Privacy Policy
Last updated: September 23, 2026
1. Information We Collect
We collect the following types of information when you use our website:
- Personal Information: Name, email address, and/or other contact details that you voluntarily provide to us (e.g., through contact forms or account creation).
- Usage Data: Information collected automatically such as your IP address, browser type, device information, and pages you visit on our site.
- Cookies and Tracking Data: We use cookies and similar tracking technologies to track activity on our service and hold certain information.
2. How We Collect Information
We collect information in the following ways:
- Directly from you: When you fill out forms, create an account, or communicate with us directly.
- Automatically: Through analytics tools, server logs, and cookies as you navigate through the site.
3. Why We Collect Information
The information we collect is used for the following purposes:
- To provide and maintain our services.
- To respond to your inquiries and provide customer support.
- To analyze site usage and improve the user experience of our website.
4. Google API Services and User Data
Our application uses Google OAuth 2.0 to authenticate users and, for authorized administrators, to access Google Contacts. We adhere strictly to the Google API Services User Data Policy, including the Limited Use requirements.
- Authentication: We request basic profile and email scopes for all users to facilitate secure login without requiring a password.
- Contacts Access (Admins Only): For users with administrative privileges, we may explicitly request access to Google Contacts (`contacts.readonly`, `contacts.other.readonly`) to streamline the process of sharing photo albums. We only read contact data on demand to populate a sharing interface and do not permanently store or cache your contacts on our servers.
- Limited Use: Our use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.
5. Sharing Your Information
We respect your privacy and do not share your personal data or Google user data with third parties, except when explicitly required by law.
6. Data Protection
We take the security of your data seriously. We implement robust, industry-standard data protection mechanisms to secure your personal and Google user data, including:
- Encryption in Transit: All data transmitted between your browser, our servers, and Google APIs is encrypted using secure HTTPS/TLS protocols.
- Secure Storage: Sensitive data, such as OAuth tokens, are stored securely using strong encryption mechanisms.
- Access Controls: Access to sensitive user data is strictly limited to authorized personnel and is protected by strong authentication requirements.
7. Data Retention and Deletion
We only retain your personal and Google user data for as long as necessary to fulfill the purposes outlined in this policy.
- Google Data Retention: Google OAuth tokens are retained only for the duration of your active session or as necessary to maintain your account access. We do not permanently store Google Contacts data; it is only retrieved on-demand when actively using the album sharing feature.
- Data Deletion Requests: You may revoke our application's access to your Google account at any time via your Google Account Security settings. Furthermore, you may request the complete deletion of your account and all associated data from our systems by contacting us at the email address below. Upon receiving a verifiable request, we will securely delete your data within 30 days.
8. Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:
- By email: steveseremethphotography@gmail.com