Privacy Policy

1. Information We Collect

We collect the following information when you use Selkro:

• Account information: email address, name, and business details you provide during onboarding
• Content you upload: proof images and gallery data
• Usage data: pages visited, features used, and interaction logs for analytics and debugging
• Payment information: transaction records (card details are handled entirely by Razorpay and are never stored on our servers)
• Gallery access checks:when a gallery is PIN-protected, we store a one-way hash of the visitor's IP address and browser user-agent so that repeated incorrect PIN attempts can be limited. The hash is cleared once that visitor enters the correct PIN for that gallery.

2. How We Use Your Information

We use your information to:

• Provide, operate, and improve the Service
• Process payments and send transaction receipts
• Send service-related emails (account confirmation, password reset)
• Respond to support requests
• Comply with legal obligations

3. Data Storage and Security

Your data is stored on Supabase (PostgreSQL) and images are stored on Cloudflare R2. We implement industry-standard security measures including encrypted connections (TLS), access controls, and regular security reviews. No system is completely secure; we cannot guarantee absolute security.

4. Data Sharing

We do not sell your personal data. We share data only with:

• Service providers necessary to operate the Service (Supabase, Cloudflare, Razorpay, Resend) — bound by their own privacy policies
• Legal authorities when required by law or to protect our rights

Gallery content is shared with viewers only when a photographer explicitly creates and shares a gallery link.

5. Cookies

We use cookies strictly necessary for authentication (session management). We do not use third-party advertising cookies.

6. Data Retention

We retain your account data for as long as your account is active. If you close your account, we delete your personal data within 30 days, except where retention is required by law (e.g. financial records).

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Object to or restrict certain processing
• Data portability

To exercise any of these rights, contact us at support@selkro.com.

8. Children

The Service is not directed to children under 13. We do not knowingly collect personal data from children.

9. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes via email or a notice in the Service.

10. Contact

Privacy questions? Contact us at support@selkro.com.