Privacy policy
What we collect, why, where it lives and who else touches it — in plain English.
This policy is a draft and is being reviewed before Shutterflow opens to paying customers. The facts about where data is stored and who processes it are accurate today.
Two kinds of data
Your data is what you, the photographer, give us to run your account: your name, email, studio details, team members and billing information. We decide how this is used, under this policy.
Your clients' data is what you and your clients put into Shutterflow while you work together: names, contact details, event dates and venues, questionnaire answers, signatures, and the status of their invoices. We store and process it on your behalf and only to provide the service to you. You decide what to collect from your clients, and you're responsible for telling them how you use it.
What we collect
- Account details you enter when you sign up and in Settings.
- Everything you create in the app: enquiries, contacts, jobs, templates, documents, invoices, tasks and notes.
- What your clients enter through your forms, proposals, questionnaires and contracts.
- When a client opens or signs a document, the time, their internet address and their browser details. This is the record that shows a contract was signed, and when.
- Payment status from Stripe. Card numbers go straight to Stripe and never reach our servers.
Where it's stored
Shutterflow's database and signed documents are stored in Sydney, Australia. Each studio's data is separated from every other studio's at the database itself.
Who else processes it
- Supabase — our database and sign-in provider, hosted in Sydney.
- Cloudflare — hosts the app and stores files such as signed contracts.
- Stripe — processes your clients' card payments into your own Stripe account, and your Shutterflow subscription.
- Google Fonts — serves the typefaces on this website, which means your browser requests them from Google.
We don't sell data, and we don't use it for advertising.
Cookies
This website sets no cookies and runs no analytics. The Shutterflow app keeps you signed in using your browser's storage. The pages your clients open use one essential cookie to keep their session while they work through your documents. None of these are used for tracking.
How long we keep it
For as long as your account is open. You can delete your studio and its data at any time; signed contracts are kept only as long as they're needed as a record of the agreement, or as the law requires.
Your rights
You can ask to see, correct or delete the personal information we hold about you. If you're a photographer's client, contact the photographer first — they control your information in Shutterflow — or write to us and we'll help.
Contact
Questions about privacy: hello@shutterflow.co.