Privacy

Backdrop is operated by Emily Creates LLC. It is software for photographers: you keep a book of the locations you shoot at, and share one link with the people you photograph. Questions about anything here reach us from Profile → Help inside the studio, or at info@emilysharonphoto.com.

To run your account and your page, we store:

• Your email address and a password, held by our authentication provider — we never see the password itself.
• Your profile: display name, page handle, logo, cover image, colours, and welcome message.
• Where you start from — the home address you set, and its coordinates — used only to work out drive times and travel-fee zones for your own locations.
• The locations you add: names, coordinates, notes, private map links, fees, and any photographs you upload.
• A notification email address and phone number, if you choose to add them.
• Your guide books, and any guide books you buy from other photographers.

We do not sell any of it, we do not advertise against it, and we do not use your photographs for anything other than showing them on your own page.

You do not need an account, and we do not create one for you. When you choose a location and send it to your photographer, we record the name you gave, the email address and/or phone number you gave, your message, and which location you picked — and we pass that to that photographer only, because reaching you is the entire point.

• The photographer you contacted can see your selection in their client list. Other photographers cannot.
• We may send you one confirmation message about your selection, by email or text. There is no marketing list and you will not be added to one.
• Anything you mark as a favourite stays in your own browser. It is never sent to us.
• If you tell us where you are starting from, that address is turned into coordinates and used to work out drive times. Doing that sends it to the mapping services listed below — we do not store it with your selection unless you send one.

If you would like your details removed, ask the photographer you contacted — they can delete your selection themselves, and are required to when you ask. You can also write to info@emilysharonphoto.com.

Images you upload are stored in a public bucket so they can load on your page — anyone holding the direct link to an image can view it, so treat uploads as publishable work rather than private files. The bucket cannot be browsed or listed. Exact coordinates for your locations are never sent to a client's browser: public pages receive an approximate position inside a privacy circle, and the precise pin only travels with the message we send you.

Pausing your page in Profile hides it from everyone immediately, without deleting anything.

• Supabase — database, sign-in, file storage, and server functions.
• Resend — transactional email, when email alerts are switched on.
• Twilio — text messages, when SMS alerts are switched on.
• Google — four uses: it reads a PDF or image you upload to the location importer to turn it into a text list of places (only when you choose that import option; the file is not kept); if you charge travel fees, it works out the driving time from your home base to a location so the right travel zone can be applied; when you paste a Google Maps share link for a location, the place named in it is looked up to find its coordinates; and it serves the fonts this site is set in, which means its servers see the IP address of anyone who opens a page.
• OpenFreeMap — serves the map itself: your browser fetches the map tiles, fonts and style from their servers as you pan the map, which means they see your IP address.
• OpenStreetMap — two uses: if OpenFreeMap cannot be reached, the map tiles are fetched from OpenStreetMap's servers instead, which means they see your IP address; and its Nominatim service turns a typed address or zip code into coordinates, which happens when a photographer sets their home base, when a client types where they are starting from, and when a pasted Google Maps link names a place rather than giving coordinates.
• US Census Bureau — when OpenStreetMap can't find a typed address, that address is sent to the Census Bureau's public geocoder to turn it into coordinates. This happens when a photographer sets their home base and when a client types where they are starting from.
• Project OSRM — works out the driving time between a starting point and a location. When a client uses the plan-my-shoot flow, their starting coordinates and the location's coordinates are sent to this service.
• Our hosting provider, which keeps standard request logs.

Each of these acts on our instructions to make the product work. None of them is given your data to use for their own purposes.

We count page views — the path visited, the referring site, and the IP address the request came from. IP addresses count as personal data in much of the world, so we name it here rather than call the browsing anonymous: we use it only to understand traffic and to spot abuse. No cookies are set for this, no profile is built, and it is not tied to your account or to any client's selection.

Your account data stays until you delete it. Client selections stay until the photographer who received them deletes their account, or asks us to remove one.

In Profile you can download everything we hold about you as a single file, at any time, without asking anyone.

Deleting your account there removes your profile, your locations, your categories, your guide books, your uploaded photographs, and your sign-in itself. It happens immediately and it cannot be undone, so download your file first if you want to keep it.

If this policy changes in a way that affects you, we will say so on this page and update the date above.