Your data is safe with us
You are trusting us with photos of real homes and your business. Here, in plain language, is exactly how we protect that.
Your photos are private to you
Everything you upload, every order, and every finished video belongs to your account and yours alone. No other customer can see your files, and our system checks that you own something before it ever hands it back to you. It is not a promise on paper. It is built into how the product works.
Trusted companies handle the sensitive parts
Payments run through Stripe, so we never see or store your full card number. Your account, files, and website run on Stripe, Supabase, Cloudflare, and Vercel, the same companies that power thousands of businesses you already use. Each one is independently audited for security.
Built to industry-standard security practices
We follow widely recognized security practices: strict limits on who and what can touch your data, a permanent record of anything involving money or staff actions, a required review on every change we make, and encryption everywhere, both while your files travel and while they sit at rest.
You control your account
We block known-stolen passwords, slow down anyone trying to guess yours, and offer a one-time email code as a second layer of sign-in security. Turning it on takes a few seconds, and our own team is required to use it.
Your address never travels with your photos
Cameras and phones quietly tag photos with the exact GPS location where they were taken. We strip that hidden tag off every photo the moment you upload it, so your property's location never rides along with your files.
A person reviews every video before you see it
No video is ever published automatically. A real person checks the quality and content of every finished film before it becomes visible to anyone, including you.
You decide how long we keep things
We keep your photos and finished videos for 90 days after delivery, then delete them. Want them gone sooner, or your whole account removed? Just ask, any time.
Found a security problem?
We welcome good-faith security research. Email security@wowsmith.app (details at security.txt). Include steps to reproduce, and we aim to reply within 48 hours. We will not pursue legal action against good-faith research that respects customer privacy, avoids destroying data, and gives us reasonable time to fix the issue.
Questions, or need our security documentation for your own review? Email security@wowsmith.app.
Your photos live on the same platforms the Fortune 500 trust
We build on the most independently audited names in the business. Each of these companies holds a current SOC 2 Type II certification, the gold standard for how customer data is protected.
Supabase
Database & sign-in
Cloudflare
Network & storage
Vercel
Website hosting
Stripe
Payments
SOC 2 Type II certifications are held by the named infrastructure providers. Wowsmith inherits their audited controls for storage, payments, and identity.