ShutterReach
Start free

Privacy policy

Last updated October 16, 2026

ShutterReach helps wedding photographers (“studios”) run geofenced ad campaigns and the landing pages those ads link to. This policy explains what we collect, why, who we share it with and the choices you have. It covers studios using the app and couples who visit or submit inquiries on a studio's landing page.

What we collect

  • Account data: name, email, password hash or Google sign-in identifier, and team roles.
  • Studio data: business details, brand assets, photos you upload or import, landing page content, campaign settings and billing records.
  • Inquiries: what couples type into a studio's inquiry form (for example names, contact details, wedding date and venue), plus attribution data such as the ad click identifier, campaign and landing page.
  • Landing page analytics: page views with a random visitor identifier, referrer, device type and a one-way hash of the IP address used for spam prevention. Third-party analytics (Google Analytics, Meta Pixel) load only when the studio enables them and, where required, after the visitor consents.
  • Connected accounts: when a studio connects Instagram, Pinterest, TikTok or Google Photos, we receive the profile details and media the studio authorizes. Access tokens are encrypted at rest.
  • Payment data: handled by Stripe. We store transaction references, never full card numbers.
  • Early-access and contact forms: the email, name, studio, city and message you send us, the page you sent it from, and a one-way hash of your IP address used for spam prevention.
  • Site analytics: on ShutterReach's own pages (not studio landing pages) we count page views with Vercel Web Analytics, which doesn't use cookies or identify individual visitors.

The free ad preview runs entirely in your browser. Photos you try it with are never uploaded to us.

How we use it

  • To provide the service: hosting landing pages, launching and reporting on campaigns, delivering inquiries and notifications.
  • To measure advertising: we send conversion events (inquiries and bookings) to Google Ads for the studio's own campaigns, using click identifiers and, where permitted, SHA-256 hashed email or phone.
  • To curate photos and write ad copy with AI. Photos and studio text are processed by our AI provider under terms that prohibit training on customer data.
  • To keep the service secure, prevent spam and abuse, and comply with law.

Who we share it with

We use service providers who process data on our behalf: Supabase (database and storage), Vercel (hosting), Google (Google Ads, Maps and Places), Stripe (payments), Resend and Twilio (email and SMS), Anthropic (AI processing), and the social platforms a studio chooses to connect. We do not sell personal information or share it for cross-context behavioral advertising beyond the studio's own campaign measurement.

Google user data

ShutterReach's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Photos you pick through Google Photos are imported only into your own library, and we never access the rest of your Google Photos library.

Retention and deletion

Studio data is kept while the account is active and deleted within 30 days of account closure, except records we must keep for tax or legal reasons. Disconnecting a social account deletes its tokens and synced posts. Instagram users can also request deletion through Meta; see data deletion.

Your rights

Depending on where you live, you may have rights to access, correct, delete or export your data, and to object to or restrict processing. Couples who inquired with a studio can contact that studio directly or contact us and we will route the request. We respond within 30 days.

Security

Data is encrypted in transit and at rest. Third-party tokens and webhook secrets are additionally encrypted with application-level keys. Access is restricted by role, and every tenant's data is isolated with row-level security.

Children

The service is not directed to children under 16, and we do not knowingly collect their data.

Contact

Questions or requests: Langtonac300@gmail.com.