Privacy Policy

Photo Haven is used by photography and film studios, and by their clients, who open galleries, websites, booking pages, contracts and invoices the studios share with them.

• Studios: for your account, plan and billing, Photo Haven decides how your information is used and is responsible for it.
• Studios' clients: the information a studio keeps about you (your name, email, gallery, contracts and invoices) belongs to that studio, and the studio decides how it's used. Photo Haven stores and processes it for them. For questions about it, contact the studio first. We'll help them answer.

Your account

Your email address and password (stored only in a scrambled form we can't read), and your name if you give it.

Your studio

Studio name, logo, colours, contact email, website, social handles, tax details you add for invoices, and the people you invite to your team.

Billing

Your plan, add-ons, billing dates and Stripe's references to your customer and subscription. Stripe collects and holds your card and billing address. We never see your full card number.

Your work

Photos, films and their file details, galleries, website pages, booking settings, contracts, questionnaires, invoices, clients and projects you create.

From your clients, on your behalf

• Gallery visits, favourites, downloads and the email address a visitor chooses to give.
• Booking and enquiry details people send through your pages.
• For signed contracts: the signer's name and signature, the time, and the device's IP address and browser, kept as a record of the signing.
• Card payments to studios go through the studio's own Stripe account, under Stripe's privacy policy.

Clients keeping a gallery

Your email and billing details, which Stripe collects to take your payments, and which gallery you're keeping.

Moving from Pixieset

If you use our Chrome extension, Photo Haven Mover, it reads your galleries from your own Pixieset account with your Pixieset sign-in (their photos and videos, original files, and settings such as event dates and download settings) and copies them only into your Photo Haven studio. It never sees your Pixieset password, it doesn't collect anything else, and nothing is changed on Pixieset.

Technical information

IP address, browser and device type, and pages visited, in our service providers' logs and in visitor counts for our own website. We use them to keep Photo Haven secure, fix problems and understand how it's used.

We use your browser's storage for things Photo Haven needs to work: keeping you signed in, remembering a gallery visit so your favourites stay put, and small preferences. We don't use advertising or cross-site tracking cookies.

• To run Photo Haven: show your galleries and pages, deliver files, take payments for plans and kept galleries, and send account emails such as sign-in links, receipts and trial reminders.
• To keep it safe: prevent abuse, fraud and access to other studios' data.
• To support you when you write to us, and to improve Photo Haven.
• To meet legal duties, such as keeping billing records for tax.

We don't sell personal information, use it for advertising, or use your photos and films to train AI models.

We share information only with the service providers we need, only for running Photo Haven, and under their own security and privacy commitments:

• Lovable and Supabase: hosting the app, its database and sign-in.
• Cloudflare: storing photos and files (R2), streaming films (Stream), and connecting studios' own domains.
• Stripe: plan and kept-gallery payments, tax calculation and receipts.
• Resend: sending Photo Haven's emails, such as galleries studios send their clients, team invites and account notices.

We may also share information if the law requires it, to protect people's safety, or as part of a sale or merger of Photo Haven, in which case this policy would continue to apply.

These providers may store information in the United States and other countries. Where the law requires, they use approved safeguards for international transfers.

• Your studio's information and work: while your studio is active.
• If your plan ends, the studio is paused and its content is kept for 90 days so you can come back. After that it may be deleted, after we email you. See the Terms of Service.
• Galleries clients keep: while the client keeps paying.
• Billing records: as long as tax law requires, usually up to 7 years.
• Deleted files may stay in backups for a short time before they're gone for good.

You can see and change most of your information in your studio's Settings. You can also ask us to give you a copy of your information, correct it, or delete your account, by writing to support@photo-haven.com. Depending on where you live (for example, under the GDPR, Canada's PIPEDA, or US state laws such as California's), you may have further rights, including to object to or limit some uses. We'll answer within 30 days and won't treat you differently for asking.

If you're a studio's client, ask the studio first; they control your information in Photo Haven.

Files are kept in private storage and shared only through links that expire. Each studio's information is kept apart from other studios' at the database level. Connections are encrypted. No system is perfectly secure, so if we learn of a breach that affects you, we'll tell you as the law requires.

Photo Haven is for businesses and their adult clients, not for children to sign up. Studios that photograph children are responsible for having their parents' or guardians' consent to store and share those photos.

If we make significant changes, we'll tell studio owners by email or in the app before they take effect, and update the date at the top.

Privacy questions or requests: support@photo-haven.com.