Privacy Policy

1. Information We Collect

NoirLens is committed to protecting your privacy. We collect only the information necessary to provide our photography marketplace services, process transactions, and improve your experience. This policy describes what information we collect, how we use it, and the choices you have regarding your data.

We collect information in the following categories: account information you provide directly (name, email address, password), payment information processed through our third-party payment providers (Stripe and PayPal), usage data collected automatically as you interact with the Platform (pages viewed, search queries, items added to cart), and device information collected through cookies and similar technologies.

2. How We Use Your Information

We use the information we collect to provide, maintain, and improve the NoirLens Platform. Specifically, we use your account information to authenticate your identity and personalize your experience, your transaction data to process orders and deliver purchased content, your usage data to understand how users interact with the Platform and improve our services, and your contact information to send order confirmations, download links, and important service announcements.

For photographers, we also use your data to provide analytics about your portfolio performance, process payments for your sales, and communicate important updates about the Platform that may affect your account or earnings. For customers, we use your order history to provide customer support, process refund requests, and recommend content that may interest you.

3. Cookies & Tracking

NoirLens uses cookies and similar tracking technologies to provide essential functionality and improve your browsing experience. Essential cookies are required for the Platform to function properly and include session authentication tokens, shopping cart data, and security features such as CSRF protection. These cookies cannot be disabled without affecting core functionality.

We also use analytics cookies to understand how visitors use the Platform, which helps us improve our services. These cookies collect anonymous, aggregated data about page views, navigation patterns, and user interactions. You may choose to accept only essential cookies or all cookies through our cookie consent banner. Your preference is stored locally and will be remembered for future visits.

4. Data Sharing & Third Parties

NoirLens does not sell, rent, or trade your personal information to third parties. We share data only with service providers who help us operate the Platform: Supabase (database hosting and authentication), Stripe and PayPal (payment processing), and hosting providers for content delivery. Each of these partners has their own privacy policies and is contractually obligated to protect your data.

We may also disclose your information if required by law, in response to a valid legal request, or to protect the rights, property, or safety of NoirLens, our users, or the public. In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, and you will be notified of any change in ownership.

5. Data Security

We implement industry-standard security measures to protect your personal information, including encryption in transit (TLS/SSL), secure authentication via Supabase Auth, rate limiting to prevent abuse, input validation and sanitization, and secure download tokens with AES-256-CBC encryption and 24-hour expiry. Payment information is processed directly by Stripe and PayPal and is never stored on our servers.

While we take reasonable measures to protect your data, no system is completely secure. We encourage you to use strong, unique passwords for your account, enable two-factor authentication where available, and promptly report any suspected unauthorized access to your account.

6. Your Rights & Choices

You have the right to access, correct, or delete your personal information at any time. You may update your profile information through the Platform settings. To request deletion of your account and associated data, please contact us through the Platform. Please note that some data may be retained for legal or legitimate business purposes, such as transaction records required for tax and accounting purposes.

Depending on your jurisdiction, you may have additional rights under data protection laws, including the right to data portability, the right to object to processing, and the right to withdraw consent. We will respond to all such requests within 30 days and will not discriminate against users who exercise their privacy rights.

7. Data Retention

We retain your account information for as long as your account is active or as needed to provide you services. Transaction records are retained for a minimum of seven years for tax and legal compliance. Usage analytics data is retained in anonymized, aggregated form for up to two years to support Platform improvements. Session data, including shopping cart contents and temporary tokens, are automatically purged after 30 days of inactivity.

8. Children's Privacy

NoirLens is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal data from a child under 18, we will take steps to delete that information promptly. If you believe that a child has provided us with personal information, please contact us immediately.

9. International Users

NoirLens is accessible worldwide. If you are accessing the Platform from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. By using the Platform, you consent to the transfer of your information to these jurisdictions, and you acknowledge that data protection laws in these jurisdictions may differ from those in your country of residence.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last updated" date at the top of this page and, for significant changes, provide a notice through the Platform or via email. We encourage you to review this policy periodically to stay informed about how we protect your information. Your continued use of the Platform after any changes constitutes your acceptance of the updated policy.

11. Contact

If you have questions about this Privacy Policy or our data practices, please contact us through the NoirLens Platform. We are committed to addressing your concerns and will respond to privacy-related inquiries within five business days. For data access or deletion requests, please include your account email and a description of the specific data you are requesting.