Privacy Policy

We collect information you provide directly when creating an account, setting up your studio profile, or using our services. This includes:

• Account information: Name, email address, phone number, and business details.
• Billing information: Payment method details processed securely through our payment provider (Stripe). We do not store full credit card numbers on our servers.
• Client data: Information you upload about your photography clients, including names, contact details, session notes, and photographs.
• Usage data: How you interact with our platform, including features used, pages visited, and actions taken.

We use the information we collect to:

• Provide, maintain, and improve our services.
• Process transactions and send related billing information.
• Send you technical notices, updates, security alerts, and support messages.
• Respond to your comments, questions, and customer service requests.
• Monitor and analyze trends, usage, and activities to improve user experience.

We never sell your data to third parties. We never use your client data or photographs to train AI models.

We take the security of your data seriously and employ industry-leading measures to protect it:

• All data is encrypted at rest using AES-256 encryption.
• All data in transit is protected with TLS 1.3.
• Our infrastructure is hosted on SOC 2 Type II certified cloud providers.
• We perform regular security audits and penetration testing.
• Access to production systems is restricted and logged with multi-factor authentication.

We use a limited number of trusted third-party services to operate our platform:

• Stripe for payment processing.
• Cloud hosting providers for infrastructure and data storage.
• Analytics tools to understand usage patterns and improve our product.

Each third-party provider is bound by data processing agreements and is required to handle your data in accordance with applicable privacy laws.

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data.
• Export: Your data can be exported at any time in standard formats.
• Objection: Object to certain types of processing.

We are fully compliant with GDPR and CCPA requirements.

We retain your personal data only for as long as necessary to provide our services and fulfill the purposes described in this policy. When you delete your account:

• Your personal data is deleted within 30 days.
• Backups containing your data are purged within 90 days.
• We may retain certain data as required by law (e.g., billing records for tax compliance).

ShootMuse is not intended for use by children under 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child under 16, we will take steps to delete that information promptly.

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the “Last updated” date. We encourage you to review this policy periodically.

If you have any questions about this Privacy Policy or our data practices, please contact us at:

privacy@shootmuse.com