Privacy
This is a draft. It describes accurately what the product does today and has not yet been reviewed by counsel.
What this covers
Roommark connects real-estate agents with independent photographers. This describes what we collect from both, and from anybody who opens a gallery link we send.
Photographers are independent businesses, not employees. Their names, brands and work appear throughout the product because the work is theirs.
What we collect
From anybody with an account: your name, email address, phone number, and a profile photo if you add one. Your email address is how you sign in — we send a code rather than storing a password, so we never hold one.
From agents: the property addresses you book, the packages and add-ons you choose, and what you were charged.
From photographers: your business name, service area, the rates you set, your availability, and the compliance documents you upload — business licence, insurance, and drone credentials where you offer aerial work.
From a shoot: the photographs, their technical metadata, and a record of every alteration made to them.
From anybody booking without an account: a contact name, email and phone for the property, so the photographer can reach whoever opens the door.
Automatically: which pages you open in the product, and — for guest bookings only — a one-way hash of your IP address, kept for 24 hours to stop the same address booking hundreds of shoots. We do not store the address itself.
What we do not collect
We never see or store your card number. Payments run through Stripe, who handle the card details directly; we hold only what Stripe tells us moved and when.
We do not use advertising trackers, we do not sell personal information, and we do not share it for cross-context behavioural advertising. Under the CCPA that means there is no "sale" or "sharing" to opt out of.
Who else sees it
Your photographer sees the address, the schedule, and the contact for the property, because they are going there.
Your agent sees the photographer’s name, business and work, because they hired them.
Anybody holding a gallery link can see the photographs in that gallery. The link is unguessable and expires; treat it as you would the photographs themselves.
Our processors: Supabase (database, authentication, file storage), Vercel (the website), Stripe (payments), and our email and SMS providers. Each is bound to use the data only to provide that service.
Photographs, and who owns them
Copyright in every photograph stays with the photographer who took it. Agents receive a broad licence to use them for the listing and their own marketing.
Where a photograph has been altered, we keep the original paired with it and record what was changed. California law requires that disclosure and we do not have a path that strips it.
Closing your account
You can close your account from the app at any time. Closing erases your name, email address, phone number and profile photo, and permanently prevents sign-in. This cannot be undone.
Some records survive because the law requires it: compliance documents for three years (California Labor Code §2777), the payment ledger, agreements you signed, and the provenance of photographs already delivered. These stay attached to an account with no name on it.
Photographs already delivered to a listing stay with that listing. They were paid for and licensed, and their copyright is the photographer’s.
Your rights
If you are in California, you may ask what we hold about you, ask us to correct it, and ask us to delete it — subject to the retention above, which we are not free to waive. Exercising any of these rights never changes how you are treated.
Photographers: nothing you decline is recorded anywhere. There is no column, counter or metric that stores a declined job, by design.
Contact
Write to privacy@roommark.app.