Privacy Policy

This Privacy Policy explains how Sepia (“Sepia,” “we,” “us”) collects, uses, and shares information when you use our portfolio platform at sepia.photo and the sites we host for photographers (the “Service”). By using the Service, you agree to this policy.

Information we collect

• Account information. When you sign in with Google, we receive your name, email address, and profile image to create and identify your account.
• Content you upload. Photographs, captions, page text, site settings, and any images you import from a URL you provide.
• Order information. If you or a visitor buys a print, we process the buyer’s name, email, shipping address, and order details. Card payments are handled by Stripe; we never receive full card numbers.
• Usage data. Basic logs (IP address, browser, pages requested) needed to operate and secure the Service.
• Analytics you enable. If a photographer adds their own Google Analytics or Plausible identifier, that provider collects visitor data on their site under the photographer’s control.

How we use information

• To provide, maintain, and improve the Service and host your published site.
• To process print orders, route payouts to photographers, and arrange printing and shipping.
• To send transactional email (order confirmations, shipping updates, and account or security notices).
• To detect, prevent, and respond to fraud, abuse, and security issues.

How we share information

We do not sell your personal information. We share it only with service providers that help us run the Service:

• Stripe: payment processing and photographer payouts (Stripe Connect).
• Prodigi: print production and fulfillment (receives the buyer’s shipping details for the order).
• Google: authentication (sign-in).
• Cloudflare: image storage and delivery.
• Vercel: application hosting.
• Our email provider: delivery of transactional email.

We may also disclose information if required by law or to protect the rights, property, or safety of Sepia, our users, or the public.

Cookies

We use cookies that are necessary to keep you signed in and to operate the Service. Individual photographer sites may load analytics the photographer has configured; those are governed by the respective analytics provider’s policy.

Data retention

We keep your account and content for as long as your account is active. Order records are retained as needed to fulfill the order and to meet legal, tax, and accounting obligations. You may request deletion of your account and content as described below.

Security

We use industry-standard measures to protect your information, including encrypted connections and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Your rights

You may access, correct, export, or delete your personal information by contacting us. Depending on where you live, you may have additional rights under applicable privacy laws (such as GDPR or CCPA). We will honor these requests as required by law.

Children

The Service is not directed to children under 13, and we do not knowingly collect their personal information.

International users

We operate from the United States. If you use the Service from elsewhere, you consent to processing your information in the United States.

Changes to this policy

We may update this policy from time to time. We will post the new version here and update the “Last updated” date above.

Contact

Questions about privacy? Email swami@swamiphoto.com.