Privacy Policy

Portrait Reveal is operated by Ben Smith, a sole trader based in New Zealand (ben.smith2403@gmail.com). Portrait Reveal is a platform for photography studios to share client galleries and take wall-art and print orders.

Two kinds of people use Portrait Reveal, and this policy covers both: studio owners who sign up for a Portrait Reveal account to run their photography business, and their clients who view a gallery and place an order via a private link a studio sends them. Clients never create an account or sign in — a gallery link is the only credential involved.

From a studio owner:

• Name and email address, via Google sign-in.
• Business name and any business details entered in Settings (logo, welcome text, etc.).
• Billing details — handled entirely by Stripe (see Payments below); we never see or store card numbers.

From a studio’s clients (entered by the studio, or by the client at checkout):

• Name, email address, and (for an order) a delivery address and phone number.
• Photographs uploaded by the studio for the client to view and order from — in many cases, photographs of children.
• Which photos a client favourites, and what they add to an order.

We do not collect more than a studio’s own admin panel actually asks for, and we don’t buy, sell, or supplement this data from any other source.

• To run the service — displaying a studio’s galleries to their clients, processing orders, sending order confirmation emails.
• To operate a studio’s account — authentication, billing, and support.
• To keep the service secure and reliable — error monitoring, abuse prevention (e.g. rate-limiting on client-facing actions).

We do not use client photographs or personal information for advertising, and we do not run any automated or AI-based analysis on uploaded photographs today. If that ever changes, this policy will be updated before it happens, not after.

We use the following third-party services to run Portrait Reveal. Each only sees the data it needs to do its job:

• Supabase — database and file storage hosting (Sydney, Australia region).
• Vercel — application hosting.
• Resend — sends order notification and confirmation emails.
• Stripe — processes subscription payments. Stripe sees card details directly; Portrait Reveal never does.
• Sentry — error monitoring, so we can find and fix bugs. Sentry may incidentally capture technical details of a request when something goes wrong (e.g. a URL or a stack trace); it is not used to browse client data.

• Draft galleries are automatically deleted after 90 continuous days in draft. Active and expired galleries use the studio’s client-inactivity auto-delete window configured in Settings.
• Once a gallery has been expired for 90 days, its full-resolution original photos are deleted (smaller preview/thumbnail copies are kept so past orders keep displaying correctly).
• If a studio cancels their subscription, their data is kept for 90 days in case they want to come back, then permanently deleted — galleries, photos, orders, and account settings.
• Submitted orders are kept as a business record independent of gallery/photo lifecycle, so a studio always has a record of what a client ordered.

Every client gallery is protected by a long, random access link rather than a password — the link itself is the credential. Studio accounts are protected by Google sign-in, and every studio’s data is isolated from every other studio’s at the database level, enforced by the database itself, not just by the application code. Photos and files are served via short-lived signed links rather than public URLs. Database backups run daily; full-resolution photo files are not currently included in those backups (see the note below).

Under NZ’s Privacy Act 2020 and Australia’s Privacy Act 1988, you can ask what personal information we hold about you and request it be corrected or deleted. A studio owner can do most of this themselves from their own admin panel; a studio’s client should contact the studio directly, since the studio — not Portrait Reveal — is the one who collected their information and decides what it’s used for. Either way, ben.smith2403@gmail.com is the contact for any request.

If we become aware of a data breach affecting personal information, we will assess it and notify affected studios (and, where required by law, the relevant regulator and affected individuals) without undue delay.

Questions about this policy, or a request relating to your data: ben.smith2403@gmail.com.