Privacy policy

Lentis is the photography studio platform at lentis.photos, also referred to as Lentis in parts of the service. This policy explains how we handle personal information when you visit our website, use a studio workspace or client portal, or contact us. For privacy questions and requests, contact checotrevino@gmail.com.

Information we handle

• Account information: your name, email address, profile image when supplied, authentication identifiers, studio memberships, and permissions.
• Studio and client information: contact details, inquiries, booking and scheduling details, messages, agreements and acceptance records, photographs, gallery selections, orders, and other content that you or your studio provide.
• Transaction information: plan selections, invoice and payment status, amounts, and payment-provider references. Payment card details are collected by the payment provider; Lentis does not store full card numbers or security codes.
• Technical and support information: browser and device details, request and security records, timestamps, and information you include in support requests. Records may include network identifiers used to protect the service and investigate abuse.

Google sign-in

If you choose Google sign-in, Google shares your basic account identifier, name, email address, and profile picture with our authentication provider, Clerk. We use this information to create or identify your account, sign you in, display your profile, and secure access. Clerk stores authentication records; Lentis stores the identifiers and profile information needed to connect your account to your studio and permissions.

Google sign-in does not give us access to your Gmail, Google Drive files, contacts, or calendar. A separate optional integration, if offered and connected by you, requests its own permissions and explains its use before you authorize it. We do not sell Google user data, use it for advertising, or use it to train generalized artificial-intelligence models. Our use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements where applicable.

Optional Google Calendar connection

If you connect Google Calendar, Lentis reads busy-time intervals from the calendar you connect to help prevent scheduling conflicts. We store its calendar identifier, imported start and end times, connection status, and an encrypted refresh credential so availability can be updated in the background. This availability-only connection does not import event titles, descriptions, or attendee lists and does not change your Google events.

Calendar information is used for studio scheduling and connection support, not advertising. You can revoke the connection in your Google Account connections and contact us to remove the stored connection and imported data. If booking sync is separately enabled and authorized, Lentis also sends the booking information needed to create, update, or remove its corresponding Google events.

How we use information

We use information to provide the features you request, manage accounts and studio access, support bookings and photo delivery, maintain transaction records, send service communications, resolve support requests, and protect and improve the reliability of the service. We also use records where necessary to comply with law and resolve disputes. Where applicable law requires consent for an optional use, we request it separately.

Studios, clients, and sharing

A photographer or studio decides what client information and photographs to upload and how to use them for its photography business. We process that content to provide the studio's services through Lentis. The studio's own privacy policy and agreements govern its photography activities. Contact the studio first about its photos, bookings, or client records; contact us about your Lentis account or platform privacy.

Information is available to studio members and clients according to the access granted to them. Content you publish on a public studio site is publicly accessible. A shared gallery or download link may be usable by its recipient, so share links only with intended recipients.

We use service providers for authentication, hosting, storage, and, when enabled, payments and email delivery. These include Clerk for authentication, Fly.io and Tigris for hosting and storage, and Stripe and Resend for payment and email features where configured. Providers receive information needed for their function, subject to their applicable agreements and privacy policies. Authorized personnel may access information to provide requested support, operate and secure the service, or comply with law.

We do not sell personal information or share it for cross-context behavioral advertising. We may disclose information when legally required, to protect people or the service, or in a business transfer subject to applicable protections and notice. Any transfer of Google user data remains subject to Google's applicable restrictions.

Cookies and preferences

Authentication and essential cookies or similar storage keep you signed in, protect sessions, and remember necessary preferences. Blocking these may prevent sign-in or other features from working. On studio sites offering optional analytics, the privacy controls let you accept or decline analytics and change that choice later.

Retention and security

We retain information as needed to provide the service, maintain account and transaction records, address security issues and disputes, and meet legal obligations. Retention depends on the type of record, the studio's instructions, and applicable requirements. Account closure or revoking Google access does not immediately erase every record: some records and backups may remain for these purposes before deletion or de-identification.

We use access controls, encrypted network connections, and other safeguards appropriate to the service. No system is completely secure. Service providers may process information in the United States or other countries where they operate; where required, appropriate contractual or other safeguards apply to international transfers.

Your choices and requests

You can manage available profile settings in your account. You can also remove Lentis's Google connection through your Google Account connections. Revoking access prevents future authorized access through that connection; it does not itself delete information already held by Lentis or your studio.

To request access, correction, a copy, or deletion of your personal information or account, email checotrevino@gmail.com. We may verify your identity and coordinate with your studio before acting. Depending on your location, you may also have rights to restrict or object to processing, withdraw consent, or complain to a privacy authority. We handle requests as required by applicable law; legal obligations and the rights of others may limit what can be deleted or disclosed.

Children and changes to this policy

Lentis studio accounts are intended for adults operating photography businesses. The service is not directed to children under 13. Studios are responsible for appropriate permission when uploading photographs or information about children. If you believe a child has provided information to us without appropriate permission, contact us so we can investigate.

We may update this policy as the service changes. We will post the current version here with its effective date and provide additional notice or request consent when required for material changes.