Privacy Policy

1. Introduction

graindevue.com ("Platform," "Service," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our professional photography platform as a client.

By using our Platform, you consent to the data practices described in this Privacy Policy.

2. Information We Collect

2.1 Personal Information

Account Information:

• Name, email address, and phone number
• Profile information (location, preferences)
• Account credentials and authentication data

Booking Information:

• Booking preferences and requirements
• Event details and location information
• Communication preferences and history
• Payment and billing information

2.2 Booking and Transaction Information

Booking Details:

• Package selections and specifications
• Event dates, times, and locations
• Contract terms and agreements
• Communication records and messages
• Progress updates and delivery status

Payment Information:

• Payment method details (processed securely through Stripe)
• Transaction amounts and currency
• Deposit and balance payment records
• Refund records

2.3 Communication Data

Messages and Notifications:

• In-app messages with photographers
• System notifications and updates
• Email communications
• SMS notifications (if enabled)
• Push notifications (if enabled)

2.4 Technical Information

Usage Data:

• Platform access logs and analytics
• Feature usage and interaction patterns
• Device information and browser data
• IP addresses and location data
• Performance and error logs

Cookies and Tracking:

• Session cookies for authentication
• Analytics cookies for service improvement
• Preference cookies for user experience
• Security cookies for fraud prevention

3. How We Use Your Information

3.1 Platform Operations

Service Provision:

• Creating and managing your account
• Facilitating bookings and contracts with photographers
• Processing payments (deposit and balance)
• Enabling communication with photographers
• Providing customer support

Platform Features:

• Displaying photographer profiles and portfolios
• Enabling search and filtering functionality
• Tracking project progress and delivery
• Managing gallery access and downloads

3.2 Communication

User Communications:

• Sending booking confirmations and updates
• Delivering contract notifications
• Providing payment and delivery status updates
• Sending system announcements
• Responding to support requests

Marketing Communications:

• Platform updates and new features (with consent)
• Special offers and promotions (with consent)
• Newsletter and educational content (with consent)

3.3 Security and Compliance

Security Measures:

• Preventing fraud and abuse
• Monitoring for suspicious activity
• Protecting against unauthorized access
• Maintaining platform integrity

Legal Compliance:

• Meeting regulatory requirements (GDPR, French data protection laws)
• Responding to legal requests
• Maintaining business records
• Ensuring tax compliance

4. Information Sharing and Disclosure

4.1 Sharing with Photographers

Booking Information:

• Your contact information is shared with photographers you book
• Booking details and requirements are shared for service delivery
• Communication history is accessible to both parties
• Contract information is accessible to signatories

4.2 Service Providers

Payment Processing:

• Stripe for payment processing
• Banking partners for financial transactions

Platform Services:

• Cloud hosting and infrastructure providers (Convex, Cloudflare)
• Email and communication services
• Analytics and monitoring tools

4.3 Legal Requirements

Law Enforcement:

• Responding to valid legal requests
• Complying with court orders
• Reporting suspected illegal activity

Regulatory Compliance:

• Tax reporting and compliance
• French and EU data protection law compliance

5. Data Security

5.1 Security Measures

Technical Safeguards:

• Encryption of data in transit and at rest
• Secure authentication and access controls
• Regular security audits
• Backup and disaster recovery systems

Operational Safeguards:

• Access controls and role-based permissions
• Incident response and breach notification procedures
• Regular security reviews and updates

5.2 Data Retention

Account Data:

• Active account data is retained while account is active
• Inactive accounts are archived after 2 years
• Account deletion requests are processed within 30 days
• Some data may be retained for legal compliance

Transaction Data:

• Payment records are retained for 7 years (tax compliance)
• Booking records are retained for 5 years
• Communication logs are retained for 3 years

6. Your Rights and Choices

6.1 Access and Control

Account Management:

• View and update your profile information
• Manage communication preferences
• Control privacy settings
• Download your data (data portability)
• Request account deletion

Communication Preferences:

• Opt out of marketing communications
• Choose notification delivery methods
• Manage email and SMS preferences

6.2 Data Rights (GDPR)

As a user in France or the EU, you have the following rights:

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to data portability
• Right to object to processing
• Right to restrict processing

To exercise these rights, contact us at tony@graindevue.com.

6.3 Opt-Out Options

Marketing Communications:

• Unsubscribe from marketing emails
• Opt out of SMS marketing messages
• Disable push notifications

Data Collection:

• Disable analytics cookies
• Request data deletion
• Limit data sharing

7. International Data Transfers

7.1 Data Processing

• Our platform operates primarily in France and the EU
• Data may be processed by service providers in other countries
• We ensure adequate data protection measures for any transfers
• Compliance with GDPR requirements for international transfers

7.2 Transfer Safeguards

• Standard contractual clauses for transfers outside the EU
• Adequacy decisions where applicable

8. Children's Privacy

8.1 Age Restrictions

• Our Platform is not intended for children under 18
• We do not knowingly collect personal information from children
• Accounts must be created by individuals 18 years or older

9. Third-Party Services

9.1 Integrated Services

Payment Processing:

• Stripe for secure payment processing

Platform Infrastructure:

• Convex for real-time database services
• Cloudflare for content delivery and security

9.2 External Links

• Our Platform may contain links to external sites
• We are not responsible for third-party privacy practices
• Users should review third-party privacy policies

10. Changes to This Privacy Policy

10.1 Policy Updates

• We will notify users of significant changes
• Updates will be posted on our Platform
• Email notifications for major changes
• Continued use constitutes acceptance

10.2 Review Schedule

• Annual review of privacy practices
• Updates based on legal requirements
• Changes based on user feedback

11. Contact Information

11.1 Privacy Inquiries

Data Protection Contact:

• Email: tony@graindevue.com
• Website: https://graindevue.com

11.2 Regulatory Authorities

France:

• CNIL (Commission Nationale de l'Informatique et des Libertés)
• Website: https://www.cnil.fr

European Union:

• Contact your local data protection authority
• European Data Protection Board (EDPB)

12. Legal Basis for Processing (EU Users)

12.1 Processing Grounds

Contract Performance:

• Providing Platform services
• Processing bookings and payments
• Managing your account
• Facilitating communication with photographers

Legitimate Interests:

• Platform security and fraud prevention
• Service improvement and analytics

Consent:

• Marketing communications
• Optional features and services

Legal Obligations:

• Tax and financial reporting
• Regulatory compliance

13. Data Breach Response

13.1 Notification Requirements

User Notification:

• Notification within 72 hours of becoming aware of a breach (GDPR requirement)
• Clear description of the incident
• Potential impact on your data
• Recommended protective measures

Regulatory Notification:

• CNIL notification as required by French law
• Cooperation with regulatory authorities

14. Cookies and Tracking Technologies

14.1 Cookie Types

Essential Cookies:

• Authentication and session management
• Security and fraud prevention
• Platform functionality

Analytics Cookies:

• Usage statistics and trends
• Performance monitoring
• User experience improvement

14.2 Cookie Management

User Controls:

• Browser cookie settings
• Platform privacy preferences
• Cookie consent management

By using graindevue.com, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your information as described herein.