This policy describes how Studiofront (https://studiofront.ca) collects, uses, and shares information when you use our software for real estate photographers. It is written for Canadian operations under the federal Personal Information Protection and Electronic Documents Act (PIPEDA) and Québec’s Act respecting the protection of personal information in the private sector (CQLR c. P-39.1, “Law 25”).
Person in charge of the protection of personal information
The person in charge of the protection of personal information for Studiofront is the Privacy Officer. Title: Privacy Officer. Contact: privacy@studiofront.ca (or hello@studiofront.ca if that mailbox is unavailable). You may contact this person to exercise access, correction, or other privacy rights.
Who this applies to
Photographers and studio team members who create a Studiofront account; agents and sellers who book shoots or open gallery and listing links you send them.
Information we collect
- Account data: name, email, password hash, studio name, and settings you enter.
- Booking and delivery data: property details, agent contact information, access notes, shoot times, gallery views and downloads (first-party product events).
- Media: photos and files you upload, stored to deliver galleries and listing pages.
- Billing data: Stripe customer, subscription, and Connect identifiers. We do not store full card numbers.
- Google Calendar (optional): if you connect Google, we receive an OAuth token, your Google account email, calendar list, and calendar event data needed to create or update Studiofront shoot events and, if you enable it, treat other events as busy for booking.
- Marketing analytics (cookieless): on the Studiofront marketing site only, we use Cloudflare Web Analytics to count page views. It does not use cookies and does not run on photographer studio sites or agent gallery links. We do not use third-party advertising pixels or session-replay tools.
- Session cookies: necessary cookies for photographer and agent sign-in. These are required to operate the service and are not used for profiling.
How we use information
We use this information only to operate Studiofront:
- create and sign in to studios;
- take bookings, send reminders, and deliver galleries;
- process subscriptions and payouts through Stripe;
- sync confirmed or requested shoots to a connected Google Calendar and read busy times when you turn that setting on.
We do not sell personal information. We do not use Google user data for advertising, credit decisions, or unrelated AI/training products. Google Calendar data is used only to provide the calendar features you enable in the studio admin.
Technology that identifies, locates, or profiles
Under Law 25, functions that identify, locate, or profile a person must be disabled by default, with clear information on how to activate them. Studiofront does not currently offer such profiling or advertising trackers. If we introduce them later, they will remain off by default until you opt in.
Communication outside Québec
Personal information may be processed by providers outside Québec (and outside Canada) as listed below. Before those transfers we assess privacy impacts for the project (privacy impact assessment under s. 3.3) covering purpose, sensitivity, and contractual safeguards with Stripe, Resend, Cloudflare, Neon, and Google.
Google API Limited Use
Studiofront’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We request calendar event and calendar-list access so a photographer can keep Studiofront bookings on their Google Calendar. You can disconnect Google at any time in studio settings; we then delete stored OAuth tokens for that studio.
Processors
- Payments and Connect: Stripe
- Transactional email: Resend
- Hosting and media storage: Cloudflare Workers and R2
- Marketing analytics: Cloudflare Web Analytics (apex only)
- Database: Neon Postgres
- Optional calendar sync: Google
Retention
Account and studio data stay until you delete the studio or ask us to remove it. You can revoke a gallery at any time. Full-resolution files should be archived after about 90 days as a studio policy; the platform does not auto-delete media yet. Calendar tokens are kept only while Google remains connected.
Your choices
Email the Privacy Officer at privacy@studiofront.ca to access, correct, or delete personal data we hold. Agents who received a gallery link should contact the photographer who sent it. Complaints about Québec privacy compliance may also be directed to the Commission d’accès à l’information du Québec.