Privacy Policy

1. Operator information

2. Information we collect

• Email address (for photographer registration and notifications)
• Name / business name (photographer profile)
• Client name and email address (for project management; entered by the photographer)
• Uploaded photo data (which may include personal data such as faces of the people photographed)
• Service usage logs (access timestamps, etc.)
• For the client-facing photo selection page: the date and time you agreed to the Terms of Service and Privacy Policy, the version of each document in effect at that time, and a salted hash of your IP address and User-Agent associated with that agreement record (we do not store the raw IP address or User-Agent)
• Access activity on the client-facing photo selection page (timestamps of first access, confirmation, and undo, together with a hash generated from your IP address and User-Agent and a coarse device-type classification). We use this to notify the photographer and to detect suspicious access. We do not store the raw IP address or User-Agent, and we delete this data 90 days after it is collected
• For photographers using the customer management (CRM) feature: the name, contact details, address, family composition, and children's names and dates of birth, contact history, and other information ("customer data") of the photographer's own customers (e.g., families who commission shoots)
• When you subscribe to a paid plan, information collected during checkout: your name, billing address (country, postal code, address), payment history (amount, date and time, plan, invoice number), and your card brand and last four digits. Your full card number and security code never pass through our servers — they are collected and stored directly by our payment processor, Stripe, Inc., and we do not retain them

Customer data is held and processed by the operator on the photographer's instructions and on the photographer's behalf. The operator does not use customer data for its own business purposes (see "4-2. Our role in the customer management (CRM) feature" below for details).

3. Purpose of use

• To provide and operate the Service
• To bill and process payments for paid plans, manage payment status, issue invoices and receipts, and prevent fraudulent use and fraudulent charges
• To send selection-completion notifications and subscription renewal reminder emails
• To send clients (the people a photographer has asked to select photos) reminder emails about the photo selection deadline, sent to the email address the photographer registered for the project. These do not contain advertising or promotional content, and you may unsubscribe at any time via the link in the email
• To improve the Service and respond to incidents
• To comply with legal obligations

4. Provision to third parties located abroad (subprocessors)

We entrust data to the following subprocessors. All are U.S. companies. In line with Article 28 of Japan's Act on the Protection of Personal Information, we have confirmed that each maintains a data protection framework consistent with applicable standard contractual clauses under its data processing agreement before entrusting data to them.

• Supabase, Inc. (database, storage, authentication)
• Vercel Inc. (application hosting)
• Resend, Inc. (email delivery)
• Stripe, Inc. (credit card payment processing)
• Upstash, Inc. (access control and rate limiting to prevent abuse)
• Google LLC (analytics, only if you consent — see section 8 below for details)

* Data is stored on servers located outside Japan (primarily in the United States). For information about the personal data protection systems of the destination countries, please contactkainan0880jwr@gmail.com. Except as required by law, we do not provide personal data to third parties other than the subprocessors listed above.

For details on each subprocessor's storage location, the data it handles, the legal basis for transfer, and our assessment of the external environment (the personal data protection system of the United States), see our subprocessor list (Japanese only).

4-2. Our role in the customer management (CRM) feature

In the customer management (CRM) feature, a photographer registers and manages personal data about their own customers (third parties). The roles are divided as follows:

• Photographer: acts as the personal information handling business operator (kojin joho toriatsukai jigyosha) for customer data under Japan's Act on the Protection of Personal Information (APPI), and bears primary responsibility for specifying the purpose of use, lawfully obtaining data, and responding to the data subject
• Operator: processes customer data under an entrustment (itaku) from the photographer, and only within the scope of the photographer's instructions (see Article 7-3 of the Terms of Service)

If a customer (or their legal guardian) wishes to access, correct, or delete their own information, please contact the photographer who registered it first. If the photographer then requests deletion or another action from the operator, the operator will respond within a reasonable period after verifying identity.

4-3. Handling of client information in the photo selection feature

The client's name and email address that a photographer registers when creating a project are handled by the operator in order to provide the photo selection feature. The operator may automatically send a reminder email to that address about the photo selection deadline. This is an administrative message incidental to the photo shoot the client has commissioned, and is not for advertising or promotional purposes.

If you do not wish to receive these reminder emails, you can unsubscribe at any time via the "unsubscribe" link in the email. If you wish to access, correct, or delete your own information, please contact the photographer who commissioned the shoot first. If contacting the photographer is difficult, you may contact us directly at the email address in section 10 below. We will respond, after verifying your identity, within a reasonable period.

5. Data retention period

• Photo data (Free plan): 30 days after a project is created, the underlying photo files are removed from our servers and storage, and become inaccessible from the selection page. Some records (such as the project name and upload timestamp) may be retained for operational purposes
• Photo data (Light, Standard, Pro plans): retained indefinitely while a paid plan is active
• If a paid plan is canceled and the account reverts to the Free plan, we retain photo data for 30 days from the date of cancellation. We will email you in advance if this grace period is about to end. After the grace period, the Free plan conditions above apply
• Account information and photo data: if you delete your account, both your photo files and account information are permanently deleted from our servers. If you were using the customer management (CRM) feature, your customer data (including any children's information) is also permanently deleted at the same time as account deletion. The usual 30-day retention period that applies when a CRM contract ends does not apply to account deletion
• Customer management (CRM) feature data: unlike photo data, this is retained for as long as the photographer continues to use it for customer management purposes. If a photographer deletes an individual customer record, we permanently erase it within 30 days of the deletion (to allow recovery from mistakes and for fraud investigation). If a photographer's paid CRM contract ends and their customer count is within the free tier (up to 3 customers), their data is not deleted and they continue on the free tier. If they hold more than the free tier limit, we keep the data exportable for 30 days from the termination date, after which it is deleted. Separately, for accounts that have never held a paid CRM contract (free-tier only), if there has been no login for 12 months or more, we may delete the data after sending an advance email notice. In all cases, we will email you in advance if a grace period is about to end

* Deleted data may remain in system backups for a period of time. Complete erasure from backups may take longer than the deletion process described above.

6. Security

• All photos are accessible only via time-limited signed URLs
• The client selection page URL is automatically disabled 7 days after the shoot deadline. The photographer can also disable it manually at any time
• Row-level security (RLS) prevents access to other users' data
• All communications are encrypted via HTTPS (TLS)
• Credit card details never pass through our servers; Stripe, Inc. collects and stores them directly. We never hold your card number

7. Access, correction, and deletion

You can change (correct) your email address yourself from the "Settings" page in your dashboard. To access or delete your own personal data, you can delete your account from the same "Settings" page. For other requests, please contact us at the email address below. We will respond, after verifying your identity, generally within 30 days.

8. Cookies, analytics, and external data transmission

The Service uses cookies to maintain login sessions. If you disable cookies in your browser, some features may not work correctly.

On the Service's marketing pages and the photographer dashboard, we use Google Analytics (GA4), provided by Google LLC, only if you consent via the banner shown at the bottom of the screen. It is never loaded unless you consent. The client-facing page where subjects select their photos (the URL-token-based selection page) never uses Google Analytics, regardless of consent. Google Analytics uses cookies to collect access information (page views, time on page, referral source, etc.), but we do not use it in a way that identifies you personally. Collected data is managed under Google's own privacy policy. If you wish to withdraw consent after accepting, you can clear your browser's cookies and site data, or use theGoogle Analytics Opt-out Browser Add-on.

We also use Stripe, Inc.'s JavaScript library for payment processing, which transmits browser information to Stripe. Please refer to Stripe's privacy policy for details.

9. Changes to this policy

If we make material changes to this policy, we will provide at least 30 days' notice within the Service or by email before the change takes effect. Minor changes may be made at any time, with the "last updated" date revised accordingly.

10. Contact

For inquiries regarding the disclosure, correction, deletion, or suspension of use of your personal data, please contact us at the email address below. We will respond, after verifying your identity, within a reasonable period (generally within 30 days).

kainan0880jwr@gmail.com