Privacy Policy

At Maseiro, we take your privacy seriously. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our platform.

1. Information We Collect

Information You Provide

• Account Information: Name, email address, and profile photo when you register
• Photographer Profile: Company name, logo, favicon, social media links (Instagram, Facebook, TikTok), and custom branding details
• Billing Information: Billing and shipping addresses for purchases and subscriptions
• Payment Information: Payment details are processed securely by Stripe — we do not store your card numbers
• Gallery Content: Photos, collections, and media you upload to the platform
• Communications: Messages sent through our contact form or support channels

Information Collected Automatically

• Usage Data: Pages visited, galleries viewed, and interaction patterns
• Device Information: Browser type, operating system, screen resolution, and device identifiers
• Log Data: IP address, access times, and referring URLs
• Cookies: Session cookies for authentication and preference cookies for user settings

2. How We Use Your Information

We use your personal information to:

• Provide, maintain, and improve our platform
• Host and display your photo galleries and collections
• Process subscription payments and product purchases
• Manage your account and provide customer support
• Generate product mockups using your uploaded media
• Send transactional emails (order confirmations, subscription updates)
• Provide AI-powered customer support through our knowledge base
• Prevent fraud and ensure platform security
• Comply with legal obligations

We do not sell your personal information to third parties.

3. Information Sharing

We may share your information with:

• Stripe: For payment processing, subscriptions, and billing management. Stripe's privacy policy applies to payment data
• Amazon Web Services (AWS): For secure cloud storage of your photos and media files
• Service Providers: Hosting, email, and analytics services that help us operate the platform
• Legal Requirements: When required by law, court order, or to protect our legal rights
• Public Galleries: Your photographer profile and published galleries are visible to the public when you have an active subscription

4. Data Security

We implement industry-standard security measures to protect your data:

• All data is transmitted over HTTPS with TLS encryption
• Passwords are hashed using bcrypt
• Payment processing is handled by Stripe (PCI DSS compliant)
• Media files are stored securely on Amazon S3
• Regular security audits and updates
• Access controls and authentication for administrative functions

5. Cookies

We use cookies for:

• Essential Cookies: Session management, authentication, and CSRF protection
• Preference Cookies: Language settings and user preferences
• Cart Cookies: Maintaining your shopping cart across sessions

You can manage cookie preferences through your browser settings. Disabling essential cookies may affect platform functionality.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate personal data
• Deletion: Request deletion of your personal data, including uploaded photos and galleries (subject to legal retention requirements)
• Portability: Request your data in a portable format
• Objection: Object to certain processing of your personal data
• Withdrawal: Withdraw consent for data processing at any time

To exercise these rights, contact us through our Contact page.

7. Data Retention

We retain your personal data for as long as:

• Your account is active
• Necessary to provide our services
• Required by applicable laws (e.g., tax and accounting records)
• Needed to resolve disputes or enforce agreements

When you delete your account, we will remove your personal data and uploaded media within 30 days, except where retention is required by law.

8. Children's Privacy

Maseiro is not intended for users under the age of 16. We do not knowingly collect personal information from children. If we discover that we have collected data from a child under 16, we will delete it promptly.

9. International Data Transfers

Your data may be processed in countries where our service providers operate (including AWS regions and Stripe). We ensure appropriate safeguards are in place for international data transfers in compliance with applicable data protection laws.

10. Third-Party Links

Our platform may contain links to third-party websites or services, including photographers' social media profiles. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a prominent notice on our platform. Your continued use of the platform after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us through our Contact page.