Privacy Policy
Last updated: July 9, 2026
This Privacy Policy describes how ShutterMatch LLC ("Company", "We", "Us", or "Our") collects, uses, and discloses Your information when You use our Service, and explains Your privacy rights and how the law protects You.
By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy.
Definitions
- Account — A unique account created for You to access our Service.
- Company — ShutterMatch LLC, 931 10th Street #1117, Modesto, CA 95354. For the purpose of the GDPR, the Company is the Data Controller.
- Cookies — Small files placed on Your device by a website, containing details of Your browsing history.
- Country — California, United States.
- Device — Any device that can access the Service, such as a computer, cellphone, or tablet.
- Personal Data — Any information that relates to an identified or identifiable individual.
- Service — The ShutterMatch website, accessible from https://www.shuttermatch.io.
- Service Provider — Any third-party company or individual employed by the Company to facilitate the Service, provide the Service on behalf of the Company, or assist in analyzing how the Service is used. For the purpose of the GDPR, Service Providers are considered Data Processors.
- Usage Data — Data collected automatically, generated by the use of the Service or from the Service infrastructure itself.
- You — The individual accessing or using the Service.
Data We Collect
Personal Data
While using Our Service, We may ask You to provide personally identifiable information, including but not limited to:
- Email address
- First name and last name
- Address, State, Province, ZIP/Postal code, City
- Profile photographs and portfolio images
- Messaging data, including message content and file attachments
- Location data, such as city, state, and ZIP code provided on photographer profiles
- Notification preferences and notification history
Usage Data
Usage Data is collected automatically and may include Your Device's IP address, browser type and version, the pages You visit, the time and date of Your visit, time spent on those pages, unique device identifiers, and other diagnostic data.
When You access the Service through a mobile device, We may automatically collect the type of mobile device, Your mobile device unique ID, IP address, mobile operating system, mobile browser type, and other diagnostic data.
Cookies and Tracking Technologies
We use Cookies and similar tracking technologies to track activity on Our Service and store certain information. Technologies used include beacons, tags, and scripts.
Types of Cookies We use:
| Cookie Type | Duration | Purpose | |---|---|---| | Essential Cookies | Session | Required for authentication and core functionality | | Preference Cookies | Persistent | Remember Your choices (login details, language) | | Performance Cookies | Persistent | Track traffic and usage patterns to improve the Service |
You can instruct Your browser to refuse all Cookies or indicate when a Cookie is being sent. However, some parts of our Service may not function properly without Cookies.
How We Use Your Data
We may use Personal Data for the following purposes:
- To provide and maintain our Service, including monitoring usage
- To manage Your Account and provide access to Service functionalities
- To perform a contract, including processing bookings and payments
- To contact You by email or in-app notifications regarding updates, booking status, or security
- To facilitate communications between users, including direct messaging with text, file attachments, and reactions
- To send notifications for booking updates, payment confirmations, new messages, reviews, and other events. You may manage notification preferences through Your account settings.
- To provide analytics to photographers, including profile views, portfolio engagement, and booking conversion data
- To manage Your requests and provide support
- For business transfers, such as mergers, acquisitions, or asset sales
- For other purposes, such as data analysis, identifying usage trends, and improving the Service
Sharing Your Data
We may share Your personal information in these situations:
- With Service Providers — for payment processing, authentication, file storage, email delivery, and analytics
- For business transfers — during mergers, acquisitions, or asset sales
- With Affiliates — who are required to honor this Privacy Policy
- With business partners — to offer certain products, services, or promotions
- With other users — when You interact in public areas of the Service
- With Your consent — for any other purpose You approve
Data Retention
We retain Your Personal Data only as long as necessary for the purposes set out in this Policy. We will retain and use Your data to the extent necessary to comply with legal obligations, resolve disputes, and enforce our agreements.
Usage Data is generally retained for a shorter period, except when used to strengthen security, improve functionality, or when legally required.
Data Transfer
Your information may be transferred to and maintained on computers located outside of Your jurisdiction where data protection laws may differ. Your consent to this Policy and submission of information represents Your agreement to such transfer.
We will take all reasonably necessary steps to ensure Your data is treated securely in accordance with this Privacy Policy.
Your Right to Delete
You have the right to delete or request deletion of Your Personal Data. You may update, amend, or delete Your information through Your account settings, or contact Us for assistance.
We may need to retain certain information when we have a legal obligation or lawful basis to do so.
Disclosure of Your Data
We may disclose Your Personal Data:
- In business transactions — during mergers, acquisitions, or asset sales (with prior notice)
- For law enforcement — when required by law or valid public authority requests
- For legal requirements — to comply with legal obligations, protect Company rights, prevent wrongdoing, protect user safety, or defend against legal claims
Security
The security of Your Personal Data is important to Us. While We strive to use commercially acceptable means to protect it, no method of internet transmission or electronic storage is 100% secure. We cannot guarantee absolute security.
Third-Party Service Providers
The following Service Providers may have access to Your Personal Data:
Authentication
Auth0 — Manages user registration and login. Processes login credentials, OAuth tokens, and profile information. Auth0 does not share Your credentials with Us. Auth0 Privacy Policy
File Storage
Cloudflare R2 — Stores user-uploaded files including profile photos, portfolio images, booking deliverables, and message attachments. Cloudflare Privacy Policy
Email Delivery
Resend — Delivers transactional notification emails including booking updates, payment confirmations, and message alerts. Resend Privacy Policy
Database Hosting
Supabase — Hosts our database infrastructure where account data, bookings, messages, reviews, and other application data are stored. Supabase Privacy Policy
Error Monitoring
Sentry — Captures application error reports so We can diagnose and fix technical issues. Error events may include limited technical context such as IP address and request metadata; We configure Sentry to exclude personal data by default. Sentry Privacy Policy
Payments
Stripe — Processes client payments and facilitates photographer payouts through Stripe Connect. Payment card details are provided directly to Stripe and never stored on Our servers. Photographers onboarded via Stripe Connect may provide banking information, tax IDs, and identity verification directly to Stripe. Stripe Privacy Policy
Location Services
Google Places — Provides location search functionality. May collect information from You and Your Device. Google Privacy Policy
GDPR Privacy (European Users)
Legal Basis for Processing
We may process Personal Data under the following conditions:
- Consent — You have given consent for one or more specific purposes
- Performance of a contract — Processing is necessary for an agreement with You
- Legal obligations — Processing is required by law
- Vital interests — Processing protects Your vital interests
- Public interests — Processing is related to a task carried out in the public interest
- Legitimate interests — Processing is necessary for Our legitimate business interests
Your GDPR Rights
If You are within the EU, You have the right to:
- Access Your Personal Data and receive a copy
- Correct incomplete or inaccurate information
- Object to processing based on legitimate interests or direct marketing
- Request erasure when there is no good reason to continue processing
- Request transfer of Your data in a structured, machine-readable format
- Withdraw consent at any time
To exercise these rights, contact Us at support@shuttermatch.io. We may verify Your identity before responding. You also have the right to complain to Your local Data Protection Authority in the EEA.
CCPA/CPRA Privacy (California Residents)
Categories of Personal Information Collected
| Category | Collected | |---|---| | A: Identifiers (name, email, IP address, account name) | Yes | | B: California Customer Records (name, address, financial info) | Yes | | C: Protected classifications (age, race, gender) | No | | D: Commercial information (purchase history) | Yes | | E: Biometric information | No | | F: Internet activity (browsing, interaction with Service) | Yes | | G: Geolocation data | Yes (voluntary city/state/ZIP only; no real-time tracking) | | H: Sensory data | No | | I: Professional information | No | | J: Education information | No | | K: Inferences | No | | L: Sensitive personal information (login credentials) | Yes |
Sources of Personal Information
- Directly from You — forms, preferences, purchases
- Indirectly from You — observing Your activity
- Automatically — through Cookies and tracking technologies
- From Service Providers — payment processing, authentication, error monitoring
Sale of Personal Information
We do not sell Your personal information. We share data with Service Providers solely for operating the platform. These providers are contractually prohibited from using Your data for their own purposes.
Your California Rights
- Right to notice — Know what data is collected and why
- Right to access — Request disclosure of collected data
- Right to opt-out — Direct Us not to sell Your information
- Right to correct — Fix inaccurate personal information
- Right to delete — Request deletion (subject to exceptions)
- Right to limit sensitive data — Restrict use of sensitive information
- Right to non-discrimination — Equal service regardless of rights exercised
To exercise Your rights, contact Us at support@shuttermatch.io. We will respond within 45 days. Only You or an authorized representative may make a verifiable request.
Do Not Track
Our Service does not respond to Do Not Track signals. Some third-party websites may track Your browsing activities; You can manage this through Your browser settings.
Children's Privacy
Our Service does not address anyone under the age of 13. We do not knowingly collect personally identifiable information from anyone under 13. If You are a parent or guardian and believe Your child has provided Us with Personal Data, please contact Us. We will take steps to remove that information from Our servers.
Links to Other Websites
Our Service may contain links to third-party websites not operated by Us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites. We strongly advise You to review the Privacy Policy of every site You visit.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify You of changes by posting the new Policy on this page and updating the "Last updated" date. We will notify You via email and/or a prominent notice on Our Service prior to changes becoming effective.
Contact Us
If You have any questions about this Privacy Policy, You can contact us:
Email: support@shuttermatch.io