Privacy Policy

Provgarde is a secure photo delivery service for professional photographers. Photographers use our web application at provgarde.com to upload and manage client galleries. Their clients view those galleries exclusively through the Provgarde mobile app.

This policy covers both: photographers who hold Provgarde accounts, and gallery viewers who use the mobile app. Questions or requests about your data can be sent to privacy@provgarde.com.

When you create and use a photographer account, we collect your email address and name, your two-factor authentication enrollment (we store only the data needed to verify codes — never anything that could reveal them), your billing details (handled by Stripe; we never see or store full card numbers), and the photographs you upload for delivery to your clients.

When you view a gallery through the Provgarde mobile app, we collect:

• Your email address — used to send your secure access link and to confirm you are the person the photographer intended to share the gallery with.
• A device identifier — a random ID created when you install the app. It ties your gallery access to your device so a forwarded or stolen link cannot be used by someone else. We store it only in a cryptographically protected (hashed) form. It is not an advertising identifier and is not used to track you across other apps or websites.
• Viewing activity — a record of gallery and photo views, including your IP address, device user agent, timestamps, and events such as screenshot attempts. Photographs are these photographers' livelihood; this log exists to protect their work and serves as evidence if images are stolen.
• Crash and error diagnostics — technical reports (via Sentry) when the app malfunctions, used solely to fix problems.

• We do not store photographs on your device. Images are streamed securely and are never saved locally, cached, or added to your camera roll.
• We do not sell personal data. Ever.
• We do not share personal data with third parties for their own purposes, and we show no advertising.
• We do not track you across other apps or websites, and we use no advertising identifiers.

We use the data above for three purposes only: operating the service (delivering galleries, sending access links, processing subscriptions), security and theft prevention (device binding, audit logging, watermarking, and investigating suspected image theft), and diagnostics (fixing crashes and errors).

We rely on a small set of infrastructure providers who process data on our behalf and under our instructions: Supabase (database and authentication), Cloudflare (content delivery, security filtering, and image storage), Vercel (application hosting), Resend (transactional email), Stripe (payment processing), and Sentry (error monitoring). None of them are permitted to use your data for their own purposes.

Photographer account data is kept for as long as the account is active. Gallery access sessions expire automatically within 24 hours. Viewing-activity records are retained while the associated gallery and photographer account exist, because they serve as evidence in the event of image theft. Crash diagnostics are retained on Sentry's standard rolling window (90 days).

You may request access to, correction of, or deletion of your personal data at any time by emailing privacy@provgarde.com. We will respond within 30 days. Where records are retained as evidence of suspected image theft, we may preserve the minimum necessary records where the law allows; we will tell you if that applies to your request.

All data is encrypted in transit (TLS 1.2 or higher). Photographs are never publicly accessible: they are stored in private storage, served only through short-lived signed requests, and delivered to viewers with identity watermarks. Photographer accounts require two-factor authentication with no opt-out. Access to production systems is restricted and audited.

Provgarde is not directed at children, and we do not knowingly collect personal data from anyone under 18. Galleries often contain photographs of children — newborns and families are our photographers' specialty — but the people who hold accounts and view galleries are adults. Photographs are collected and controlled by the photographer, who is responsible for having the family's consent to share them.

If we make material changes to this policy, we will update the effective date above and, for significant changes affecting photographers, notify account holders by email.