Privacy Policy

Overview

This Privacy Policy explains how Zamora Digital Studios ("ZDS," "we," "our," or "us") collects, uses, and protects your personal information when you use the ZDS Client Portal — including the mobile app and web portal (together, the "Service"). Our business website is located at www.zamoradigitalstudios.com. By creating an account and using the Service, you agree to the practices described in this policy.

1. Information We Collect

1.1 Information You Provide Directly

When you register for an account or use the Service, we collect:

• Full name and email address (provided during registration)

• Password (stored in encrypted form — we never see your actual password)

• Property addresses associated with your shoot requests

• Preferred dates, times, and notes submitted with appointment requests

• Messages you send through the in-app chat

• Payment information (processed directly by Square — see Section 3)

1.2 Information Collected Automatically

When you use the Service, we may automatically collect:

• Device type, operating system, and app version

• Log data such as the time and date of your activity within the app

• Push notification tokens, used to send you alerts about your galleries, invoices, appointments, and messages

1.3 Information We Do Not Collect

We do not collect:

• Payment card numbers, bank account numbers, or full financial data — these are handled entirely by Square

• Location data beyond property addresses you provide

• Data from your device's camera, microphone, or contacts (beyond what you voluntarily submit)

2. How We Use Your Information

We use the information we collect to:

• Create and manage your account

• Deliver your photo and video galleries through the app and web portal

• Send push notifications and email alerts about your galleries, invoices, appointments, and messages

• Process and display invoices through our integration with Square

• Respond to your messages and support requests

• Send you marketing and promotional communications about ZDS services (with the choice to opt out — see Section 2.1)

• Improve the performance and reliability of the Service

We do not sell your personal information.

2.1 Marketing & Promotional Emails

We may add your email address to our marketing list to send promotional communications about ZDS services, offers, and updates. You may set your preference at registration — a pre-checked option you can uncheck to opt out — and you may unsubscribe at any time using the link included in every marketing email or by contacting us at contact@zamoradigitalstudios.com. Opting out of marketing email does not affect the transactional notifications about your galleries, invoices, appointments, and messages, which are part of the Service.

3. Third-Party Services

The Service relies on trusted third-party providers to operate. Each provider handles data according to their own privacy policies.

3.1 Firebase (Google)

We use Firebase, a platform operated by Google, for the following:

• Firebase Authentication — to manage account sign-in and email verification

• Firebase Firestore — to store account data, messages, appointments, and gallery metadata

• Firebase Storage — to store and deliver your photo and video files

• Expo Push Notification Service (Expo) — to deliver push notifications to your device; Expo relays through Apple (APNs) and Google (FCM) platform gateways

Your data is stored on Google's secure cloud infrastructure. For more information, visit firebase.google.com/support/privacy.

3.2 Square

We use Square to process payments and manage invoices. When you pay an invoice through the Service, your payment information is submitted directly to Square and is never stored by ZDS. For more information, visit squareup.com/us/en/legal/general/privacy.

3.3 Email Notifications (SendGrid or Mailgun)

We use a third-party email delivery provider (currently SendGrid or Mailgun) to send you notification emails when you are not active in the app. These emails contain your name and the nature of the notification (for example, a new gallery is ready). We do not sell your email address to these providers.

3.4 Vercel

The web portal is hosted on Vercel. Vercel may collect basic server logs including IP addresses for security and performance purposes.

3.5 Shared Gallery Links

When you generate a share link for a gallery, any person who accesses that link can view the photos and videos in that gallery without creating an account. ZDS does not collect personal information from these Viewers. We may log anonymous access events for security and operational purposes. Share links expire automatically after 7 days and cannot be used after that time.

3.6 Matterport (Hosted 3D Tours)

If your order includes a Matterport 3D tour or other hosted deliverable, we use Matterport, Inc. to host and serve that interactive tour. Matterport stores the spatial scan of the property and serves it to viewers you or ZDS share it with, and may collect basic, generally anonymized tour-viewer analytics (such as view counts and engagement) for the hosted tour. Property scans are managed under the Hosted-Deliverable Addendum. For more information, see Matterport's privacy policy at matterport.com.

4. How We Store and Protect Your Data

Your data is stored in Firebase's cloud infrastructure, which uses industry-standard encryption in transit (TLS) and at rest. Access to your account data is protected by Firebase Authentication. Only you and the ZDS owner have access to your files, messages, and account information.

Your photo and video files are stored in Firebase Storage under a path specific to your account. Other clients cannot access your files.

4.1 Staff Account Access

If your account has staff members added by a ZDS administrator, those staff members are granted access to your galleries, invoices, and appointment information. ZDS takes reasonable technical measures to ensure that staff can only access accounts they are authorized to view. However, ZDS is not responsible for how staff members use or handle the information they access through the Service. You should ensure that any staff members with access to your account understand their obligation to handle your data responsibly.

5. Data Retention

We retain your account information and associated content for as long as your account is active. If you request that your account be deleted, we will remove your personal information and associated data within thirty (30) days, except where retention is required by law or for legitimate business purposes (such as resolving a billing dispute).

To request account deletion, contact us at contact@zamoradigitalstudios.com.

6. Your Rights

You have the right to:

• Access the personal information we hold about you

• Correct inaccurate information in your account

• Request deletion of your account and associated data

• Opt out of email notifications (push notifications can be disabled in your device settings or in the app's Notification Preferences)

To exercise any of these rights, contact us at contact@zamoradigitalstudios.com.

7. Children's Privacy

The Service is intended for use by real estate professionals, property owners, short-term-rental owners, and property and rental managers, and is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

8. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the Effective Date at the top of this document. If changes are material, we will notify you by email or through a notice in the app. Continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

9. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us:

Zamora Digital Studios Blue Ridge, Georgia Email: contact@zamoradigitalstudios.com Website: www.zamoradigitalstudios.com