Privacy Policy

1. Introduction

JOSSTE ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, located at josste.com and its subdomains (the "Service").

As a multi-tenant platform for photographers, we act as a Data Processor for the content (photos, videos) uploaded by our Users (Photographers/Studios) and a Data Controller for the account information of our direct customers.

2. Information We Collect

A. Information Provided by You

• Account Information: Name, email address, and profile details provided via Google OAuth or direct registration.
• Billing Information: Payment details processed securely via our third-party payment processors.
• Media Assets: Photos and videos uploaded by Photographers to be shared with Clients.

B. Information Collected Automatically

When you visit our Service, we may automatically collect information such as your IP address, browser type, operating system, and usage patterns (e.g., assets viewed, comments left, or favorites selected).

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service.
• Facilitate collaboration between photographers and their clients.
• Process transactions and manage subscriptions.
• Improve our Service and develop new features.
• Monitor for security threats and prevent fraud.
• Comply with legal obligations.

4. Data Storage and Security

We use industry-standard security measures to protect your data. Our infrastructure is powered by:

• Supabase: For database and authentication security (stored on AWS).
• Cloudflare: For edge computing and secure object storage (R2).

All media assets are stored in private buckets, and access is granted only via time-limited, signed URLs validated against our authentication layer.

5. Sharing of Data

We do not sell your personal data. We only share information with third-party service providers (sub-processors) necessary to provide the Service, including:

• Authentication & Database providers (Supabase)
• Cloud Infrastructure (Cloudflare)
• Email Service Providers (Resend)
• Payment Processors (Stripe)

6. Your Data Rights (GDPR/CCPA)

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data.
• Correction: Request that we correct inaccurate info.
• Deletion: Request that we erase your personal data.
• Portability: Request a transfer of your data to another service.

To exercise these rights, please contact us at contact@josste.com.

7. Retention

We retain your account information as long as your account is active. Media assets are retained until deleted by the Photographer or until the subscription tier limits are exceeded/account is closed.