Your data is safe with us

You are trusting us with photos of real homes and your business. Here, in plain language, is exactly how we protect that.

Your photos are private to you

Everything you upload, every order, and every finished video belongs to your account and yours alone. No other customer can see your files, and our system checks that you own something before it ever hands it back to you. It is not a promise on paper. It is built into how the product works.

Trusted companies handle the sensitive parts

Payments run through Stripe, so we never see or store your full card number. Your account, files, and website run on Stripe, Supabase, Cloudflare, and Vercel, the same companies that power thousands of businesses you already use. Each one is independently audited for security.

Built to industry-standard security practices

We follow widely recognized security practices: strict limits on who and what can touch your data, a permanent record of anything involving money or staff actions, a required review on every change we make, and encryption everywhere, both while your files travel and while they sit at rest.

You control your account

We block known-stolen passwords, slow down anyone trying to guess yours, and offer a one-time email code as a second layer of sign-in security. Turning it on takes a few seconds, and our own team is required to use it.

Your address does not travel with photos we process

Cameras and phones quietly tag photos with the exact GPS location where they were taken. Photos that go into video generation are stripped of that tag before any model sees them. Photo delivery works differently on purpose: the full-size file your client downloads is the file you exported, metadata and all, because that is your call to make, not ours. The web-size copies the gallery makes are re-encoded, which drops it.

A person reviews every video before you see it

No video is ever published automatically. A real person checks the quality and content of every finished film before it becomes visible to anyone, including you.

We say how long we keep things, up front

A delivered gallery, its photos, its videos and their link pages are hosted for six months from the day it is sent. The delivery email says so, the gallery says so, and we email a reminder about a month before and again the day before. Keeping it online is $5 every six months and can be cancelled online at any time; the photographer who sent it can extend it for free. After the date the links stop working and the files are permanently deleted. Files a shooter sends you through an upload link are held for seven days and then permanently deleted, and you can extend a job or delete it sooner. Everything else, your own videos, actors and account, stays until you remove it. Want something gone now, or your whole account removed? Just ask, any time.

Video link pages carry nothing but the video

Every delivered video gets a page made for an MLS virtual tour field: the video, the property address, and nothing else. No names, no logos, no links, no cookies, no scripts, no tracking, and it is kept out of search engines. What plays is a copy with the hidden file metadata removed, so a drone GPS tag or an editor name does not travel with a public link. The branded version adds the details of an agent only after that agent has verified their email address, and their headshot only after it has passed an automated check.

AI enhanced photos are labelled, not hidden

When you deliver photos, virtual staging, AI twilight and other AI work go in their own section. Your client sees a badge on each one, is told in writing what it means, and can download the set with or without them. Which photos get that badge is your call, and disclosing the work wherever they publish is theirs.

Found a security problem?

We welcome good-faith security research. Email security@wowsmith.app (details at security.txt). Include steps to reproduce, and we aim to reply within 48 hours. We will not pursue legal action against good-faith research that respects customer privacy, avoids destroying data, and gives us reasonable time to fix the issue.

Questions, or need our security documentation for your own review? Email security@wowsmith.app.