Privacy Policy

Last updated: March 20, 2026

1. Introduction

Obsidian Clad Labs LLC ("we," "our," or "us") operates ShutterShield ("the Service"). This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our Service. We are committed to protecting your privacy and being transparent about our data practices.

2. Information We Collect

2.1 Account Information

When you create an account, we collect your email address, username, and password (stored securely using industry-standard hashing).

2.2 Uploaded Photos

When you upload photos for editing, we store the original files and processed versions in your account. Photos are processed on GPU servers and are deleted from processing memory after completion. Stored photos remain in your account until you delete them.

2.3 Gallery Data

When you create client galleries, we store the gallery configuration, included photos, and access settings. Gallery visitor activity (views, downloads) is tracked anonymously to provide you with gallery analytics.

2.4 Usage Data

We collect anonymized usage data including feature usage, processing counts, and performance metrics to improve our Service. This data cannot be used to identify individual users.

3. How We Use Your Information

  • To provide and maintain our photo editing and gallery Service
  • To process and store your photos securely
  • To manage your account and subscription
  • To process payments via our payment processor (Stripe)
  • To send you notifications you have opted into (processing complete, gallery views, etc.)
  • To improve our Service based on anonymized, aggregated usage data
  • To comply with legal obligations

4. What We Never Do

  • We never sell your data to anyone. Period.
  • We never train AI models on your photos.
  • We never share your photos with third parties without your explicit permission.
  • We never use tracking cookies for advertising.
  • We never sell your email address to marketers.

5. Third-Party Services

We use the following third-party services to operate ShutterShield:

  • Stripe: Payment processing. Stripe handles your payment information directly; we never store your credit card details.
  • Resend: Transactional email delivery (account confirmations, processing notifications).
  • Modal: GPU processing servers for photo editing. Photos are processed in memory and deleted from processing servers after completion.
  • Vercel: Frontend hosting for the ShutterShield website.
  • Railway: Backend API hosting and database storage.

6. Photo Storage and Access

Photos are stored securely and are only accessible by you and anyone you explicitly share them with via gallery links. Gallery links can be password-protected for additional security. You can delete any photo at any time. When you delete your account, all photos and gallery data are permanently removed.

7. Data Security

We implement industry-standard security measures including encryption in transit (TLS), secure password hashing (bcrypt), and access controls on all storage systems. However, no method of electronic storage is 100% secure.

8. Your Rights

Depending on your jurisdiction, you may have the following rights:

  • Access: Request a copy of your personal data and photos
  • Correction: Update or correct inaccurate data
  • Deletion: Delete your account to remove all data including photos
  • Portability: Export your photos and data at any time
  • Opt-out: Unsubscribe from marketing communications at any time

To exercise these rights, contact us at support@shuttershield.app.

9. CCPA Rights (California Residents)

California residents have additional rights under the CCPA, including the right to know what personal information is collected, the right to delete, and the right to opt-out of the sale of personal information. As stated above, we do not sell personal information.

10. GDPR Rights (EU/EEA Residents)

If you are in the EU/EEA, we process your data based on: (a) your consent, (b) performance of our contract with you, (c) our legitimate interests, or (d) compliance with legal obligations. You have the right to withdraw consent, lodge a complaint with a supervisory authority, and all rights listed in Section 8.

11. Cookies

We use essential cookies for authentication and session management only. We do not use tracking cookies for advertising or third-party analytics. No cookie consent banner is needed because we only use strictly necessary cookies.

12. Children's Privacy

ShutterShield is designed for professional photographers and is not intended for children under 18. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, please contact us.

13. Data Retention

We retain your account data and photos for as long as your account is active. If you delete your account, all personal data and photos are permanently deleted within 30 days. Anonymized, aggregated usage statistics may be retained indefinitely.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or in-app notification. Continued use of the Service after changes constitutes acceptance of the updated policy.

15. Contact Us

If you have questions about this Privacy Policy or our data practices:

Obsidian Clad Labs LLC

Email: support@shuttershield.app

Tennessee, USA