Privacy Policy

The short version

• We collect what we need to run galleries, bill photographers and ship prints, and nothing more.
• We don't sell personal information, show ads, or use advertising trackers.
• Photos belong to the photographers who upload them. We never use them to train AI or in our marketing without permission.

What we collect

Photographers

• Account details: your email address, a password (stored only as a secure hash), and studio details you add, like your studio name and logo.
• Billing details: Stripe collects and stores your card information. We keep your Stripe customer ID, your invoices and your storage usage, which is how we calculate your bill.
• Your content: the photos you upload, their file names, and information inside the files (such as the date taken, camera details and, if your camera recorded it, location). We read the capture date to sort photos. The rest stays in your original files exactly as you uploaded them.
• Payout details: if you sell prints, Stripe collects the identity and bank details needed to pay you. We don't see your full bank details.

Gallery visitors (your clients and their guests)

• If the photographer requires it, your email address to enter a gallery.
• Your favorites, favorite lists and notes, and a record of what you download.

Gallery activity is shared with the photographer whose gallery it is, so they can see favorites and deliver what you've asked for.

Print buyers

• Your name, email, phone number and shipping address, collected at checkout by Stripe, plus what you ordered.
• Stripe processes your card. We never see or store your full card number.

Everyone

• Basic technical information our hosting providers log automatically, such as IP address, browser type and the pages requested. It's used for security and to keep the service running.
• Simple visit counts for our public website, collected without cookies. For each page view we record the page, the site that linked you, your country, your device and browser type, and an anonymous code that changes every day. We don't store IP addresses, and the code can't identify you or follow you from one day to the next. Signed-in pages and client galleries aren't counted.
• Essential cookies only: one that keeps photographers signed in and, for password-protected galleries, one that remembers you've entered. We don't use advertising or analytics cookies.

How we use it

• To run Terracotta: store and deliver photos, show galleries, process uploads and fulfill print orders.
• To bill photographers accurately and pay out print sales.
• To send service emails, like sign-up confirmations, password resets, receipts, order updates and important account notices. We'll only send marketing emails if you opt in, and you can unsubscribe anytime.
• To keep Terracotta secure, prevent fraud and abuse, and meet legal obligations.

Who we share it with

We share information only with the people and companies needed to provide Terracotta. Each provider may use it only to provide its service to us:

• Supabase: Database and account sign-in
• Cloudflare: Photo storage
• Amazon Web Services: Photo processing and backup copies
• Vercel: Website hosting
• Stripe: Payments, invoices and photographer payouts
• WHCC: Printing and shipping print orders
• Resend: Account and service emails

Print orders are shared with the photographer whose gallery they came from, and with the print lab to make and ship them. We may also disclose information when the law requires it, to protect someone's safety, or as part of a merger or sale of our business, in which case this policy would continue to apply.

Your information is stored and processed in the United States.

How long we keep it

• Photos: until the photographer deletes them or their account. Deleted photos are removed from our live storage promptly, and backup copies are permanently deleted within 30 days.
• Accounts: until deleted. After an account is deleted, we keep billing and tax records as long as the law requires, usually up to 7 years.
• Gallery activity: as long as the gallery exists.
• Print orders: as long as needed for fulfillment, support, refunds and tax records.

Your choices and rights

You can see and update your account details in your studio, and delete photos, galleries or your whole account at any time. You can also ask us to:

• give you a copy of your personal information;
• correct it;
• delete it;
• tell you more about how we use it.

Email support@terracottagalleries.com and we'll respond within 30 days. Depending on where you live, including California and other US states, you may have additional rights under local law. We honor them, and we won't treat you differently for using them.

If you're a gallery visitor, the photographer controls their gallery. You can ask them directly, or ask us and we'll work with them.

Security

We protect data with encryption in transit and at rest, access controls that keep each photographer's data separate, and short-lived links for private photos. No system is perfectly secure. If a breach affects your information, we'll tell you as the law requires.

Children

Terracotta accounts are for adults, and we don't knowingly collect personal information from children under 13. Photographers who upload photos of minors are responsible for having the consent of a parent or guardian.

Changes

If we make material changes to this policy, we'll email photographers before they take effect and update the date at the top of this page.

Contact

Terracotta Galleries LLC · support@terracottagalleries.com