Privacy Policy

Last updated: October 19, 2026

This is a draft for review. This policy should be reviewed by a qualified attorney before Safelight accepts paying customers or goes through Meta App Review.

1. What We Collect

From photographers:

Account information: name, email, studio name.
Photographs and gallery content you upload.
Payment information via Stripe (we do not store card numbers; Stripe processes payments).
Instagram account data you authorize: profile info, media, and insights — only the permissions you grant during OAuth.

From gallery visitors and buyers:

Order information: name, email, shipping address (for print orders).
Favorites and download activity within password-protected galleries.

Automatically:

Basic server logs (IP address, pages visited, timestamps) for security and debugging. Retained 30 days.

2. How We Use It

To operate your website, galleries, and store.
To process orders and deliver digital products.
To sync your Instagram portfolio (only if you connect Instagram).
To communicate about your account, billing, and service updates.
We do not sell your data. We do not use your photographs for advertising without your consent.

3. Data Storage and Security

Photos are stored on Cloudflare R2 (encrypted in transit and at rest).
Account data is stored in Cloudflare KV with daily backups.
Instagram OAuth tokens are encrypted with AES-256-GCM before storage.
We use HTTPS everywhere. Access to production data is restricted.

4. Sharing

We share data only as necessary to operate the Service:

Cloudflare: hosting, storage, and CDN.
Stripe: payment processing (your own Stripe account).
Meta/Instagram: only the API calls you authorize when connecting Instagram.
We will disclose data if required by law, with notice to you where permitted.

5. Your Rights

Access: request a copy of your data at any time.
Deletion: request deletion of your account and data. We complete deletion within 30 days, except where retention is required by law (e.g., tax records).
Instagram: disconnecting Instagram in your settings revokes our access; we delete stored tokens immediately.
Export: download your photographs and gallery data at any time from your dashboard.
Contact privacy@safelightphoto.com for any request.

6. Data Retention

Active accounts: data retained for the life of the account.
Cancelled accounts: 90-day export window, then permanent deletion (except legal holds).
Server logs: 30 days. Backups: 30 days rolling.

7. Children

The Service is not directed at children under 13. Photographers are responsible for obtaining appropriate consents for minor subjects in their galleries.

8. Changes

We will notify you by email of material changes at least 14 days before they take effect.

9. Contact

Privacy questions or requests: privacy@safelightphoto.com