Privacy policy

Data we collect

We collect and process the following data: Upon registration, your email address and password (stored encrypted). In your profile: display name, role (client or photographer), city, canton, language, biography and an optional avatar. Photographers additionally provide their specialties, coverage cantons, an optional hourly rate, website and Instagram links, and portfolio images. Clients post shoots with a title, brief, location, date and budget. Photographers submit bids with an amount and a message.

Purpose of processing

The data collected is used exclusively to operate the marketplace: providing and managing user accounts, connecting clients and photographers, displaying profiles and portfolios, and processing shoots and bids. Data is not shared with third parties for advertising purposes.

Processor & hosting

We use Supabase as our technical service provider (Supabase, Inc., USA, available at supabase.com). Supabase handles database services, authentication and file storage. Data is stored and processed in the Zürich region, Switzerland. Processing is carried out under a data processing agreement in compliance with the revFADP.

Sub-processors in detail

We share data with carefully selected service providers that support our operations: Supabase (database, authentication, file storage), Vercel (hosting), Resend (delivery of notification emails), Stripe (subscription payment processing; card data is handled exclusively by Stripe and never reaches our systems), and Plausible Analytics (anonymous, cookieless usage statistics), where enabled. These providers process data solely on our behalf.

Retention & deletion

We keep personal data only as long as needed to operate the marketplace. You can delete your account at any time; your profile data, shoots, bids, messages and files are removed. Reviews may remain in anonymised form.

Cookies

We use only technically necessary cookies for sign-in (session). No tracking or advertising cookies are set; the optional usage analytics (Plausible) works without cookies.

Your rights

You have the right at any time to request access to your stored data, to correct inaccurate information, and to request deletion of your account and associated data. You may exercise these rights via the contact address below. We will respond to your request within 30 days.

Data protection contact