Privacy Policy

Last updated: October 04, 2025

Brandon Holland, doing business as Photobase ("we," "us," or "our"), operates base.photos and provides a modern photo delivery and workflow platform for studios, labs, and professionals. We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you about how we collect, use, store, and protect your personal information when you use our services, as well as your privacy rights and how the law protects you.

All personal information you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.

1. Information We Collect

Personal Information We Collect

When you use our services, we may collect the following types of personal information:

• Names
• Phone numbers
• Email addresses
• Mailing addresses
• Contact preferences

Information Collected Automatically

When you access our services, we automatically collect certain information about your device and usage, including:

• IP addresses
• Browser and device characteristics
• Operating system
• Language preferences
• Device name, country, and location
• Usage data (date/time stamps, pages viewed, searches, features used)
• Log and usage data
• Device event information (system activity, error reports, hardware settings)

Payment Information

When you make payments through our platform, payment instrument numbers and security codes are collected. All payment data is handled and stored by our payment processor, Stripe. We do not directly store your complete payment card information. For details on how Stripe handles your payment information, please see Stripe's Privacy Policy.

Information We Do Not Collect

We do not collect:

• Sensitive personal information
• Information from third parties
• Any information from minors under 18 years of age

2. How We Use Your Information

We process your information only when we have a valid legal reason to do so. We use the information we collect for the following purposes:

• To facilitate account creation and authentication processes
• To manage user accounts
• To deliver and facilitate our services
• To fulfill and manage orders, payments, returns, and exchanges
• To send marketing and promotional communications
• To evaluate and improve our services, products, and marketing efforts
• To identify usage trends
• To determine the effectiveness of our marketing campaigns
• To comply with legal obligations
• To provide security and fraud prevention

3. How We Share Your Information

Third-Party Service Providers

We may share your information with the following third parties:

• Payment Processors: Stripe processes all payment transactions
• Data Analytics Services: To help us understand and improve our services

We maintain contracts with all third-party service providers to safeguard your information. These third parties cannot use your information for unauthorized purposes and cannot share your information with other organizations without proper authorization.

Business Transfers

Your information may be shared during business transfers, such as mergers, acquisitions, or asset sales.

What We Do Not Do

We explicitly do not:

• Sell personal information to third parties
• Share information for third-party marketing purposes
• Collect or process sensitive personal information

4. Analytics and Data Processing

We use PostHog, a third-party analytics platform, to help us understand how users interact with our services and to improve user experience. PostHog processes usage data on our behalf as a data processor.

PostHog has entered into a Data Processing Agreement (DPA) with us to ensure compliance with data protection regulations, including GDPR and CCPA. The DPA outlines PostHog's responsibilities as a data processor, including:

• Processing data only on our documented instructions
• Implementing appropriate technical and organizational security measures
• Assisting with data subject requests and compliance obligations
• Maintaining confidentiality and security of your data

You can review the full PostHog Data Processing Agreement at: PostHog Data Processing Agreement.

5. Data Retention

We retain your information only as long as necessary to fulfill the purposes outlined in this privacy policy, including:

• For the period you maintain an account with our service
• To comply with legal, regulatory, tax, accounting, or reporting requirements
• To prevent fraud, troubleshoot problems, and assist with investigations

When your information is no longer needed, it will be deleted or anonymized. Some information may be retained in accordance with legal requirements or legitimate business purposes.

6. Security Measures

We have implemented organizational and technical security measures designed to protect your personal information from unauthorized access, use, disclosure, alteration, or destruction.

Important: While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security. No method of electronic transmission or storage technology is 100% secure. You should only access our services within a secure environment.

7. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect data from or market to children under 18. By using our services, you represent that you are at least 18 years old or have obtained parental consent.

If we learn that we have collected personal information from a minor without proper consent, we will deactivate the account and delete the data as quickly as possible. If you believe we might have information from or about a minor, please contact us at support@base.photos.

8. Your Privacy Rights

General Rights

You have the right to:

• Review, change, or terminate your account at any time
• Withdraw consent for data processing
• Opt out of marketing communications via unsubscribe links in emails, replying "STOP" to SMS messages, or contacting our support team

California Residents' Rights

If you are a California resident, you have specific rights under California privacy laws, including:

• Right to Know: Whether your personal data is being processed
• Right to Access: Request access to your personal data
• Right to Correct: Request correction of inaccuracies in your personal data
• Right to Delete: Request deletion of your personal data
• Right to Data Portability: Obtain a copy of your personal data in a portable format
• Right to Non-Discrimination: Not be discriminated against for exercising your privacy rights
• Right to Opt Out: Opt out of targeted advertising, data sales, or profiling (where applicable)
• Right to Limit Use: Limit the use and disclosure of sensitive personal data
• California "Shine The Light" Law: Request information about our disclosure of personal information to third parties for direct marketing purposes

How to Exercise Your Rights

To exercise any of these rights, you may:

• Contact us at support@base.photos
• Submit a written request to our mailing address below
• Designate an authorized agent to make requests on your behalf

We may need to verify your identity before processing your request. This is a security measure to ensure that personal data is not disclosed to unauthorized individuals.

9. Do-Not-Track Signals

We currently do not respond to Do-Not-Track (DNT) browser signals or other mechanisms that provide consumers with the ability to exercise choice regarding the collection of personal information about their online activities over time and across third-party websites or online services. This is because no uniform technology standard for recognizing and implementing DNT signals has been finalized.

If a standard for online tracking is adopted in the future that we must follow, we will inform you about that practice in a revised version of this privacy policy.

10. Marketing Communications

You can opt out of receiving marketing communications from us at any time by:

• Clicking the unsubscribe link in marketing emails
• Replying "STOP" or "UNSUBSCRIBE" to marketing SMS messages
• Contacting us at support@base.photos

Please note that even if you opt out of marketing communications, you will still receive service-related, non-marketing communications, such as order confirmations, account notifications, and security alerts.

We do not share your mobile information with third parties for their marketing purposes.

11. Account Management

To review, change, or terminate your account, please contact us using the contact information provided below. Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases.

However, we may retain some information in our files to prevent fraud, troubleshoot problems, assist with investigations, enforce our legal terms, and comply with applicable legal requirements.

12. Updates to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. The updated version will be indicated by an updated "Last updated" date at the top of this privacy policy.

If we make material changes to this privacy policy, we may notify you either by prominently posting a notice of such changes on our website or by directly sending you a notification. We encourage you to review this privacy policy frequently to stay informed about how we are protecting your information.

13. Content Ownership and Copyright

You retain full ownership of your content. When you upload photos, images, or any other content to Photobase, you retain all ownership rights, copyright, and intellectual property rights to that content. We do not claim any ownership over your content.

By using our platform, you grant us only the limited rights necessary to:

• Store and display your content on our platform
• Deliver your content to the clients and recipients you designate
• Perform technical operations necessary to provide our services (such as backup, redundancy, and content delivery)

These rights exist solely to enable us to provide our photo delivery and workflow services to you. We will never:

• Use your content for our own marketing or promotional purposes without your explicit written consent
• Sell, license, or distribute your content to third parties
• Claim any ownership, copyright, or intellectual property rights over your content
• Modify or alter your content except as technically necessary to provide our services (such as generating thumbnails or optimized versions for delivery)

You may delete your content from our platform at any time. Upon deletion or account termination, we will remove your content from our active systems, though some content may be retained in backups for a limited period as described in our Data Retention policy above.

14. Contact Information

If you have questions or comments about this privacy policy or our privacy practices, please contact us:

• Email: support@base.photos
• Mailing Address:
  Brandon Holland
  San Francisco, CA 94132
  United States