Privacy Policy

This Privacy Policy explains how [Your business or entity name] (“we,” “us”) collects, uses, shares, and protects information when you use this website and service (the “Service”), which turns a Lightroom photo edit into a tutorial video or carousel. It applies to visitors, registered account holders, and anyone whose photos or edit data is uploaded to the Service.

By checking the consent box on our sign-up form, you confirm you have read this policy and agree to it. If you do not agree, please do not create an account or upload content.

We collect the following categories of information:

• Account information: the email address and password you sign up with (your password is handled by our authentication provider and is never visible to us in plain text), and the subscription plan you select or later request to change to.
• Content you upload: your original/RAW photo, its associated edit-settings sidecar file(s), your finished exported photo, and any custom background image you choose to upload.
• Content we generate for you: the tutorial video and/or carousel images produced from the content above, and the storyboard styling choices (colors, fonts, layout, timing, and any named “themes” you save) used to produce them.
• Account activity: project titles, timestamps, project status, and the date you accepted this policy and our Terms of Service.
• Technical data: the session credentials needed to keep you signed in, stored in your browser (see Section 7, Cookies).

We do not collect payment card details. [If/when paid subscriptions are enabled, payments will be processed by a third-party payment processor (e.g. Stripe), who will collect and store your payment details under their own privacy policy — we only ever receive confirmation that a payment succeeded, never your card number.]

• To operate the Service: reading your edit settings, rendering your video/carousel, and displaying your projects back to you.
• To create and secure your account, and authenticate you when you sign in.
• To enforce the usage limits and features attached to your subscription plan.
• To communicate with you about your account (e.g. confirming your email address).
• To maintain the security, integrity, and reliability of the Service.
• To comply with legal obligations we may be subject to.

We do not sell your personal information, and we do not use your photos or generated content to train any third-party or public AI/machine-learning model.

If you are located in the European Economic Area or the United Kingdom, we process your information on the following legal bases: performance of a contract (providing the Service you signed up for), your consent (given at sign-up, and withdrawable at any time by deleting your account), and our legitimate interests in operating and securing the Service, where those interests are not outweighed by your rights.

We do not sell or rent your information. We share it only with the service providers that host and run the Service on our behalf (our “sub-processors”), each bound to protect it:

• Supabase -- our authentication, database, and file-storage provider. Your account credentials, project data, uploaded photos, and generated output are stored on Supabase’s infrastructure.
• [Stripe -- our payment processor, once paid subscriptions are enabled. Stripe processes payment information directly; we do not store it.]
• [Add any other hosting, email-delivery, or analytics provider you actually use.]

We may also disclose information if required by law, to protect the rights, property, or safety of the Service, our users, or others, or in connection with a merger, acquisition, or sale of assets (with notice to you where required).

We retain your account and project data for as long as your account is active. Projects are automatically and permanently deleted after a configured number of days from creation (currently [30] days by default) as a storage-management measure; you can also delete an individual project yourself at any time. Deleting a project removes its files and metadata from our systems, except where retained copies are required for backups, fraud prevention, or legal compliance for a limited additional period.

To request deletion of your entire account and all associated data, contact us using the details in Section 11 — we do not yet offer a self-service “delete my account” button, so this is currently handled manually on request.

We do not use advertising or analytics cookies, and we do not track you across other websites. To keep you signed in, your browser stores an essential session credential (via local browser storage, not a tracking cookie) that is strictly necessary for the Service to function — this cannot be disabled without also disabling sign-in.

Depending on where you live, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate information (most of this you can edit yourself in the app).
• Delete your projects (self-service) or your entire account (by request — see Section 6).
• Obtain a copy of your data in a portable format.
• Object to, or request that we restrict, certain processing.
• Withdraw consent at any time, without affecting processing that already occurred.

California residents have additional rights under the CCPA/CPRA, including the right to know what personal information is collected, sold, or disclosed (we do not sell personal information), and the right to non-discrimination for exercising your privacy rights. EEA/UK residents also have the right to lodge a complaint with their local data protection authority.

To exercise any of these rights, contact us using the details in Section 11.

The Service is not directed to, and is not intended for use by, anyone under 16 years old. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

Our service providers may store and process information in countries other than the one you live in, including [the United States]. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for these transfers.

We use reasonable technical and organizational measures to protect your information, including access controls that restrict your data to your own account and encrypted connections between your browser and our servers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We may update this policy from time to time. If we make material changes, we will update the effective date above and, where appropriate, notify you (e.g. by email or an in-app notice). Continued use of the Service after a change takes effect means you accept the updated policy.

Questions about this policy, or requests to access, correct, or delete your information, can be sent to: [your contact email] ([Your business or entity name]).