Effective date: June 8, 2026.
Crystal Shot Studio (“the studio,” “we,” “us”) is a photography service operated by Spadea Technologies, LLC. This policy explains what personal information we collect, why we collect it, and how we handle it — across our website (crystalshotstudio.com) and our client portal (portal.crystalshotstudio.com).
We keep this simple on purpose. We collect only what we need to run a small photography business, and we do not sell your personal information to anyone.
Information we collect
When you contact us. Our inquiry form asks for your name, email address, and (optionally) your phone number, along with details about the event you’re planning — event type, date, location, and your message. We use this to reply to you and to plan the work.
When you have a portal account. Clients view and download their galleries through the portal. To give you an account we store your email address and name. Accounts are created by invitation from the studio — there is no public sign-up.
When you sign in with Google. If you choose “Sign in with Google,” Google shares your name, email address, and Google account identifier with us. We use this only to sign you in and to identify your account. We do not receive your Google password, and we do not access your Gmail, contacts, calendar, files, or any other Google data. See the Google sign-in section below for more.
Your photos and galleries. We store the photographs from your shoot so we can deliver them to you. Before a gallery is released, previews are watermarked. After release (and payment, where applicable), you can download the full-resolution images.
Payments. Payments are processed by Stripe. Your full card number is entered with Stripe and is never seen or stored by us. We keep a record of the transaction — amount, date, and status — so we can manage billing, receipts, and refunds.
Email preferences. If you have a portal account, we store your notification preferences, including any categories of email you’ve opted out of.
Technical information. Like any website, our servers keep standard logs (such as IP address and request times) for security and reliability. The portal uses cookies and similar tokens that are necessary to keep you signed in. We do not use advertising trackers, and we do not run third-party analytics on the site.
Google sign-in
When you authenticate with Google, the only Google user data we access is your basic profile: your name, email address, and the unique identifier of your Google account. We use this solely to create and secure your portal account and to sign you in. We do not use it for advertising, we do not sell or transfer it, and we do not use it for any purpose unrelated to signing you in.
Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
How we use your information
We use the information above to:
- respond to inquiries and plan and deliver photography work;
- create and secure your account, and sign you in;
- store and deliver your galleries;
- process payments and provide receipts and refunds;
- send you transactional emails about your gallery (for example, that it is ready to download or about to expire) — you can opt out of these categories;
- protect the security and integrity of our services; and
- meet our legal and accounting obligations.
How we share information
We do not sell your personal information. We share information only in these limited cases:
- Service providers who help us operate. We use Amazon Web Services for hosting, storage, and email delivery; Stripe for payments; and Google for the optional sign-in described above. These providers process information on our behalf under their own security and privacy commitments.
- Legal requirements. We may disclose information if required by law, or to protect our rights, safety, or property.
If the business is ever transferred, your information may transfer as part of that transaction, subject to this policy.
How long we keep information
- Inquiries are kept for as long as needed to respond and for our ordinary business records.
- Galleries are kept for the period agreed for your project. They expire and are automatically deleted after that window; we keep a minimal record (a “tombstone”) of the gallery for our accounting and history, but the photos themselves are removed.
- Account and payment records are kept while your account is active and for as long as we are required to retain financial records.
Security
We protect your information with encryption in transit and at rest, access controls, and least-privilege practices across our systems. Portal accounts support optional multi-factor authentication and passkeys. No system is perfectly secure, but we take reasonable, current measures to safeguard your data.
Your choices and rights
You can:
- ask us what personal information we hold about you, and request a copy;
- ask us to correct or delete it;
- opt out of gallery notification emails from your portal account settings; and
- ask questions about this policy.
To make any of these requests, reach us through our contact page. We’ll respond within a reasonable time. Depending on where you live, you may have additional rights under local law; we honor those rights where they apply.
Children
Our services are intended for adults and are not directed to children under 13. We do not knowingly collect personal information from children. If a minor appears in photographs, that work is arranged with and for the adult who booked it.
Where your data is processed
Our services are hosted in the United States. If you contact us from outside the United States, you understand that your information will be processed there.
Changes to this policy
We may update this policy from time to time. When we do, we’ll revise the effective date above and post the new version on this page.
Contact us
Questions about this policy or your information? Reach us through our contact page. Crystal Shot Studio is a service of Spadea Technologies, LLC.