Privacy Policy

Nayra is the controller for the data of photographers' accounts: name, email, studio details and billing details.

As for end clients' data (the name, email and phone the photographer enters in a gallery or an appointment), the photographer is the controller and Nayra acts as processor: we only use it to provide them the service and following their instructions.

From your account: name, email address, encrypted password, and the studio details you choose to add (name, phone, address, logo).

From your billing: the customer identifier and the status of your subscription. Card details are handled by Stripe directly; we neither see nor store them.

From your end clients: the name, email and phone you enter, plus their photo selection and the downloads they make.

From usage: technical logs needed to operate and debug the service, and your studio's storage consumption.

To provide you the service: creating and delivering galleries, managing your calendar, sending the notifications you trigger and enforcing your plan's limits.

To charge you, if you are on a paid plan.

To keep the platform secure: detecting abuse, limiting access attempts and diagnosing errors.

We do not sell your data or your clients' data, and we do not use it for third-party advertising.

Only with the providers that make the service work, and only as needed: Supabase (database and authentication), Cloudflare R2 (file storage), Vercel (hosting), Stripe (payments), Resend (transactional email), Twilio (WhatsApp messages, when available) and Sentry (error diagnostics).

Some of these providers are outside your country. Where that implies an international transfer, it is covered by the contractual clauses and safeguards each provider offers.

We may also hand over data if a competent authority legally requires it.

Your account data, for as long as the account exists. When you close it we delete your studio, your galleries and your files.

On the free plan, galleries are archived when their expiry date is reached and their files are deleted.

We keep billing records for the period tax regulations require, even if you close the account.

You can access your data, correct it, delete it, object to certain processing and request a copy in a readable format.

Much of it you can do yourself: edit your studio details in Settings and delete your account and all its content from that same screen.

For anything else, write to us at soporte@nayraphoto.com and we will reply within the legal deadlines.

If you are in Brazil, the LGPD grants you these rights against the controller. If you are a photographer's end client, go to them first: they are the one who decides about that data. If you prefer to write to us, we will pass your request on.

We encrypt traffic in transit, isolate each studio's data at the database level and serve photographs through signed links of limited duration.

Shared galleries are accessible to anyone with the link: treat it as a credential and share it only with whoever should see it.

No system is infallible. Should a breach affecting your data occur, we would notify you and report it to the relevant authority where appropriate.

We use only the cookies necessary for the application to work: the sign-in session, the chosen language and the interface state.

We do not use advertising or third-party tracking cookies. Were that to change, we would ask for your consent first.

If we update this policy we will publish the new version here with its date, and we will notify you by email if the change is substantial.

For any privacy matter, write to us at soporte@nayraphoto.com.