Privacy Policy

Delsity is software that photo and video studios use to review their work with the people they hire and to deliver the finished result to their clients. That puts three different groups of people in this policy, and what we hold about each of them is different.

Who is responsible

Delsity is the controller for account data — the studio owners and team members who sign in — and for the newsletter list collected on this website.

For the media a studio uploads and the people who appear in it, the studio is the controller and Delsity is a processor acting on their instructions. In practice: if you are a client and you want photographs or video removed, ask your studio. We will act on their instruction, and we will help them do it.

What we collect

If you have an account

Your email address, your name, your studio's name and branding, and authentication data handled by Firebase Authentication. If you sign in with Google, we receive your email address and name from Google and no password.

If you upload work

The video and photographic files themselves, the versions of them, and the comments, drawings, voice notes and attachments left during review. We strip GPS coordinates from the derivative images we generate for display. The original file you upload is stored as you uploaded it, because handing it back unchanged is the point.

If you are a client opening a delivery

You do not have an account and we do not ask you to make one. We record that a delivery was viewed and which sections were opened, so the studio knows their work arrived. If you leave a comment we ask for a first name at that moment, and we store it with the comment. If you approve or request changes, we store that decision and the time of it.

If you subscribe to the newsletter on this site

Your email address, which of our pages you subscribed from, and the times you confirmed and, if you do, unsubscribed. We use double opt-in, so nothing is sent to an address until someone clicks the confirmation link from that address. The list is used to send occasional writing about running a studio. It is never sold, and it is not used to advertise on other platforms.

Why we are allowed to hold it

Account and media data is processed to perform the contract with the studio. Newsletter data is processed on consent, which is what the confirmation click records, and which you can withdraw at any time. A small amount of data — error reports, abuse rate limits — is processed on our legitimate interest in keeping the service working and unabused.

Who else processes it

• Google Firebase — authentication, database, file storage and server functions. This is where accounts and uploaded media live.
• Bunny CDN — video storage and streaming, so a client can watch a film on a phone without downloading it first.
• Resend — transactional email, including delivery notifications and newsletter confirmations.
• Sentry — error reporting, so we find out when something breaks.
• Plausible — website analytics for this marketing site only. It sets no cookies and does not track anyone across sites, which is why this site shows no cookie banner. It is not present in the product.

These providers act on our instructions and are not permitted to use the data for their own purposes.

Cookies

This marketing site sets no cookies at all. The product sets only what is needed to keep you signed in, and to remember that a visitor has entered the password for a protected delivery. There is no advertising or cross-site tracking anywhere in Delsity.

How long we keep it

Account and media data is kept while the account is open. Delete a project and its media and comments go with it. Close an account and we remove its data, keeping only what we are legally required to keep, such as billing records.

Newsletter records are kept until you unsubscribe. After that we keep the minimum needed to avoid mailing you again by mistake.

Where it is processed

Our Firebase resources are hosted in the United States. If you are in the UK or the EU, that means your data is transferred outside your region under the safeguards those providers offer for international transfers.

Your rights

You can ask for a copy of what we hold about you, ask us to correct it, ask us to delete it, or object to how we are using it. If you are a client rather than an account holder, the fastest route is your studio, because they control that material — but you can write to us and we will help.

Write to privacy@delsity.com. If you are in the UK or EU and you are not satisfied with our answer, you can complain to your data protection authority.

Unsubscribing

Every newsletter email has an unsubscribe link that works in one click, with nothing to sign in to. It takes effect immediately.

Changes

When this policy changes we update the date at the top. If a change materially affects what we do with your data, we will tell account holders by email rather than relying on you to notice.