery codes and booking confirmations), to keep the platform secure and rate-limited against abuse, to bill subscriptions, and to comply with law. We do not sell personal data, and we do not use your content or your clients' data for advertising or to train machine-learning models.

• Cloudflare — hosting, database, file storage, and email delivery for the Snap application.
• Stripe — subscription and invoice payments (for client-facing invoices, payments run through your own Stripe account, not ours).

Data is stored on Cloudflare's global network; where personal data is transferred internationally, we rely on the safeguards our processors offer (such as EU standard contractual clauses).

Account and studio data: for as long as your account is active, plus a short grace period to allow recovery or export. Gallery access logs: 180 days. One-time codes: until used, then deleted. Dormant free studios: after roughly 180 days of inactivity (with notice emails at 150 and 170 days), stored files are permanently deleted. When you delete your account, your stored content is removed.

You can export or delete projects and galleries from the product, close your account from Settings, and keep your plan's storage behavior visible in Settings → Billing. Depending on where you live (for example in the EU, UK, or California), you may have rights to access, correct, export, or delete personal data, to object to or restrict processing, and to lodge a complaint with a supervisory authority. To exercise any of these, email hello@snap.webcules.com — we respond within 30 days.

If you are a photographer whose client asks for their data (a gallery visitor requesting deletion of their email or activity), route it to us and we will action it on your behalf.

Files are stored in a private bucket with no public access — they are served only through authorization-checked endpoints. Galleries are protected by expiring links and one-time codes; downloads can require PINs and approval. Access is logged so you can see who opened what. We apply least privilege internally and encrypt traffic in transit.

Snap is intended for professionals and is not directed to children. Do not upload photographs of minors except where you have the necessary consents for your professional work; gallery visitors of any age only receive content their photographer shared with them.

We may update this policy; material changes are announced by email at least 7 days before they take effect. Questions or requests: hello@snap.webcules.com.