Last updated May 25, 2026

Privacy Policy

Your privacy matters. Here's exactly what we collect and why.

1. Information We Collect

Photographer accounts: name, email address, and password (hashed). Gallery data: event names, client names, dates, and locations you enter. Photos: image files you upload, including metadata you choose to keep. Client access: we log gallery login attempts (IP address, timestamp) for security purposes.

2. How We Use Your Information

To operate the Service — authenticating accounts, storing and delivering photos, and sending gallery invite emails. To improve the Service — understanding how features are used. We do not sell your data or your clients' data to third parties.

3. Photo Storage

Photos are stored on Vercel Blob, a cloud storage service. Files are stored with unique keys and served over HTTPS. Gallery links and credentials are required to access client galleries.

4. Email Communications

We use Resend to send transactional emails: gallery invites, account confirmations, and password resets. We do not send marketing emails without explicit consent.

5. Cookies & Sessions

We use cookies for photographer authentication (Supabase session) and for client gallery access (gallery session token, scoped to the gallery URL and valid for 30 days). No tracking or advertising cookies are used.

6. Data Sharing

We share data only with the infrastructure providers required to operate the Service: Supabase (database and authentication), Vercel (hosting and blob storage), and Resend (transactional email). These providers are bound by their own privacy policies.

7. Your Rights

You can delete your account and all associated data at any time from Profile Settings → Danger Zone. For data requests or corrections, contact us at privacy@vino.photos. We respond within 30 days.

8. Data Retention

Your data is retained for as long as your account is active. When you delete your account, photos are removed from storage and your records are deleted from our database. Gallery login attempt logs are automatically purged after 30 days.

9. Children's Privacy

The Service is not directed to children under 16. We do not knowingly collect personal information from children under 16. If you believe we have collected such information, contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy. We will notify registered photographers by email of any material changes. The "last updated" date at the top reflects the most recent revision.

11. Contact

For privacy questions or data requests, email us at privacy@vino.photos.

Terms of Service →