Privacy Policy

1. Who we are

PhotoStrip Studio is a software service operated from Victoria, Australia by Oliver Perkins Robb, a sole trader (ABN 19 199 423 833). In this policy, “PhotoStrip Studio”, “we”, “us” and “our” refer to Oliver Perkins Robb as the operator of the service at photostripstudio.com.

We provide design, project organisation, client briefing, proposal review, client collaboration and template-download tools for photo-booth businesses. Contact us about privacy at hello@photostripstudio.com.

2. Scope and our privacy roles

This policy applies to visitors, account holders, people who receive a client link, people who submit a brief or design, and people who contact us.

We act as a controller for account, billing, support, security and service-usage information that we use for our own business purposes. When a business customer enters or collects information about its clients through PhotoStrip Studio, that customer generally controls why the information is processed and we generally process it on the customer’s behalf. Our Data Processing Addendum applies to that processing.

3. Information we collect

• Account information, including name, email address, authentication provider, provider identifier and account preferences.
• Business and brand information, including business name, contact details, logos, colours and brand settings.
• Project information, including project names, client names, event types, dates, client briefs and activity records.
• Design content, including uploaded images, generated designs, editable design state, thumbnails, template selections and exported files.
• Client-link information, including invitee names and email addresses, comments, approvals, rejections, favourites, brief responses, submitted designs, link-open or response times, coarse device category and Client Workspace progress or failure events.
• Support and feedback information, including messages, optional reply email, ratings and the page from which feedback was sent.
• Payment and subscription information when paid products launch. Payment-card details will ordinarily be handled by our payment provider rather than stored by PhotoStrip Studio.
• Technical information reasonably generated by use of the service, such as browser and device information, request records, security events, authentication cookies and error information. Authentication session records may include an IP address and browser user-agent string for account security; these are separate from the product-outcome records described below.
• Limited internal product and reliability records created when the service completes an action or a Client Workspace reaches a submission stage, such as opening a private link, starting an edit, preparing or uploading a design, encountering a categorised failure, or submitting successfully. These product-outcome records may use an operator account identifier, an opaque per-tab session identifier, a coarse device category and selected format/export identifiers, but do not retain raw user-agent strings, IP addresses, client names, email addresses, design wording, uploaded artwork, file URLs or project names.

4. How information is collected

• Directly from you when you register, create projects, upload content, configure your brand, purchase a product, contact us or submit feedback.
• From a business customer when it creates a client record, brief, proposal or invitation for you.
• From Google when you choose Google sign-in, limited to the account information and identifiers needed to authenticate you.
• Automatically through essential cookies, server requests, security controls and normal service operation.
• Automatically when our server successfully completes a requested product action.

5. Why we use information

• Provide, secure, maintain and improve the service.
• Create and manage accounts, projects, designs, templates, client links and downloads.
• Send authentication, invitation, proposal, security, service and billing communications.
• Process purchases, subscriptions, refunds and account changes when paid access is offered.
• Respond to support requests and product feedback.
• Detect misuse, protect public links, enforce our terms and comply with law.
• Understand which core product outcomes are completed and improve reliability and usability using our internal product-outcome records. We do not use advertising trackers or sell behavioural profiles.

6. Legal bases for UK and similar privacy laws

Where a law requires a legal basis, we rely on performance of our contract to provide account and paid services; legitimate interests in securing, operating and improving a business software service; consent where it is specifically requested; and compliance with legal obligations. A customer relying on PhotoStrip Studio to process client information is responsible for identifying its own lawful basis and giving required notices to those clients.

7. Service providers and disclosures

We disclose information only as reasonably needed to run the service, follow your instructions, complete a transaction, protect rights and safety, or comply with law. Our principal providers currently include:

• Cloudflare for application hosting, content delivery, serverless compute, database services and private object storage. PhotoStrip Studio uses Better Auth within that infrastructure to manage authentication sessions and credentials.
• Google for optional Google authentication and for fonts loaded by a visitor’s browser from Google Fonts. A font request may disclose the visitor’s IP address and browser information to Google.
• Resend for transactional email delivery.
• SplitForms for feedback submissions when you use the feedback form.
• Future payment, accounting, fraud-prevention and customer-support providers where needed for paid services.
• Professional advisers, regulators, courts, law-enforcement bodies or a purchaser of the business where disclosure is lawful and reasonably necessary.

8. International processing

PhotoStrip Studio is operated from Australia. Our providers may process information in North America, Australia and other regions in which they or their subprocessors operate. Cloudflare location hints used for the application database and object storage are performance preferences, not country-specific data-residency guarantees. Privacy protections can differ between countries. Where required, we use contractual or other lawful transfer safeguards and provide further information on request.

9. Public and shareable links

Client proposals, briefs and Client Workspace projects use hard-to-guess shareable links and do not require a client account. Anyone who receives or obtains a live link may be able to view or submit the information made available through it. Customers must share links carefully and revoke or replace them if exposure is suspected. Public-link content is not intended for confidential, health, financial, identity-document or other highly sensitive information.

10. Retention

We keep account and project information while an account remains active and afterwards only for as long as reasonably needed for recovery, security, disputes, legal compliance and legitimate business records. Public-link records remain until deleted, revoked, expired or removed with the related project or account; an expired link does not by itself delete its underlying records. Feedback and support records are retained for as long as reasonably useful to resolve the matter and improve the service.

Authentication sessions normally expire after seven days, and expired session and verification records are removed through routine maintenance. Some security or provider records may follow different retention periods.

Backup or provider-system copies may take additional time to cycle out. We may retain de-identified information that can no longer reasonably identify a person.

11. Security

We use reasonable technical and organisational safeguards appropriate to the service, including authenticated account access, ownership controls, private asset storage, encrypted network connections, tokenised client links and restricted administrative credentials. No online system is completely secure, and customers remain responsible for account security, safe link sharing and keeping independent copies of important final exports.

12. Your choices and rights

• Access and update account and project information through the service where available.
• Request access, correction, deletion, restriction, portability or objection where the applicable law provides that right.
• Where we rely on legitimate interests, object to that processing by emailing hello@photostripstudio.com. We will assess the objection under the law that applies to you.
• Withdraw consent for future processing where consent is the basis, without affecting earlier lawful processing.
• Opt out of marketing messages using the unsubscribe method provided. Essential account, billing, invitation and security messages are not marketing.
• Delete projects using product controls and request account deletion under our Account and Data Deletion Policy.
• Complain to us first and, where applicable, to the Office of the Australian Information Commissioner, the UK Information Commissioner’s Office or another local privacy regulator.

13. California and other US privacy rights

PhotoStrip Studio does not sell personal information. We do not currently share personal information for cross-context behavioural advertising. If a US state privacy law applies to us, residents may exercise the rights it grants by contacting us. We will verify requests as reasonably required and will not unlawfully discriminate against a person for exercising a privacy right. If our practices change, we will update this policy and provide any required opt-out controls.

14. Children

PhotoStrip Studio is a business service and is not directed to children. Account holders must be at least 18 years old and able to enter a contract. Customers must not use the service to intentionally collect children’s personal information without all permissions, notices and safeguards required by law.

15. Changes and contact

We may update this policy as the product, providers or law change. We will publish the updated date and give additional notice of material changes where reasonably required. Send questions, complaints and rights requests to hello@photostripstudio.com. We will acknowledge privacy complaints, investigate them and respond within the period required by applicable law. If you are dissatisfied, you may contact the privacy regulator with jurisdiction over your complaint.