Last updated: September 20, 2026
clientgallery.io is operated from Québec, Canada. This policy explains what we collect and what we will never do with it. Privacy requests: hello@clientgallery.io. The person responsible for the protection of personal information (Québec Law 25) is Christian Gomez, at the same address.
Photographers: your name, email and password (hashed), studio branding, and the photos you upload. Clients (your customers): the picks they make, and the name and email they enter when they send their selection back to you. We never email your clients: any message they receive comes from you.
When you enable Face Search, a guest's selfie is processed in their own browser to filter the gallery to their photos. The selfie is never uploaded to or stored on our servers. Face descriptors computed from gallery photos are used only to power that in-browser matching.
We use your data only to run the service — host galleries, let your clients download them, notify you of picks. Your photos are yours: we never sell them, never license them, and never use them to train anything. We use essential cookies (authentication and your light/dark preference), Google Analytics to understand how the site is used, and a Meta pixel to measure our own advertising. None of it is ever used to identify you or your clients, and your photos and galleries are never shared with these services.
When a client downloads a file from a gallery (a photo, a ZIP, the invoice, the licence, the releases), we record for the photographer: the file, the time, the IP address, an approximate city and country derived from it, and the device and browser type. The photographer sees this log for their gallery; we use it for nothing else. The gallery page tells the client. The log is deleted with the gallery.
Data is stored with our processors (Supabase, Cloudflare R2, Stripe for billing) encrypted in transit and at rest. Deleting a gallery deletes its photos; deleting your account deletes all your data within 30 days, subject to the legal-preservation exceptions below. Email hello@clientgallery.io to exercise access, correction, export or deletion rights, or to complain to the Commission d'accès à l'information du Québec.
Authorized personnel may access private or protected content and relevant records to address abuse, protect safety and comply with law. Records may include affected files, sizes, hashes, timestamps, account identifiers, available contact details and network observations already collected. An IP address alone does not establish a person’s identity. We do not request precise location permission for moderation.
Access and decisions are logged in a restricted area. Alerts must not contain sensitive thumbnails. Storage providers also include Backblaze for archived originals. Processing may occur outside Québec subject to required assessments and safeguards. Any future detection provider receives only what is necessary for its function under terms prohibiting reuse for model training. Systematic automated scanning is not currently enabled.
Ordinary deletion may be delayed only for records necessary to a legal duty, an order or a legally justified safety purpose. Cases have recorded review dates and records are deleted when retention is no longer justified, subject to applicable obligations. Reporting and notice exceptions follow applicable law. Contact Christian Gomez at hello@clientgallery.io for access, correction, deletion or appeal requests; legal limitations may apply.