Privacy policy
Last updated: September 2026
What we collect
- Account data — your name, email address, phone number, and a one-way hash of your password (we never store the password itself).
- Your photos — the files you upload, including the EXIF metadata your camera embedded in them, plus the smaller preview renditions we derive from them.
- Usage data — login events (IP address and browser user agent), and the keep/skip decisions made in client galleries you share.
What we do with it
- Provide the service: store your photos, generate previews, run AI grading, and host the client selection galleries you create.
- Verify your account: we send one-time codes by email and by voice call to your phone.
- Keep the service secure: rate limiting and abuse prevention using login IPs.
Who processes your data
- Object storage — your photos live in a private S3-compatible bucket (Tenbyte Cloud). They are served only through short-lived signed URLs.
- AI grading — on plans with AI sorting, a JPEG rendition of each photo is sent to a third-party AI provider (Google Gemini or OpenAI) for grading. The provider processes the image to return a verdict; prompts and verdicts are stored with your photos.
- Email — verification and reset codes are delivered by our transactional email vendor (Resend).
- Phone calls — verification voice calls are placed by Awaj Digital.
We do not sell your data or your photos, and we do not use your photos to advertise.
Share links
Client gallery links are bearer tokens: anyone who has the link can view that gallery and make selections until the link expires or you delete it. Share them only with your client.
Cookies
We set a single session cookie to keep you logged in (24 hours). No tracking or advertising cookies.
Retention and deletion
Your data stays while your account exists. You can delete your account at any time from the settings page — that removes your account, projects, photos (including the stored files), AI analyses, and share links. Deleting individual photos or projects from the dashboard removes those files from storage as well.
Contact
Questions about your data: support@elmomento.app.