Photobook

Privacy Policy

Effective date: April 20, 2026

Photobook ("Photobook", "we", "us") is a product of Fictive Kin LLC. This Privacy Policy explains what information we collect, how we use it, and the choices you have. It applies to the Photobook application at app.photobookit.com, the embeddable inquiry widget that photographers place on their own websites, and the email and SMS messages we send on behalf of photographers.

Who this policy covers

We interact with two groups of people, and we treat their information differently:

  • Photographers are professional event photographers who create a Photobook account to receive inquiries from potential clients.
  • Clientsare individuals who submit an inquiry to a photographer through the Photobook widget embedded on that photographer's website.

Information we collect

From photographers

  • Name, company name, primary email address, and mobile phone number provided at signup.
  • Additional contact email addresses and phone numbers the photographer adds for notifications.
  • Account credentials (password is stored as a one-way bcrypt hash; we never store plain passwords).
  • Widget configuration settings and the custom auto-response and Yes/No reply templates they author.
  • Inquiry activity (inquiries received, replies sent, timestamps).

From clients

  • Name and email address (required to submit an inquiry).
  • Phone number (optional; only collected if the client chooses to provide it).
  • SMS opt-in preference (a separate, un-checked-by-default checkbox labeled "I would like to receive text messages to this number"). SMS is only sent to clients who actively check this box and provide a phone number.
  • Requested event date or date range.
  • The free-text message the client writes in the inquiry form.
  • Any subsequent messages the client sends in reply to the photographer via email or SMS.

Automatically collected

  • Server logs (IP address, user agent, timestamps, request paths) retained for operational purposes.
  • Delivery and engagement metadata from our email and SMS providers (delivered, failed, opened, etc.).

We do not use advertising cookies or third-party analytics trackers.

How we use information

  • To deliver the core product: relaying inquiries, routing replies, and sending templated responses between clients and photographers.
  • To notify photographers of new inquiries and client replies through the channels they have checked "Notify" on.
  • To authenticate photographers and secure their accounts.
  • To operate, maintain, debug, and improve the service.
  • To comply with legal obligations and enforce our Terms of Service.

We do not sell personal information, and we do not share it with third parties for their marketing purposes. No information collected through SMS opt-in is shared with third parties or affiliates for marketing or promotional purposes.

SMS program specifics

Photographers consent to receive operational SMS notifications (new inquiries, client replies, reply-parse errors) as part of creating a Photobook account and can manage or revoke that consent at any time by unchecking "Notify" next to a phone number in their dashboard, by removing the number, or by replying STOP to any message.

Clients consent on a per-inquiry basis by checking the SMS opt-in box when submitting an inquiry. Clients receive only messages related to their specific inquiry (auto-response, photographer reply, Yes/No confirmation). Clients can opt out by replying STOP to any message. Message frequency is transactional and depends on the inquiry thread. Message and data rates may apply. Reply HELP for help.

Service providers (sub-processors)

We share the minimum information necessary with the following providers to operate the service. Each is contractually obligated to protect that information.

  • Fly.io — application hosting and managed PostgreSQL database (US region).
  • Postmark (Active Campaign, Inc.) — outbound and inbound email delivery and parsing.
  • Twilio, Inc. — outbound and inbound SMS and WhatsApp delivery.

Data retention

  • Photographer accounts and their associated inquiry threads are retained while the account is active.
  • If a photographer closes their account, we delete their personal data and associated inquiry content within 30 days, except as required for legal or tax obligations.
  • Clients may request deletion of their inquiry data by contacting us (see below).
  • Server logs are retained for up to 30 days.

Security

We use industry-standard measures including TLS in transit, encryption at rest (provider-managed), bcrypt password hashing, signed webhook verification, and HTTP basic auth on inbound webhooks. No system is perfectly secure; please use a strong, unique password for your account.

Your choices and rights

  • Access / correct / delete: photographers can update most data in-app; for other requests email systems+photobook@fictivekin.com.
  • Opt out of SMS: reply STOP to any message, or uncheck "Notify" / remove the number in-app (photographers).
  • Opt out of email: reply asking to unsubscribe, or contact the photographer who received your inquiry directly.
  • Residents of California, the EEA, the UK, and other jurisdictions with equivalent privacy laws may have additional rights (access, portability, deletion, objection). Contact us to exercise them.

Children

Photobook is not directed to children under 13 and we do not knowingly collect information from them. If you believe we have, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. Material changes will be announced in-app or by email to active photographers. The "Effective date" above will always reflect the current version.

Contact

Fictive Kin LLC
Attn: Photobook Privacy
systems+photobook@fictivekin.com