Privacy Policy

Overview

This Privacy Policy explains how Zamora Digital Studios ("ZDS," "we," "our," or "us") collects, uses, and protects personal information. It applies to the websites and services listed in Section 1 (together, the "Sites"). This policy describes our practices; it does not ask you to agree to anything. If you have a ZDS Client Portal account, your use of the Portal is also governed by our Terms of Service.

1. Who We Are and What This Policy Covers

ZDS is a photography and video studio based in Blue Ridge, Georgia, owned and operated by Jean Zamora. This policy covers:

• The ZDS Client Portal (the "Portal"): the web portal at portal.zamoradigitalstudios.com, the ZDS admin dashboard, and the ZDS mobile app;

• zamoradigitalstudios.com, ZDS's business website; and

• jeanzamora.com, Jean Zamora's personal portfolio website. Any client work arranged through jeanzamora.com is carried out by ZDS. For jeanzamora.com, "we" means Jean Zamora and ZDS.

2. Contact Forms

2.1 What we collect. When you send a message through the contact form on zamoradigitalstudios.com or jeanzamora.com, we receive the information you enter: your name (first and last name on zamoradigitalstudios.com), your email address, a subject line, and your message. A contact form also contains a hidden field used only to detect automated submissions.

2.2 How it reaches us. Your message is sent to us as an email through our email delivery provider, Twilio SendGrid ("SendGrid"), and is delivered to a ZDS mailbox hosted by Microsoft 365. SendGrid keeps a delivery record of the email (such as the addresses, the time sent, and whether it was delivered) for a limited period under its own policies.

2.3 How we use it. We use contact-form information only to read and reply to your enquiry. We do not sell it, and we do not add you to a marketing list because you used a contact form.

2.4 How long we keep it. We keep a contact-form enquiry until it has been handled, and then delete it within twelve (12) months. This applies to the copies in our mailboxes, including our replies that quote your message.

2.5 Preventing abuse. To stop spam and repeated automated submissions, the contact forms may use your IP address to limit how many messages can be sent from one connection in a short time, and the zamoradigitalstudios.com form uses Cloudflare Turnstile (Section 5). Where we store anything for this purpose, the IP address is stored only in hashed form, and only for the short time window the limit covers.

3. Portal Accounts

3.1 Information we collect. When you register for or use the Portal, we collect:

• your name, email address, phone number, profession, brokerage or company name, and the city or area where you mainly work;

• your password, which is handled by Firebase Authentication and stored in a form we cannot read;

• property addresses, preferred dates and times, and notes you submit with appointment requests;

• messages you send through the Portal chat;

• your notification preferences, your marketing email preference, and, if you set one, the city you choose for the dashboard weather forecast;

• which galleries you have viewed or downloaded, and the photos you mark as picks;

• the names and email addresses of staff members you or ZDS add to your account, and of people you send a gallery link to (Section 9.5);

• records of what you agreed to: the version and time of your acceptance of the Terms of Service and this Privacy Policy, and the text of the order terms or license terms as they stood when you agreed to them;

• for the mobile app, a push-notification token for your device, and the device and app information needed to deliver notifications; and

• payment information, which you submit directly to Square (Section 9.2).

3.2 How we use it. We use this information to:

• create and manage your account and let you sign in;

• schedule appointments and deliver your photo and video galleries;

• send push notifications and emails about your galleries, invoices, appointments, and messages;

• create, display, and process invoices through Square;

• respond to your messages and support requests;

• keep a record of the terms you agreed to;

• protect the Portal against abuse, including by limiting repeated attempts from one IP address or email address;

• send you marketing and promotional emails about ZDS services, with the choice to opt out (Section 3.3);

• show your name or business name (and, for a business, its logo), together with the photos and videos we made for you, as a client example on our websites (including jeanzamora.com), on social media, and in our marketing, as described in our service terms. You may ask us at any time, in writing by email or Portal message, to stop identifying you, and also to remove the work itself; we act on the request within thirty (30) days, as the "Client Name and Work Display" terms describe; and

• improve the performance and reliability of the Portal.

We do not sell your personal information.

3.3 Marketing and promotional emails. We may add your email address to our marketing list to send promotional emails about ZDS services, offers, and updates. You can set your preference at registration, where the option is pre-checked and you can uncheck it to opt out, and you can unsubscribe at any time using the link in every marketing email or by emailing contact@zamoradigitalstudios.com. Opting out of marketing email does not stop the transactional notifications about your galleries, invoices, appointments, and messages, which are part of the Portal.

4. Information We Do Not Collect

We do not collect payment card numbers, bank account numbers, or full financial data (these are handled by Square); location data beyond the addresses and city you enter; or data from your device's camera, microphone, or contacts, beyond files and information you choose to send us.

5. Cloudflare Turnstile

We use Cloudflare Turnstile, a service of Cloudflare, Inc., to check that a form is being submitted by a person rather than an automated program. It is used on the zamoradigitalstudios.com contact form and on the Portal's registration, invite-request, and forgot-password pages. To perform the check, Cloudflare processes information such as your IP address and signals from your browser and device, and our server sends Cloudflare the check result token together with your IP address to confirm it. Cloudflare handles this information under its own privacy policy (cloudflare.com/privacypolicy).

6. Embedded Videos and Maps

Some pages show content served by other companies. When that content loads, or when you press play, the company serving it receives your IP address and information about your browser and the page, and may use its own cookies or similar technologies, under its own privacy policy. We do not control what these companies collect.

• YouTube (Google). Videos on zamoradigitalstudios.com and jeanzamora.com are embedded in YouTube's privacy-enhanced mode (youtube-nocookie.com). Video preview images on zamoradigitalstudios.com are loaded from YouTube when the page loads. See policies.google.com/privacy.

• Vimeo. Where we embed a Vimeo video, the player is loaded with Vimeo's "do not track" setting turned on. See vimeo.com/privacy.

• Instagram (Meta). Where jeanzamora.com shows an Instagram reel, it is loaded from Instagram's embed service. See privacycenter.instagram.com.

• Google Maps Platform. In the Portal, appointment pages show a Google map of the property address, the address field offers Google address suggestions as you type, and the dashboard weather forecast uses Google services to find the city you choose. The addresses and place names you enter are sent to Google for these purposes. See policies.google.com/privacy.

Links to our social-media profiles (for example Instagram, Facebook, TikTok, YouTube) are ordinary links: nothing from those services loads until you click one.

7. Analytics

jeanzamora.com uses Vercel Web Analytics to count page views and see, in aggregate, which pages are visited, the referring site, and general information such as country, browser, and device type. Vercel Web Analytics does not use cookies and does not identify individual visitors. zamoradigitalstudios.com and the Portal do not use any analytics service. None of the Sites uses Google Analytics or advertising trackers.

8. Cookies and Browser Storage

We do not use advertising cookies or cookies that track you across other websites. The Sites store a small number of items in your browser's local storage or session storage, on your own device, to make them work:

• zamoradigitalstudios.com: Your theme choice (light, dark, or system). To keep the theme you chose. Kept: until you clear it.

• jeanzamora.com: Your motion-pause choice. To keep animations paused across pages if you paused them. Kept: until you clear it.

• Portal: Your theme choice. To keep the theme you chose. Kept: until you clear it.

• Portal: A list of galleries you have already opened on this device. To clear the "new" marker on galleries you've seen. Kept: until you clear it.

• Portal: Your gallery view (grid or list). To keep the view you chose. Kept: until you clear it.

• Portal: Your sign-in session (Firebase Authentication). To keep you signed in. Kept: see "Remember me" below.

Remember me. The Portal sign-in page has a "Remember me" box, ticked by default. If it is ticked, your sign-in is kept in your browser's local storage and you stay signed in on that device until you sign out. If you untick it, your sign-in is kept in session storage only, and you are signed out when you close the tab or browser. The mobile app has its own "Remember me" setting stored on your device.

The ZDS admin dashboard, which only ZDS uses, stores similar preferences for ZDS's own staff. Third-party content described in Sections 5 and 6 may use its own cookies or storage under that provider's policy. Our hosting provider, Vercel, may use strictly necessary technical measures to deliver and secure the Sites. You can clear or block browser storage in your browser settings; the Sites will still work, but your choices will not be remembered and you will need to sign in to the Portal each time.

9. Service Providers and Sharing

The Sites rely on trusted service providers. Each handles data under its own privacy policy. We do not sell personal information to anyone.

9.1 Firebase (Google). We use Firebase Authentication (account sign-in and email verification), Cloud Firestore (account data, messages, appointments, gallery information, and agreed-terms records), and Firebase Storage (your photo and video files). Your data is stored on Google's cloud infrastructure. See firebase.google.com/support/privacy.

9.2 Square. We use Square to create invoices and take payments. When you pay an invoice, your payment details are submitted directly to Square and are never stored by ZDS. See squareup.com/us/en/legal/general/privacy.

9.3 SendGrid. We use Twilio SendGrid to send Portal notification emails, account emails (invites and password resets), gallery-link emails, our marketing emails, and the contact-form emails described in Section 2. These emails contain your name or email address and the content of the notification or message. Some of our emails load fonts from Google when you open them.

9.4 Vercel. The Portal, zamoradigitalstudios.com, and jeanzamora.com are hosted on Vercel. Vercel may collect basic server logs, including IP addresses, for security and performance.

9.5 Shared gallery and download links. If you send someone a link to view or download a gallery, we store the recipient's email address (if you enter one) and email them the link. Before the recipient can open the gallery, they are asked to type their name to accept the link's terms. When they do, we record their typed name, the time, their IP address, their browser's user-agent string, and the text of the terms they accepted, and we record when the link was last opened and first downloaded. We keep these records as evidence of the terms accepted. Links you share from the Portal expire after 7 days; links ZDS creates may have a different expiry period, set when ZDS creates them.

9.6 Matterport (Hosted 3D Tours). If your order includes a Matterport 3D tour or other hosted deliverable, we use Matterport, Inc. to host and serve that interactive tour. Matterport stores the spatial scan of the property and serves it to viewers you or ZDS share it with, and may collect basic, generally anonymized tour-viewer analytics (such as view counts and engagement) for the hosted tour. Property scans are managed under the Hosted-Deliverable Addendum. See Matterport's privacy policy at matterport.com.

9.7 CubiCasa (Floor Plans). If your order includes a floor plan or a square-footage / Gross Living Area report, ZDS captures a mobile-device scan at the property and transmits it to CubiCasa for processing into the finished floor plan. The scan is a video walkthrough of the property interior and may incidentally capture personal effects, documents, occupants, or other people present at the time of capture. ZDS asks that the property be clear of persons and sensitive items before a scan; the client is responsible for the state of the property at the appointment. CubiCasa processes the scan and returns the drawn plan and any ordered measurement report. See CubiCasa's privacy policy at cubi.casa.

9.8 Expo (mobile app push notifications). The ZDS mobile app delivers push notifications through the Expo push notification service, which relays them through Apple (APNs) and Google (Firebase Cloud Messaging).

9.9 Other services. The Portal uses Upstash to count requests for rate limiting, and OpenStreetMap's Nominatim service to look up city names you search for. The providers in Sections 5 and 6 are described there.

9.10 Legal reasons. We may disclose information if required by law, or to protect the rights, safety, or property of ZDS, our clients, or others.

10. How Long We Keep Information

• Portal account information is kept while your account is active. If you ask us to delete your account, we will remove your personal information and associated data within thirty (30) days, except where we must keep it by law or for legitimate business purposes (such as resolving a billing dispute, or keeping records of the terms you agreed to). To request deletion, email contact@zamoradigitalstudios.com.

• Gallery files are removed from the Portal when the gallery's download window ends (fourteen (14) days after delivery, under our service terms). ZDS may keep its own copies of the work it created, as described in those terms.

• Contact-form enquiries are kept until handled and then deleted within twelve (12) months (Section 2.4).

• Records of accepted terms (Section 3.1 and 9.5) are kept for as long as the terms they record may matter.

11. Your Rights and Choices

You may ask us to:

• tell you what personal information we hold about you;

• correct inaccurate information (you can also edit much of it in the Portal's settings);

• delete your account and associated data, or a contact-form enquiry; and

• stop identifying you as a client in our marketing, and remove the work we made for you (Section 3.2).

You can opt out of marketing email at any time (Section 3.3), and turn off Portal email and push notifications in the Notification Preferences page or your device settings. To make any request, email contact@zamoradigitalstudios.com. We may need to confirm your identity before acting on a request.

12. Do Not Track

Some browsers can send a "Do Not Track" (DNT) signal. ZDS does not track visitors across other websites over time, and does not allow third parties to do so on our behalf, so a DNT signal does not change how the Sites behave. Third-party content described in Section 6 is governed by that provider's own policy; our Vimeo players are loaded with Vimeo's "do not track" setting turned on.

13. How We Protect Information

Data in the Portal is stored in Google's Firebase infrastructure, which encrypts data in transit (TLS) and at rest. Access to your account is protected by Firebase Authentication. Your photo and video files are stored under a path specific to your account, and other clients cannot access them. Your files, messages, and account information can be accessed only by you, by staff members linked to your account (Section 13.1), and by ZDS. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.

13.1 Staff account access. If your account has staff members added by a ZDS administrator, those staff members can access your galleries, invoices, and appointment information. ZDS takes reasonable technical measures so that staff can access only the accounts they are authorized to view. ZDS is not responsible for how your staff members use or handle the information they access through the Portal; please make sure anyone you give access understands their duty to handle your data responsibly.

14. Children's Privacy

The Portal is intended for real estate professionals, property owners, short-term-rental owners, and property and rental managers. None of the Sites is directed at children under the age of 13, and we do not knowingly collect personal information from children under 13. If you believe a child has given us personal information, please contact us and we will delete it promptly.

15. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will post the updated policy on the Sites with a new Effective Date at the top. If the changes are material, we will also tell Portal clients through a notice in the Portal or by email. You will not be asked to accept the updated policy again.

16. Contact Us

If you have questions about this Privacy Policy, or want to make a request under Section 11, email us at contact@zamoradigitalstudios.com.