Privacy Policy

PIJ Holdings LLC runs ShotLocker. This explains what we collect, why, and who else handles it.

What we collect

• Account: name, email, password (stored hashed by our authentication provider), and your account settings.
• Your content: photos you upload and the metadata inside them, which can include captions, keywords, bylines, dates, camera details and GPS location. We also store edits you make and gallery, client and site settings.
• Your clients and visitors: if you invite clients to galleries, the email addresses you enter, sign-in codes, and a log of downloads (what was downloaded, when, and by whom). Visitors to a published site or gallery get a sign-in cookie only when a gallery is protected.
• Billing: your plan and subscription status. Card details go directly to Stripe; we never see or store full card numbers.
• Usage and logs: storage and delivery volume (to apply plan limits and overage) and technical logs such as IP address and request details for security and rate limiting. On our marketing site, sign-in and sign-up pages and inside the signed-in app we also use PostHog analytics to count page views and feature use. This is not used on photographer sites or gallery pages, so your clients and site visitors are not analysed.

Why we use it

To provide the service, search and deliver your photos, bill you, keep the service secure and prevent abuse, send transactional email (sign-in codes, receipts, gallery invitations), and meet legal obligations. We do not sell your personal data and we do not use your photos to train AI models.

Who handles it

We use service providers to run ShotLocker: Amazon Web Services (file storage and processing), Supabase (database and authentication), Stripe (payments), Resend (email), PostHog (product analytics) and our hosting provider. They process data only on our instructions. We may also disclose data when required by law or to protect rights and safety.

Cookies

We use only strictly necessary cookies: to keep you signed in and to remember a gallery sign-in. Our analytics does not set cookies or store identifiers in your browser, and we do not use advertising or cross-site tracking cookies or session recording.

Photographs of other people

If your photos show identifiable people, you are responsible for the lawful basis and permissions to store and share them, and for responding to those people’s requests. We act as your processor for that content.

Retention

We keep account data while your account is open. Deleted photos go to trash and are purged after the retention window. After you close your account we delete content within a reasonable period, except records we must keep (such as invoices) for legal and tax reasons.

Your rights

Depending on where you live (including the EEA, UK and California) you can ask to access, correct, export or delete your data, object to some uses, or complain to your regulator. Email support@shotlocker.com. Data may be processed in the United States and other countries; where required we rely on appropriate transfer safeguards.

Children

ShotLocker is not for people under 18, and we do not knowingly collect their data.

Changes and contact

We will announce material changes in the app or by email. Questions: PIJ Holdings LLC, support@shotlocker.com.