Privacy Policy
Last updated: June 2026 (v2)
1. Data Controller
SPHOT (“we”, “us”, “our”) is the data controller for personal information collected through booksphot.com. For privacy inquiries, contact us at hi@booksphot.com.
2. Information We Collect
We collect the following personal data when you use our platform:
- Account Information: Email address, full name, and password (hashed) when you register.
- Email Verification: A temporary one-time code is generated and emailed to confirm your address during sign-up; it is stored hashed and expires after a short period.
- Photographer Application Data: Location, service categories, portfolio images, social media links, pricing, bio, and languages.
- Booking Data: Selected time slots, shoot details you provide (location, group size, style, language, notes), booking status, and payment references.
- Chat Messages: Messages exchanged between users and photographers within our platform.
- Reviews: Ratings and written reviews you submit after a completed session.
- Reports & Moderation Data: If you report a conversation, the report and the related booking/messages so our team can review it.
- Usage Data: Page views, device type, and browsing behavior via Google Analytics (with IP anonymization, and only if you consent to cookies).
3. Legal Basis for Processing
Under GDPR (EU) and KVKK (Turkey), we process your data based on:
- Contractual Necessity: Processing required to provide our booking services (account management, bookings, messaging).
- Consent: Analytics cookies are loaded only after your explicit consent via our cookie banner.
- Legitimate Interest: Platform security, fraud prevention, and service improvement.
4. How We Use Your Data
- To create and manage your account.
- To process photographer applications and admin verifications.
- To facilitate bookings and in-platform messaging.
- To verify your email address and send service-related notifications (via Resend).
- To display reviews and to investigate reports for safety and moderation.
- To analyze anonymized usage patterns (with consent) for platform improvements.
5. Data Retention
- Account Data: Retained for the duration of your account plus 30 days after deletion.
- Booking Records: Retained for 3 years for financial/legal compliance.
- Chat Messages: Retained for 1 year after the associated booking is completed or cancelled.
- Reviews: Retained while the photographer profile is active, so other users can see them.
- Reports: Retained for up to 2 years for safety, audit, and abuse-prevention purposes.
- Verification Codes: Deleted shortly after they expire or are used.
- Analytics Data: Google Analytics data retention is set to 14 months.
6. Your Rights
Under GDPR and KVKK, you have the following rights:
- Right of Access: Request a copy of the personal data we hold about you.
- Right to Rectification: Request corrections to inaccurate or incomplete data.
- Right to Erasure: Request deletion of your personal data (“right to be forgotten”).
- Right to Data Portability: Receive your data in a machine-readable format.
- Right to Object: Object to processing based on legitimate interests.
- Right to Withdraw Consent: Withdraw cookie consent at any time by clearing your browser data.
To exercise any of these rights, email hi@booksphot.com. We will respond within 30 days.
7. Cookies
We use cookies for analytics purposes only. Google Analytics cookies are loaded only after your explicit consent via our cookie banner. You can change your cookie preferences at any time by clearing your browser storage and revisiting the site. No tracking cookies are set without your consent.
8. Third-Party Services
We use the following third-party services that may process your data:
- Supabase (Database & Authentication) — Privacy Policy
- Resend (Transactional Email) — Privacy Policy
- Google Analytics (Usage Analytics, with IP anonymization) — Privacy Policy
- Vercel (Hosting) — Privacy Policy
9. Data Security
We implement industry-standard security measures including encrypted data transmission (TLS/HTTPS), hashed passwords, Row-Level Security (RLS) on database operations, and role-based access controls. However, no method of transmission over the Internet is 100% secure.
10. International Data Transfers
Your data may be processed in countries outside your country of residence. We ensure that appropriate safeguards are in place in accordance with GDPR requirements, including Standard Contractual Clauses where applicable.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be reflected on this page with an updated date. Continued use of the platform after changes constitutes acceptance of the new policy.
12. Contact
For any privacy-related inquiries, data access requests, or to exercise your GDPR/KVKK rights, contact us at hi@booksphot.com.