Privacy Policy

Two kinds of people use Portrait Reveal, and this policy covers both: studio owners who sign up for a Portrait Reveal account to run their photography business, and their clients who view a gallery, design wall art and place an order via a private link a studio sends them. Clients never create an account or sign in — a gallery link, optionally combined with a password the studio sets, is the only credential involved.

From a studio owner:

• Name and email address, via Google sign-in.
• Business name and any business details entered in Settings (logo, welcome text, etc.).
• Subscription billing details — handled entirely by Stripe; we never see or store card numbers.
• If client payments are enabled, your registered business country, catalogue currency, Stripe connected-account identifier and account-readiness status. Business, identity and bank details required for onboarding are entered directly into Stripe.

From a studio’s clients (entered by the studio, or by the client at checkout):

• Name and email address entered by the studio, plus any optional order comment entered by the client.
• Photographs uploaded by the studio for the client to view and order from — in many cases, photographs of children.
• Photographs clients upload of their walls to preview wall art.
• Which photos a client favourites, and what they add to an order.
• Gallery workflow activity, including whether a client opens the wall-art designer or uploads a wall photo. These facts are used to provide aggregate dashboard analytics to the studio.
• For online payments, the order total and currency, payment status, Stripe transaction identifiers and payment, refund or dispute timestamps. Full card or bank details go directly to Stripe and are not seen or stored by Portrait Reveal.

We do not collect more than a studio’s own admin panel actually asks for, and we don’t buy, sell, or supplement this data from any other source.

• To provide studios with aggregate information about how clients use their galleries and wall-art workflow.
• To run the service — displaying a studio’s galleries to clients, designing wall art, taking orders, creating secure Stripe checkout sessions, reconciling payment status and sending accurate order confirmation emails.
• To operate a studio’s account — authentication, billing, and support.
• To keep the service secure and reliable — error monitoring, abuse prevention (e.g. rate-limiting on client-facing actions).

We do not use client photographs or personal information for advertising, and we do not run any automated or AI-based analysis on uploaded photographs today. If that ever changes, this policy will be updated before it happens, not after.

We use the following third-party services to run Portrait Reveal. Each only sees the data it needs to do its job:

• Supabase — database and file storage hosting (Sydney, Australia region).
• Vercel — application hosting.
• Resend — sends order notification and confirmation emails.
• Stripe — processes Portrait Reveal subscriptions and, when a studio enables client payments, processes direct client payments and payouts to that studio. Stripe receives payment, identity and payout details directly; Portrait Reveal never receives full card or bank details.
• Sentry — error monitoring, so we can find and fix bugs. Sentry may incidentally capture technical details of a request when something goes wrong (e.g. a URL or a stack trace); it is not used to browse client data.

A studio may connect its own Stripe account to accept client payments. The studio is the seller and merchant of record for those transactions. Portrait Reveal passes the order amount, currency and identifiers needed to create checkout and match Stripe’s payment updates to the correct order. Stripe processes the payment and pays the studio according to its own payout schedule.

Our service providers may process personal information outside the country where you or your clients are located. We use them only to provide the service and rely on their contractual and technical privacy protections. Their own privacy policies also apply when they process information directly.

• Draft galleries are automatically deleted after 90 continuous days in draft.
• All galleries auto-delete if there is no activity (i.e the URL is not viewed) on the gallery after 90 continuous days. This can be configured in Settings to less than 90 days (but not more).
• Submitted orders, including payment status and Stripe transaction references where applicable, are kept as a business and financial record independent of the gallery/photo lifecycle. Smaller preview copies are retained so past orders keep displaying correctly.
• After a Gallery has expired for 90 days, its full-resolution original photos are deleted.
• Galleries can be manually deleted at any time
• If a studio cancels their subscription or its trial ends without a subscription, its data is kept for 90 days in case the photographer wants to come back, then permanently deleted — galleries, photos, orders, and account settings.
• An account can be manually permanently deleted at any time, including galleries, photos, orders, and account settings.

Every client gallery is protected by a long, random access link, which is the credential by default. A studio can also turn on password protection for a gallery; the password is stored as a salted hash, never in plain text, and repeated incorrect attempts are rate-limited. Studio accounts are protected by Google sign-in, and every studio’s data is isolated from every other studio’s at the database level, enforced by the database itself, not just by the application code. Photos and files are served via short-lived signed links rather than public URLs. Database backups run daily; full-resolution photo files are not currently included in those backups (see the note below).

Under NZ’s Privacy Act 2020, you can ask what personal information we hold about you and request it be corrected or deleted. A studio owner can do most of this themselves from their own admin panel; a studio’s client should contact the studio directly, since the studio — not Portrait Reveal — is the one who collected their information and decides what it’s used for.

If we become aware of a data breach affecting personal information, we will assess it and notify affected studios (and, where required by law, the relevant regulator and affected individuals) without undue delay.

Contact us at https://www.portraitreveal.com/contact for any questions about this policy, or a request relating to your data.