GDPR Compliance

Your Role (Processor vs. Controller)

We act as the Data Processor, while the Photographer is the Data Controller. The photographer has ownership of their client's data; we simply manage the pipeline.

Data Minimization

We collect exactly what data you need: name, email, billing info (handled by Stripe), and client emails if they use the "Favorites" submission loop.

The Right to Erasure ("Right to be Forgotten")

If a photographer closes their account, all of their personal information and uploaded images are permanently wiped from our databases and cloud storage within a standard window (e.g., 30 days).