Privacy Policy

ShotLocker, LLC runs ShotLocker. This explains what we collect, why, and who else handles it.

What we collect

• Account: name, email, password (stored hashed by our authentication provider), and your account settings.
• Your content: photos you upload and the metadata inside them, which can include captions, keywords, bylines, dates, camera details and GPS location. We also store edits you make and gallery, client and site settings.
• Your clients and visitors: if you invite clients to galleries, the email addresses you enter, sign-in codes, and a log of downloads (what was downloaded, when, and by whom). Visitors to a published site or gallery get a sign-in cookie only when a gallery is protected.
• Setup answers: when you create an account we ask what kind of photography you do, how you work, roughly how large your library is, where it lives today, what you want to use ShotLocker for, and how you found us, plus an optional business name and website address. They help us tailor the product and plan suggestions, and you can leave any of them blank.
• Billing: your plan and subscription status. Card details go directly to Stripe; we never see or store full card numbers.
• Usage and logs: storage and delivery volume (to apply storage limits and keep the service fair for everyone) and technical logs such as IP address and request details for security and rate limiting. If you accept analytics in our cookie banner, then on our marketing site, sign-in and sign-up pages and inside the signed-in app we also count page views and feature use on our own servers (no outside analytics company receives it). This is not used on photographer sites or gallery pages, so your clients and site visitors are not analysed.

Why we use it (legal bases)

We rely on performance of our contract with you (running your account, storage, delivery and billing), our legitimate interests (security, abuse prevention, fair-use limits), legal obligations, and your consent (analytics cookies, which you can withdraw at any time from Cookie settings). To provide the service, search and deliver your photos, bill you, keep the service secure and prevent abuse, send transactional email (sign-in codes, receipts, gallery invitations), and meet legal obligations. We do not sell your personal data and we do not use your photos to train AI models.

Who handles it

We use service providers to run ShotLocker: Amazon Web Services (file storage and processing), Supabase (database and authentication), Stripe (payments), Resend (email) and our hosting provider. They process data only on our instructions. We may also disclose data when required by law or to protect rights and safety.

Cookies

We always use strictly necessary cookies to keep you signed in and to remember a gallery sign-in. Analytics cookies are set only if you accept them in our cookie banner, and you can withdraw consent at any time. We do not use advertising or cross-site tracking cookies or session recording. Details are in our Cookie Policy.

Photographs of other people

If your photos show identifiable people, you are responsible for the lawful basis and permissions to store and share them, and for responding to those people’s requests. We act as your processor for that content.

Retention

We keep account data while your account is open. Deleted photos go to trash and are purged after the retention window. You can delete your account yourself in the app (Account → Delete account). That cancels your subscription and permanently erases your photos, galleries, site, clients and settings, and your login, straight away. We keep only records we must keep (such as invoices and payment records held by our payment processor) for legal and tax reasons.

Your rights

Depending on where you live (including the EEA, UK and California) you can ask to access, correct, export or delete your data, object to some uses, or complain to your regulator. Email support@shotlocker.io. Data may be processed in the United States and other countries; where required we rely on appropriate transfer safeguards.

Children

ShotLocker is not for people under 18, and we do not knowingly collect their data.

Changes and contact

We will announce material changes in the app or by email. Questions: ShotLocker, LLC, support@shotlocker.io.