Wowsmith Privacy Policy

Account data (your email and hashed authentication data), the photos and text you upload to create videos, the photos you upload to deliver to a client, your orders and deliveries and their status, payment records (payments are processed by Stripe, so we never receive your full card number), support messages, and security and device logs such as IP address and timestamps.

If you use photo delivery, we also hold what you type into a delivery: your client's name and email address, any additional addresses you ask us to copy, your brand name, and your message to them. Gallery activity (view and download counts and timestamps, and the IP addresses used for rate limiting) and any notes a gallery visitor writes on your photos are stored with the delivery.

When you deliver photos, you decide who receives them. You supply your client's name and email address and we send that one delivery email on your behalf, from our domain, with your business name on it and your own email address as the reply-to. We do not market to your clients, do not add them to any list of ours, and do not sell or share their details. Their address is used to deliver their gallery, to send it again if you ask, and for nothing else.

You are responsible for having the right to send those photos to that person. For that data you are the controller and we act on your instructions: we send what you tell us to send, to the address you give us.

A gallery takes the link and a 4 digit code. Every delivery sent from 27 September 2026 has a code, which we put near the top of the delivery email. Your client enters it once on a device and is not asked again for thirty days, and they can pass it to anyone who should have the photos, which is what lets you reach a seller or a broker who has no account. We count the tries and lock out after ten in an hour. Deliveries sent before that date open with the link alone, as they always have. Gallery pages are kept out of search engines and send no referrer, and you can reset a link at any time, which stops every copy of the old one, and every code already entered, from working.

Notes a visitor writes in your gallery are stored and shown to you on the delivery page. The email telling you they arrived carries a count and a link, never the words themselves.

Where a gallery offers virtual staging, a visitor can order it on chosen photos. We store which photos, the style, any note they add and when they ordered, and tell the photographer by email (the photos and the style, never the note). Nothing is paid through us: the photographer bills it. When the staged photos are added, we email the client once, from our domain with the photographer's business name and reply-to, to say they are ready.

An upload link lets someone who does not have an account send you the files from a shoot: you create a link for one job, they open it, and their camera files go straight into your storage. We collect the address or job name you type, the name the shooter gives, the file names, sizes and types, and the files themselves. We do not ask a shooter for an account, a password or any other detail about them, and an upload link cannot be used to see, download or delete anything, including what the same person uploaded a minute earlier.

These files are held for seven days and then permanently deleted. You can extend a job by another seven days as often as you need, and delete one sooner. The shooter is told on the page that uploads are held briefly and to keep their own copy. After deletion the files cannot be recovered, by us or anyone.

An upload link is the key to that one job. It works until you close it, reset it, or the week runs out, and it is kept out of search engines and sends no referrer. Resetting it stops every copy of the old link from working.

If you upload photos of a person to create a custom performer (for example, an actor or, in Agent Tour, yourself), we process facial and likeness features from those images to generate a digital performer used only in your videos. We treat this as sensitive information.

• Purpose: solely to build and render the digital performer you requested.
• Consent: we require written consent from the person depicted (or their parent or legal guardian). You must not upload a person's likeness without their consent.
• No sale: we do not sell, rent, or trade likeness or biometric data, and we do not use it to train third-party models beyond producing your order.
• Retention and destruction: source likeness images and derived performer data are deleted when you delete the actor, when your account is deleted, or within our standard retention window (below), whichever comes first.

Residents of states with biometric-privacy laws (for example, Illinois BIPA, Texas CUBI, Washington HB 1493) have specific rights described under “Your rights” below.

Video generation: location metadata (EXIF/GPS) embedded in photos you upload for a video is stripped during ingest and is not used or shared, so a property address never travels to a model provider.

Photo delivery: the full-size file your client downloads is the file you uploaded, unchanged, including whatever metadata your camera or your editor left in it. That is deliberate: a delivered original is your work product, and stripping it would also remove your copyright and caption fields. The web-size and thumbnail copies your browser makes are re-encoded, which drops that metadata. If you do not want GPS coordinates reaching your client, remove them before you upload.

Video delivery: the same rule, with one difference that matters because video link pages are public. The full quality download is the file you uploaded, unchanged, metadata included. The copy that actually plays, in the gallery and on the MLS compliant and branded link pages, is a copy we make with the container metadata removed, so drone GPS tags, the name of the editing software and any title, artist or comment field do not travel with a link anyone can open.

Two public pages per delivered video. The MLS compliant link is a page that plays the video and shows the title of the delivery, normally the property address, and nothing else: no names, no logos, no links, no contact details. The branded link is the same page with a real-estate agent's details on it. Neither page needs a password. Anyone who has the link can open it, and either page may be embedded in another website. Both are kept out of search engines, carry no cookies, run no scripts, and load no analytics or advertising of any kind, ours or anyone else's. We use the visitor's IP address for a short time to limit abuse, and we do not build a profile of who watched what.

If you are the agent. A free account lets you put your name, title, brokerage, phone number, headshot, and the verified email address of your account on the branded link of every video delivered to that email address. You are choosing to publish those details: they are visible to anyone who opens a branded link, for as long as the delivery is hosted or until you change or remove them, which you can do at any time from My branding. Your headshot is decoded, re-encoded without its metadata, and checked automatically before it can appear, which may include screening by a content-safety service listed below; we keep a rejected upload for review rather than deleting it on request. The first person on a delivery's email list to finish their branding is the one whose details appear, and the photographer who sent the delivery can reset that.

Paying to keep a gallery online. Keeping a gallery online is a subscription, $5.00 every six months until cancelled, paid through Stripe Checkout without an account. Stripe collects and stores the card details, and we never receive the card number. We store Stripe's reference numbers for the customer and the subscription against the delivery they pay for, the amounts, and which delivery was extended and until when. The payer's name, email and billing address reach us inside Stripe's payment notifications, which we keep as billing records; we use the email address to send the confirmation of the subscription, which says how to cancel, and for nothing else. Cancelling, changing a card and viewing invoices all happen in Stripe's customer portal, which only opens through a link Stripe emails to the address that paid.

A property website is a public page for one listing, published by the photographer for a real-estate agent: the listing's photos, videos and 3D tour, the agent's name, brokerage and contact details, and forms to request a tour, send a message or sign up. Anyone with the link can open it. It is kept out of search engines, cannot be embedded in other websites, and runs one script of ours, plus a Cloudflare Turnstile check on the forms that helps keep bots out. It loads no analytics or advertising.

If you fill in one of its forms, we collect what you type (your name, email address, and optionally your phone number, preferred tour times or message), when you sent it, the consent wording you agreed to and its version, and your IP address for a short time to limit abuse. We send your contact details to that listing's agent straight away, so they can reply, and keep them on a private page only the agent can open, where the agent can also download them. You agree, by ticking the box on the form, that the agent, their brokerage and people and service providers acting for them may contact you about the property and other real estate services by phone call, text message and email, including marketing messages and calls or texts made with automated technology or an artificial, prerecorded or AI voice, at the number and address you entered, and may use your information to show you related advertising. Consent is not a condition of buying anything, and you can withdraw it at any time: reply STOP to a text, use the unsubscribe link in an email, or tell the agent. We do not use your details for anything else, do not market to you ourselves, do not share them with the photographer, and do not sell them. Once the agent has your details they hold their own copy and their own privacy practices apply to it; ask them directly to stop contacting you, or reply STOP to a text.

If you sign in at an open house on the agent's sign-in page (the property website's address followed by /oh), we collect your name and whatever else the agent chose to ask: your email address, your phone number, and your answers to their questions. To sign in you tick the same consent box as on the forms above, agreeing to the same contact described there, and we keep that wording and its version with your sign-in. Your sign-in goes to that agent only, the same way as the forms above, and the page keeps nothing on the device, so the next visitor cannot see what you typed. After any of these forms, we also email you once to confirm, with the agent's contact details and a link to the property website; that email contains nothing you typed, and an address receives at most three a day.

How long we keep them. A property website lives as long as its delivery is hosted (above), and the details sent through it are deleted with that delivery's files. To have yours deleted sooner, email privacy@wowsmith.app with the address of the property.

To create, review, and deliver your videos; to host your photo and video galleries and their link pages, send the delivery emails you ask us to send, and send the hosting reminders described below; to process payments and manage subscriptions; to provide support; to secure the service and prevent abuse; to send transactional messages about your account and orders; and to comply with law. We do not use your uploads to train third-party AI models beyond fulfilling your order.

Generating your video sends your photos, prompts, and (for custom performers) likeness images to third-party AI model providers for video, music, and text processing. We use providers under terms intended to limit their use of your content to serving your request, and we strip location metadata before processing. Provider practices can change; we maintain the current provider list below.

Photo delivery and HDR merge do not work that way. Photos you upload to deliver to a client are stored and served back to that client; they are not sent to an AI model provider. Bracketed exposures you process with our HDR merge tool are combined by our own image pipeline on our own infrastructure. Neither is used to train any model, ours or anyone else's.

We do not sell your personal information for money. If you consent to advertising cookies, online identifiers may be shared with advertising platforms for ad measurement and remarketing, which some state laws treat as a “sale” or “sharing”; you can opt out through the “Your privacy choices” link (see Cookies above). We share data with service providers who help us run Wowsmith, under contracts that restrict their use of it:

• Hosting and database: Vercel, Supabase; background processing: Railway
• Media storage: Cloudflare R2; bot protection: Cloudflare Turnstile
• Payments: Stripe
• Transactional email: Resend
• AI generation: third-party video, music, and text model providers
• Content safety screening of uploaded images, including agent headshots, when enabled: Sightengine or Google Cloud Vision
• Analytics and advertising (only with your consent): Google (Analytics, Ads, Tag Manager), Meta (pixel)

We may also disclose information to comply with law, enforce our Terms, or protect rights and safety.

Delivered galleries are hosted for six months. The photos and videos in a delivery, the gallery, and every video link page that belongs to it are hosted for six months from the day the delivery is sent. We say so in the delivery email and at the foot of the gallery. About thirty days before the date, and again the day before, we email the client, anyone copied on the delivery, and the photographer. Anyone holding the gallery link can keep the whole delivery online for $5 every six months, an auto-renewing subscription they can cancel at any time, and the photographer can extend it at no charge. When the date passes, the gallery and its link pages stop working at once and the stored files are permanently deleted within roughly two days; during that short gap a payment still brings everything back. After deletion the files cannot be recovered, by us or anyone, so download what you need to keep.

Files uploaded through a shoot link are held for seven days. We delete them automatically at the end of that week unless you extend the job, and the deletion runs in two stages a day apart so a mistake can be caught while the files still exist. You can delete a job and its files at any time.

Everything else stays until you remove it. Photos uploaded for a video, the videos we make for you, your actors and your account are not on a timer: they are kept until you remove them or close your account. Removing a photo, a delivery or an actor deletes its stored files. Closing your account removes your data and stored media, including source likeness images and any branding details and headshot you published.

Deliveries sent before 21 September 2026 were given six months from the day they were delivered and never less than thirty days from that change, and the reminder emails above are the notice we promised before any retention window would apply to existing work.

Some records outlive that because the law or basic diligence requires it: payment and tax records, security and abuse logs, and the acceptance records showing which version of these documents you agreed to. Backups roll off on their own schedule, normally within 30 days.

If we ever shorten a hosting period or introduce a new storage limit, we will give notice before it applies to anything already uploaded. To delete something now, remove it in the app or email privacy@wowsmith.app.

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, to opt out of the sale or sharing of personal information (we do not sell it), and to not be discriminated against for exercising these rights. Residents of the EU/UK have rights under the GDPR/UK GDPR, including access, rectification, erasure, portability, restriction, objection, the right to withdraw consent, and the right to complain to a supervisory authority. Residents covered by biometric-privacy laws may request information about, and deletion of, their biometric data. To exercise any right, email privacy@wowsmith.app; we respond within the timeframes required by law.

Wowsmith is not directed to children under 13 and we do not knowingly collect their personal information. You must not upload photos depicting a minor without verifiable parent or guardian consent, and we will delete such data if we learn it was collected without consent.

We send transactional emails (account, orders, security) that you cannot opt out of while you have an account. We send marketing emails only if you opt in, and every marketing email includes an unsubscribe link and our physical mailing address, consistent with CAN-SPAM. Unsubscribing from marketing does not stop transactional messages.

Strictly necessary cookies (your sign-in session, two-factor security, and Cloudflare Turnstile bot protection) are always on because the site cannot function without them. These do not require consent.

We also use, only with your consent, analytics cookies (to understand how the site is used) and advertising cookies (to measure and improve our advertising, through Google Analytics, Google Ads, and the Meta pixel, managed with Google Tag Manager). When these are active, a cookie banner asks for your choice on your first visit, non-essential cookies stay off until you accept, and we use Google Consent Mode so no analytics or advertising storage is used without consent. You can change your choice any time through the “Your privacy choices” link in our footer.

California and other US state residents: using advertising cookies can be treated as a “sale” or “sharing” of personal information for cross-context behavioral advertising under laws such as the CPRA. The “Your privacy choices” link is your opt-out, and we honor the Global Privacy Control (GPC) browser signal as a valid opt-out. EU/UK residents: we rely on your consent for analytics and advertising cookies and you may withdraw it any time through the same link.

We protect your data with encryption in transit and at rest, access controls scoped so one customer can never access another's data, and least-privilege infrastructure. No system is perfectly secure, but we work to keep your information safe. See our Security page for details.

We and our providers may process data in the United States and other countries. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for cross-border transfers.

If a breach affects your personal information, we will notify you and the relevant authorities as required by applicable law.

We may update this policy; for material changes we will provide notice and update the version date above. Continued use after changes take effect means you accept the updated policy.

Privacy questions and requests: privacy@wowsmith.app.