Privacy Policy

01Who We Are

PhotoShr is a web-based platform that enables professional photographers to share photo galleries with their clients, lets clients pick their favourite images, and delivers the final files.

The data controller responsible for your personal data is:

• Company: Nagy Attila Mátyás E.V.
• Address: Templom Utca 66., 2837 Vértesszőlős, Hungary
• Email: [email protected]

Photographers decide which of their clients' details they enter into PhotoShr and whom they share galleries with. They are responsible for having a basis to do so under the law that applies to them.

02Data We Collect

From Photographers and Team Members

• Name, email address, and password (stored hashed). If you sign in with Google, we receive your name, email address and profile picture from Google instead of a password.
• The date and version of the Terms you accepted, and your email preferences (whether you opted in to product news, and whether you turned off onboarding tips).
• Studio details you add: business name, contact details, logo, watermark, colours, subdomain and landing page.
• Billing details: billing name, address, and VAT number if you give one; subscription plan, payment and invoice history. Card data is handled by Stripe — we never see or store full card numbers.
• Photos and galleries you upload, including the camera, lens, exposure settings, capture time and, where the camera recorded it, the location read from each photo (see Section 5).
• What you enter about your clients: names, email addresses, and — on Studio and Agency — client notes, phone numbers and tags.
• Messages you send to our support or legal address.

From Clients with an account

• Name and email address (provided by the Photographer who invited you, or by you). Clients sign in with a one-time code or a sign-in link sent by email.
• The galleries you were invited to, your picks and submitted selections, and whether you may download finals.
• Views and downloads in the galleries (see "Our own analytics" in Section 3).

From Clients without an account

• If you open a gallery by passcode or public link: your picks, and views and downloads as described in Section 3.
• If you save picks with your email address: that email address, and when you confirmed it.

If you join the registration waitlist

When sign-ups are paused you can leave your email address to be told when they reopen. We store that address, when you left it, and when we emailed you. It is used for that one email and nothing else.

Automatically collected data (all users)

• For signed-in users: the IP address and browser (user agent) of each sign-in session.
• The device class (desktop, mobile or tablet) of gallery visits.
• Cookies and local storage (see Section 10).
• When PhotoShr staff open a gallery's content, a record of who opened which gallery and when (see Section 5).

03How We Use Your Data

Our own analytics

We do not use a third-party analytics service. Instead, PhotoShr records a small set of events in its own database:

• Account events — for example sign-up, trial start and end, subscribing, cancelling, buying or removing storage, archiving and deletion.
• Studio events — for example creating, sharing, deleting and restoring a gallery, finishing an upload, reaching the storage limit, and changing the watermark or proofing mode.
• Client events — opening a gallery or delivery page, favouriting a photo, submitting a selection, and downloading photos.

Each event stores the studio and, where relevant, the gallery and photo it concerns, the time, the file size for uploads and downloads, and the device class. Events may also record who acted: the signed-in user, or — only if you have allowed analytics in the cookie settings — a random visitor id kept in your browser, so a returning visitor is not counted twice. Automated traffic (bots) is not recorded. We do not track whether you open or click our emails.

After 90 days, the visitor id, the acting user and any identifying details are removed from each event; only anonymous counts remain.

We do not use your photos or gallery content for marketing, AI training, or any purpose beyond operating the Service, unless you explicitly consent.

04Legal Basis for Processing (GDPR)

For users in the European Economic Area, we process your data under the following legal bases:

• Contract performance — to provide the Service you signed up for, including the service emails it needs (Art. 6(1)(b) GDPR).
• Legitimate interests — for security, fraud and abuse prevention, keeping records of staff access, and improving our Service with our own analytics (Art. 6(1)(f) GDPR).
• Legal obligation — to comply with applicable laws, such as tax and accounting rules for invoices (Art. 6(1)(c) GDPR).
• Consent — for product news and win-back emails, for the analytics visitor id kept in your browser, for Google One Tap, and for the one email we send when registration reopens if you joined the waitlist (Art. 6(1)(a) GDPR). You may withdraw consent at any time in your email settings, with the unsubscribe link in each email, or in the cookie settings.

05Photo Storage & Access

Photos uploaded by Photographers are stored in Cloudflare R2 object storage. We take the following measures to protect stored photos:

• Encryption in transit (TLS/HTTPS). Cloudflare encrypts stored files at rest; we add no encryption of our own on top.
• Access-controlled galleries — by passcode, by invitation only, or by public link, as the Photographer chooses; the Photographer can change the passcode, set an expiry date, and revoke access at any time.
• How photos are delivered depends on that choice. In invited-only galleries, every photo is checked against the visitor's sign-in before it is sent. In passcode and public galleries, viewing copies of the photos are delivered through Cloudflare's content delivery network at long, randomly generated addresses that are only shown once the gallery has been opened. Anyone who has such an address can load that photo without the passcode, and changing the passcode or the expiry date does not withdraw addresses someone has already obtained. Switching a passcode gallery to invited-only moves its photos back behind sign-in, which stops those addresses from working (copies already cached by Cloudflare can take a short while to expire).
• Final deliveries (the finals ZIP and full-resolution final photos) of invited-only and passcode galleries are stored privately and downloaded through short-lived links issued after the access check.
• When PhotoShr staff open the content of a gallery (for example to answer a support request), the access is logged.

Photo metadata

When a photo is uploaded, the stored copy is rewritten without its embedded metadata (EXIF, XMP, IPTC and comments), so files viewed or downloaded from a gallery do not carry the location or camera details. The colour profile and orientation are kept so the photo displays correctly. The same applies to uploaded logos and watermarks.

Before stripping, we read the camera, lens, exposure settings, capture time and, where present, the GPS location, and store them with the photo record. Clients can see the camera, exposure and capture time; the location is shown only to the Photographer and their team.

This does not apply to files inside a finals ZIP the Photographer uploads, or to attachments sent to our support address: those are stored as received.

Photos are stored while the Photographer's account is active. Deleted galleries, lapsed subscriptions and deleted accounts are handled as described in Section 8.

06Sharing Your Data

We do not sell your personal data. We share data only in the following circumstances:

Service Providers

We use the following providers to operate the Platform:

• Cloudflare — network proxy and content delivery for our website and for the photos of passcode and public galleries, storage of photos and files (R2), and the Turnstile bot check on sign-in, sign-up, password reset, email-code and registration waitlist forms.
• Stripe — payment processing and subscription billing, including the calculation of VAT (Stripe Tax).
• Billingo — issuing invoices. Billingo receives your billing name, email address, billing address, VAT number, and the plan and amount, and emails the invoice to you.
• Resend — delivery of our emails.
• Google — "Sign in with Google" and Google One Tap (One Tap only with your consent in the cookie settings), and Google Workspace, which hosts our support and legal mailboxes.
• Our hosting provider — runs the PhotoShr application and its database.

These providers process data to provide their service to us. Where a provider acts as our processor, we rely on its data processing terms. You can ask us for details at the address in Section 14.

Legal Requirements

We may disclose data if required by law, court order, or to protect our legal rights.

Photographer–Client Sharing

When a Photographer shares a gallery with a Client, the Client's picks and submitted selections are shared back with the Photographer and their Team Members. On Studio and Agency, Photographers also see which of their Clients viewed, picked and downloaded photos. This is a core feature of the Service. Photographers are responsible for handling Client data in compliance with applicable laws.

07International Data Transfers

PhotoShr operates worldwide. Some of the providers listed in Section 6 are based outside the EU/EEA or may process data there.

Where personal data is transferred outside the EU/EEA, such transfers rely on a safeguard recognised by the GDPR, such as an adequacy decision of the European Commission or Standard Contractual Clauses.

You may request information about the specific safeguards applicable to your data by contacting us.

08Data Retention

These are the retention rules PhotoShr applies:

• Deleted galleries: a gallery the Photographer deletes is taken offline immediately and can be restored for 30 days. After that, it is permanently deleted with its photos, picks and files.
• Trial or subscription ending: access ends when the trial ends, when a cancelled subscription reaches the end of its period, or 14 days after a failed payment. The studio is then read-only for 30 days (client links keep working), then archived until day 60 (client links offline). After that, galleries and photos are permanently deleted — but only once we have emailed a warning at least 7 days in advance. The account itself and invoices are kept; the studio's analytics events are deleted and only an anonymous summary is kept. A paused subscription is not on this timeline.
• Account deletion: when a Photographer, Team Member or Client deletes their account, it is deleted immediately, together with its sign-in sessions and linked sign-in methods. For a studio owner this includes all galleries and photos (also those still restorable), branding, and the subscription, which ends without a refund. What is kept afterwards: analytics events with the personal identifiers removed; our staff access log, without the link to the deleted account; invoices; and support mail under the rule below.
• Clients who delete their account: the picks they made stay with the Photographer, shown as "Deleted client". The Photographers' client records about them (notes, phone number, tags) are deleted.
• Analytics events: personal identifiers are removed after 90 days; anonymous counts are kept.
• Sign-in sessions: expired sessions are deleted daily. The IP address and browser stored with a session are cleared 90 days after sign-in, even if the session is still active.
• Registration waitlist: an address is deleted 90 days after we sent it the "registration is open" email. Until then it is kept so we can see who was told. To be removed sooner, write to the address in Section 14.
• Support mail: our copy of a support or legal email thread, including its attachments, is deleted 2 years after the thread's last message. The Google Workspace mailbox the mail arrived in keeps its own copy.
• Invoices: kept for the period Hungarian accounting law requires (currently 8 years), including after account deletion. Invoices contain the billing details listed in Section 6, never card data.
• Kept without a set end date: a record of which trial and account emails we sent to which account, and when, the log of actions taken by PhotoShr staff, and the reasons given when a subscription was cancelled.

09Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you.
• Rectification — request correction of inaccurate or incomplete data.
• Erasure — request deletion of your personal data ("right to be forgotten").
• Restriction — request that we limit how we process your data.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interests.
• Withdraw consent — where processing is based on consent, withdraw it at any time.

Many of these you can do yourself in the app:

• Delete your account — studio owners and Team Members in Settings, Clients on My profile.
• Download all your photos as a ZIP — Photographers, in Settings.
• Change your email preferences — in Settings, or with the unsubscribe link in each non-essential email.
• Change your cookie choices — with the "Cookie settings" link in the app and in galleries.

For anything else, contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

If your data was entered by a Photographer (for example as their client), you can also contact that Photographer directly.

10Cookies & Local Storage

PhotoShr uses a small number of cookies and browser storage entries. We do not use advertising or third-party tracking cookies, and our fonts are served from our own servers. On your first visit you are asked about the optional ones; you can change your choice at any time with the "Cookie settings" link.

Cloudflare, which protects our website and runs the Turnstile bot check, may set cookies of its own that are needed for these security functions.

11Children's Privacy

PhotoShr is not intended for use by children under 16. We do not knowingly collect personal data from children under 16. If you believe we have collected such data, please contact us immediately and we will delete it.

Photographers who upload photos containing identifiable minors are solely responsible for obtaining any necessary consents under applicable law.

12Security

We implement technical and organizational measures to protect your data, including:

• TLS encryption for all data in transit
• Hashed passwords; stored files are encrypted at rest by our storage provider
• Access controls on every gallery and account, bot checks on sign-in forms, and limits on repeated passcode attempts; photos of passcode and public galleries are served from unguessable content delivery addresses, as described in Section 5
• Logging of PhotoShr staff access to gallery content

In the event of a data breach affecting your rights and freedoms, we will notify you and the relevant supervisory authority as required by law.

No system is completely secure. You are responsible for keeping your login credentials confidential.

13Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via email and/or a prominent notice on the Platform at least 30 days before the changes take effect.

The "Last updated" date at the top of this page reflects when this policy was last revised. When the Terms and this policy change, Photographers and Team Members are asked to accept the new version before they continue working in their studio.

14Contact

For any questions about this Privacy Policy or to exercise your rights, contact us:

• Email: [email protected]
• Post: Nagy Attila Mátyás E.V., Templom Utca 66., 2837 Vértesszőlős, Hungary

If you are located in the EU and have concerns about how we handle your data, you may also lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH) at naih.hu.