Privacy Policy

1. Scope

This Privacy Policy explains how NextPhoto collects, uses, discloses, and protects personal information when you use our software-as-a-service platform, websites, hosted photography galleries, ordering tools, mobile messaging features, support channels, and related business operations.

This policy applies to information we collect directly from customers, account users, gallery visitors, and prospective customers, as well as information collected automatically through use of the platform.

2. Information We Collect

• Account and profile data, including name, business name, email address, mobile number, password credentials, and authentication details.
• Customer content and platform data, including galleries, images, metadata, form submissions, templates, campaigns, automation settings, and other content uploaded or created in the service.
• Transaction and billing information, including subscription plan details, invoices, order history, tax information, billing contacts, and payment status. Payment card data is processed by our payment providers and is not stored in full by NextPhoto.
• Communications data, including support requests, email interactions, SMS consent records, notification logs, and customer service history.
• Usage and device information, including IP address, browser type, operating system, referrer, session events, audit logs, and security telemetry.
• Public or third-party data we receive from service providers that support domain management, analytics, messaging, fraud prevention, hosting, and payment processing.

3. How We Use Information

• Provide, secure, maintain, and improve the NextPhoto platform and related services.
• Provision tenant workspaces, authenticate users, manage permissions, and operate account features.
• Host galleries, process orders, fulfill downloads, and support customer-facing photography workflows.
• Send transactional emails and SMS messages regarding account setup, authentication, gallery access, order updates, billing, and operational notices.
• Provide customer support, respond to inquiries, and communicate about service issues or product changes.
• Prevent fraud, abuse, unauthorized access, spam, and other misuse of the platform.
• Comply with legal obligations, enforce our agreements, and protect the rights, safety, and security of NextPhoto, our customers, and others.

4. Legal Bases and Customer Instructions

When required by applicable law, we rely on one or more legal bases to process personal information, such as performance of a contract, legitimate interests, compliance with law, and consent.

If you use NextPhoto as a business customer, you are responsible for determining that you have the necessary rights, notices, and permissions to upload, collect, and use personal information within your tenant workspace.

5. SMS Communications

NextPhoto may send transactional SMS messages related to your account activity.

We do NOT send marketing or promotional SMS messages.

Users must provide explicit consent before receiving SMS messages. Consent is collected via web forms where users enter their phone number and actively select an unchecked checkbox agreeing to receive SMS communications.

Message frequency varies. Message and data rates may apply.

Users may opt out at any time by replying STOP and may request assistance by replying HELP.

We do not share or sell phone numbers to third parties.

• account verification codes
• gallery availability notifications
• booking confirmations
• order updates

6. How We Share Information

We may disclose personal information to service providers and subprocessors that help us operate the platform, including cloud hosting, storage, authentication, payments, analytics, email delivery, messaging delivery, customer support, fraud prevention, and security vendors.

We may also disclose information to comply with law, respond to valid legal process, enforce our agreements, protect rights and safety, investigate misuse, or in connection with a merger, acquisition, financing, or asset transfer.

We do not sell personal information in exchange for monetary consideration. We do not share SMS opt-in data or consent with third parties for their independent marketing use.

7. Data Retention

We retain personal information for as long as reasonably necessary to provide the services, comply with legal, accounting, tax, fraud-prevention, and recordkeeping obligations, resolve disputes, and enforce our agreements.

Retention periods may vary depending on the type of information, the customer relationship, legal requirements, and operational needs.

8. Security

We use administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, and disclosure. However, no system can be guaranteed to be completely secure, and you use the service with that understanding.

9. International Transfers

NextPhoto and its service providers may process information in multiple jurisdictions. Where required, we take steps designed to protect personal information transferred across borders in accordance with applicable law.

10. Your Choices and Rights

• You may update account profile data through your account or by contacting support where applicable.
• You may opt out of non-essential marketing emails using the unsubscribe mechanism included in those messages.
• You may opt out of SMS messages by replying STOP. You may obtain help by replying HELP where supported.
• Depending on your jurisdiction, you may have rights to request access, correction, deletion, portability, or restriction of certain personal information, subject to exceptions and verification requirements.

11. California Privacy Notice

For California residents, this section supplements the rest of this Privacy Policy under the California Consumer Privacy Act, as amended by the California Privacy Rights Act.

• We collect identifiers, customer records information, commercial information, internet or network activity, geolocation signals derived from IP or device telemetry, and other information described in this policy.
• We use and disclose those categories for business and commercial purposes such as service delivery, security, support, analytics, compliance, and communications.
• California residents may have rights to know, access, correct, delete, and limit certain uses of personal information, subject to legal exceptions.
• We will not discriminate against you for exercising applicable privacy rights.

12. Children’s Privacy

Our services are intended for business, event, school, and family photography workflows and are not directed to children as a primary audience. Where customer galleries involve minors, the business customer controlling the gallery is responsible for obtaining any necessary permissions and providing appropriate notices.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will post the updated version here and revise the effective date. Material changes may also be communicated through the platform or other reasonable means where appropriate.

14. Contact

Questions about this Privacy Policy or privacy requests can be directed through our support and account channels. If you use NextPhoto through a photographer, school, or other business customer, some requests may need to be directed to that customer as the controller of its own gallery or account data.

Email: services@nextphoto.app