Privacy policy
Last updated: [date]
This policy explains how [Company name] ("we", "us") handles personal data in ShootDesk. We are registered with the Information Commissioner's Office ([ICO registration number]).
Two kinds of data
- Photographers' and videographers' account data. Your name, email, business and bank details, and how you use the service. We are the controller of this data.
- Your clients' data. The client details, bookings, invoices and messages you add. The photographer is the controller; we process it only on their instructions, to provide the service.
What we use it for
- To provide the service: storing bookings and invoices, sending the emails and texts you ask us to, and showing invoices to your clients through their private link (contract).
- To keep accounts secure: confirming email addresses, password resets, limiting abuse, and error monitoring (legitimate interests).
- To meet legal obligations, such as keeping financial records.
We don't sell personal data or use it for advertising.
Who we share it with
Only the providers that run parts of the service, under contracts that protect the data:
- Hosting and database: [hosting provider, location]
- Email delivery: [email provider]
- Text messages, if you use them: [SMS provider]
- Paying for a plan: Stripe
- Calendar sync, if you connect it: Google
- Optional AI features: OpenAI, which receives only the text or images you choose to send it
- Error monitoring: [error monitoring provider]
Where a provider is outside the UK, we rely on UK adequacy regulations or the UK's international data transfer agreement.
How long we keep it
For as long as your account is open. When you delete your account, its data is deleted straight away from the live service and from backups within [30] days. Invoices you've issued are your records to keep; download them before deleting your account.
Clients' invoice links
Each invoice has a private link with a long random code. When a client opens it we record that it was viewed, with an anonymised (hashed) form of their IP address. If they accept the photographer's terms on it, we record the name they typed and when.
Your rights
You can ask to see, correct, export or delete your data, or object to how it's used. Photographers can export or delete their whole account from Settings → Your data, and can export or erase any client's details from that client's page. Clients should contact their photographer first; you can also contact us at [privacy email address]. You have the right to complain to the ICO (ico.org.uk).
Cookies
We only use the cookies needed to keep you logged in and to protect forms. No tracking or advertising cookies.