Privacy policy

Nayra is the controller for the data of photographers' accounts: name, email, studio details and billing details.

For end clients' data (the name, email and phone number the photographer enters into a gallery or an appointment), the photographer is the controller and Nayra acts as processor: we only use it to provide them with the service, and following their instructions.

From your account: name, email address, encrypted password, and the studio details you choose to add (name, phone, address, logo).

From your billing: the customer identifier and the status of your subscription. Card details are handled by Stripe directly; we neither see them nor store them.

From your end clients: the name, email and phone number you enter, plus their photo selection and the downloads they make.

From the client app: the first time it opens it generates a random device identifier. It doesn't carry your name, your email or your phone number, and we don't cross-reference it with any other information. It serves two purposes: keeping your gallery open on that device without asking you for the code each time, and stopping bulk attempts to guess codes. We don't use it for advertising or to track you across other apps or sites.

From usage: technical logs needed to run and debug the service, and your studio's storage consumption.

To provide you with the service: creating and delivering galleries, managing your calendar, sending the notifications you trigger and enforcing your plan's limits.

To charge you, if you're on a paid plan.

To keep the platform secure: detecting abuse, rate-limiting access attempts and diagnosing errors.

We don't sell your data or your clients', and we don't use it for third-party advertising.

Only with the providers that make the service work, and only as far as necessary: Supabase (database and authentication), Cloudflare R2 (file storage), Vercel (hosting), Stripe (payments), Resend (transactional email), Twilio (WhatsApp messages, when available) and Sentry (error diagnostics).

Some of these providers are outside your country. Where that means an international transfer, it relies on the contractual clauses and safeguards each provider offers.

We may also hand over data if a competent authority legally requires it of us.

Your account data, for as long as the account exists. When you close it we delete your studio, your galleries and your files.

On the free plan, galleries are archived when their expiry date passes and their files are deleted.

We keep billing records for as long as tax regulations require, even if you close the account.

The device identifier and the IP address are kept for a maximum of 24 hours, and only for attempt control. After that they delete themselves.

You can access your data, correct it, delete it, object to certain processing, and request a copy in a readable format.

You can do much of it yourself directly: edit your studio's details in Settings, and delete your account and all its content from that same screen.

For anything else, write to us at soporte@nayraphoto.com and we'll reply within the legal deadlines.

If you're in Brazil, the LGPD grants you these rights against the controller. If you're a photographer's end client, go to them first: they're the one who decides about that data. If you'd rather write to us, we'll pass your request on.

We encrypt traffic in transit, isolate each studio's data at database level, and serve photographs through signed links of limited duration.

Shared galleries are accessible to whoever has the link: treat it as a credential and share it only with whoever should see it.

No system is infallible. If a breach affecting your data were to happen, we would notify you and report it to the relevant authority where appropriate.

We only use cookies that are necessary for the application to work: the sign-in session, the chosen language and the state of the interface.

We don't use advertising or third-party tracking cookies. If that were to change, we would ask for your consent first.

If we update this policy we will publish the new version here with its date, and we'll tell you by email if the change is substantial.

For any privacy matter, write to us at soporte@nayraphoto.com.