Privacy Policy

1. Data Controller

Amaterasu Hub is operated as a SaaS platform for professional photographers. For any questions regarding this policy, contact us at contact@amaterasuhub.com.

2. Data We Collect

We collect the following data:

• Account data: email address, studio name, studio URL slug, password (hashed by Supabase).
• Photos and galleries: photos you upload, gallery names, client names you associate with galleries.
• Client activity: photo selections and notes made by your clients through magic links.
• Usage data: number of galleries, photos, and active links generated.
• Payment records: subscription plan, payment dates and amounts (no card data — payments are via bank transfer).

3. How We Use Your Data

Your data is used exclusively to:

• Operate and deliver the Amaterasu Hub service.
• Store and serve your photos to authorised clients via magic links.
• Manage your subscription and billing history.
• Send transactional emails (account confirmation, trial expiry notices).
• Improve and maintain platform reliability and security.

We do not sell your data to third parties. We do not use your photos for marketing or training AI models.

4. Data Storage and Security

Your data is stored on Supabase (PostgreSQL database hosted on AWS) and Cloudflare R2 (photo storage). Both providers maintain high security standards. Photos are accessible only via time-limited signed URLs. All data is transmitted over HTTPS. Access to your data within the platform is restricted by Row-Level Security policies.

5. Client Data (Your Clients)

As a photographer using Amaterasu Hub, you act as the data controller for any personal data relating to your clients (e.g., client names, notes, photo selections). You are responsible for ensuring you have the right to share this data with us and for informing your clients appropriately. Client access is via anonymous magic links — no client account or personal data is required.

6. Cookies and Tracking

Amaterasu Hub uses only functional cookies necessary for authentication (session tokens managed by Supabase). We do not use advertising cookies or third-party tracking scripts. No analytics tools are currently deployed on the platform.

7. Data Retention

Your data is retained for as long as your account is active. Upon account termination, all your data (studio, galleries, photos, magic links, selections) is deleted within 30 days. Billing records may be retained for up to 5 years for accounting purposes.

8. Your Rights

You have the right to:

• Access all personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and all associated data.
• Export your data (galleries, photo metadata) upon request.

To exercise these rights, contact us at contact@amaterasuhub.com.

9. Third-Party Services

We use the following third-party infrastructure providers: Supabase (database and authentication), Cloudflare R2 (photo storage), Vercel (hosting). These providers process data on our behalf under their own privacy policies and security standards.

10. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated by email or via a notice on the platform. Continued use of the service after changes constitutes acceptance of the updated policy.