Privacy Policy

Account data

When you create an account we store your email address and authentication details with Supabase, our authentication and database provider. We use this to sign you in and to associate your published galleries with your account.

Billing

Payments are processed by our payment provider. Your payment details are entered with and held by them — we never see or store your card information. We receive only your subscription status and the data needed to keep your account active.

Gallery files

The artwork and gallery files you upload are stored on Cloudflare R2 and served from there. We keep encrypted nightly backups on Backblaze B2 (separate infrastructure) so your work can be restored after a failure.

Retention and deletion

If your subscription ends or lapses, your files are kept for 30 days and then permanently deleted. When that deletion happens — or when you ask us to erase your data — your backup copies on Backblaze B2 are purged within 24 hours, so nothing you’ve asked us to remove lingers in backups. Your account record — email, display name and address — is kept for a further 90 days so you can reactivate on the same address; on day 120 it is erased along with your sign-in.

One record survives that erasure: the entry we write to our account-event log at the moment your files are deleted, holding your email address, display name and a reference to the cancelled subscription. We keep it for billing audit and support — it is not erased with the account. It restores nothing and is no longer attached to a live account.

Deleting on request is a different path, and the difference matters. You can ask us to delete your account and data at any time; that runs immediately, with no 30- or 90-day window, and it writes no such log entry. What it does not undo is billing history already recorded: if you have ever been charged, the payment records our payment provider sent us stay in the same audit log, detached from your account and still containing the customer details in those payments. We keep those for tax and accounting obligations. Invoices themselves live with the provider under their own retention.