Legal

Privacy Policy

Last updated: August 2026

SansPost LLC (“SansPost,” “we,” “us”) operates a platform that helps photography studios capture, process, and deliver event photography. This policy explains how we handle data. It is provided for transparency and will be expanded with our full data processing terms as we onboard customers.

Information we process

We process account information for the studios that use our platform (their administrators and photographers), and, on their behalf, the photographs and related data they capture at events. Studios are the controllers of the event data they collect; SansPost acts as their processor.

How we protect it

Each studio’s data is isolated from other studios. Images and customer data are encrypted at rest using AES-256, with a separate data-encryption key for each event, isolated per studio. The master key that protects those keys is managed by the platform. Because each event has its own key, deletion is enforced cryptographically — destroying an event’s key renders its data permanently unrecoverable, not merely flagged as deleted. Payment processing is handled by Stripe; SansPost does not store payment card numbers. We apply data-minimization and retention practices and support deletion requests.

Location data

Cameras and phones can embed GPS coordinates inside a photograph. We remove them, in two independent places. Our capture app strips GPS from JPEG images on the device, before anything is uploaded. Separately, every image we publish or sell — gallery photos, thumbnails, and downloads — is rebuilt with a fixed list of camera fields (make, model, lens, exposure, capture time) that does not include location, so a delivered photograph carries no coordinates even if the original did.

One exception, stated plainly: when a photographer uploads a camera RAW original (for example a Nikon NEF or Canon CR3), we store that original unmodified, because rewriting a RAW file risks corrupting an image that cannot be recaptured. RAW originals are never published, are visible only to the studio that captured them, and are deleted on a shorter schedule than the gallery itself.

Children’s data

Our platform is frequently used to photograph minors at youth-sports events. Galleries involving minors are private by default, and studios control consent capture, face-recognition features, and retention. We support the removal of a minor’s photographs on request from an authorized parent or guardian via the studio.

Subprocessors

We rely on a small set of infrastructure providers, including Cloudflare (hosting, storage, and network), Stripe (payments), and Resend (transactional email).

Contact

Questions about this policy: privacy@sanspost.com.