Privacy policy
Data controller: Amado Corea, Managua, Nicaragua. Contact: [email protected].
1. What data we process
- From the photographer (you): your email; your plan and subscription status; the data of each gallery you create (names, date, place, links to the Drive folders, design, your name and Instagram for the footer); your use of the service (for example, how many times each gallery is viewed).
- Technical: IP address and time of requests, to limit abuse and protect the service.
- From clients who view a gallery: we don’t ask for sign-up or use tracking cookies. The browser may store a local setting on the device (for example, if you prefer the music off).
2. Your photos and videos
They live in the photographer’s Google Drive. Photo Delivery reads them through the Google Drive API to display and deliver them, but we don’t keep permanent copies on our servers (your browser may keep a temporary copy, as with any web page). The photographer decides what is shared and with whom.
3. What we use the data for
- To provide the service: logging in, displaying galleries and charging the subscription.
- Security, abuse prevention and usage limits.
- Sending you service emails (sign-in link and important notices). We don’t send third-party advertising.
4. Who we share it with
- Cloudflare: hosting and database for the service.
- Google: the Google Drive API (reads the folders) and Google Fonts (pages load Google typefaces, which gives your IP to Google).
- Resend: sending sign-in emails.
- Whop: processes subscription payments (name, email, country and payment details). We never see your card.
- Google (sign-in): if you choose “Continue with Google”, we receive your verified email; we don’t request access to your Drive or contacts.
- Unsplash: the example galleries on the home page load photos from Unsplash.
We don’t sell your data. These providers may process data outside your country (for example, in the United States).
5. Cookies and storage
We use one strictly necessary session cookie (pd_s) to keep you logged in as a photographer, and local preference settings (music and language). We don’t use third-party advertising or analytics cookies.
6. How long we keep it
For as long as you have an account and for the time needed for billing and security obligations. If you ask us to delete your account, we delete your data and galleries within a reasonable period (up to 30 days), except what the law or payment processors require us to keep.
7. Your rights
You can request access, correction, portability or deletion of your data, and object to certain uses, by writing to [email protected]. If you are in the European Union, the United Kingdom, Brazil or California, you also have the rights granted by the GDPR, UK GDPR, LGPD or CCPA, and you can complain to your data protection authority.
8. Minors
The service is for adult photographers (18+). Galleries may contain images of minors (for example, quinceañeras or babies): the photographer must have the consent of their parents or guardians. More in Content and minors.
9. Security and changes
We protect access with single-use links and secure sessions. No system is infallible. If we change this policy, we will publish the new date here.