Privacy Policy
Last updated: September 2026
What we store
- Your email address — used only to sign you in with a magic link. No password is ever set or stored.
- The business description, shoot brief and shot list you generate.
- Photos you upload for critique. These are stored privately in object storage — never public, never served to anyone but you — and read back only after we've checked you own the shoot they belong to.
- Critique results (scores, notes) tied to each upload.
- If you buy an unlock: that a purchase happened and how many unlocks it added. We never see or store your card details — Stripe handles the card itself.
What generates your plan and critique
Your business description and, when you upload one, your photo are sent to a model (Claude, via OpenRouter) to write the plan or the critique. We do not control how long OpenRouter or the model provider retain that request on their side — see their own policies if that matters to you. Nothing you send them is used by us for anything beyond generating your result.
Analytics — and session recording
We use Umami, a privacy-friendly analytics tool we host ourselves at
analytics.shovelware.ai. It records page views, the page you arrived from, your country,
and your browser and device type. It does not set advertising cookies, does not fingerprint you,
and does not share anything with a third-party ad network. We also count a handful of anonymous product
events (a plan was started, a shoot was unlocked, a critique was run) so we can tell which steps people
get stuck on. None of these events carry your email, your brief, or your photos.
We record sessions. Umami's session-replay feature plays back what a visitor clicked, scrolled and typed, so we can see where the product is confusing rather than guess. Form fields (like your email) are masked automatically. The photos you upload and their critiques are excluded from recording entirely — those parts of the screen never appear in a replay, because they're your own unreleased business photos, not ours to keep a video of. Recordings are kept 30 days, then deleted automatically.
If your browser sends a Do Not Track signal, our analytics honours it and records nothing at all — no pageview, no event, no replay.
Error reporting
We use Sentry to catch crashes and errors so we notice when something breaks. It receives the error message and a stack trace, never your IP address, request headers, cookies, or the contents of what you typed.
Payments
Payments are processed by Stripe on the house Shovelware account. We never see or store your card details; Stripe handles the transaction and tells us only that it succeeded.
Sharing
We don't sell or share your data with anyone. There is currently no way to share a plan or critique outside your own account — everything lives behind your sign-in.
Your choices
You can request deletion of your account, your shoots, and your uploaded photos at any time by emailing hello@photo-shoot-director.shovelware.ai.