Privacy Policy

1. The data we collect

We collect only what we need to run the service:

• Account details: your full name, email address and password. Your password is stored by our authentication provider in a one-way encrypted form, and we never see it in plain text.
• Google sign-in: if you choose “Continue with Google”, Google shares your name, email address, profile picture and Google account ID with us. We do not ask for access to your Gmail, Drive, Contacts, Calendar or any other data in your Google account.
• Business data you add: your studio name, logo and settings, your packages and extra services, and the clients, bookings, contracts, invoices, payments, expenses and files you record in Lensaati.
• Contract signing details: when a client signs a contract online, we record the signer’s name, the time of signing, the IP address and the browser information, so the signed copy carries evidence of how it was signed.
• Technical data: cookies that keep you signed in and remember your language, and server logs (IP address, browser type and request times) kept by our hosting providers for security and troubleshooting.

We do not use advertising cookies or third-party analytics trackers.

2. Your clients’ data

When you add your clients to Lensaati, or when they book through your public booking page or sign a contract you send them, we process their details on your behalf and only to provide the service to you. You decide what you collect about your clients and why, so you are responsible for having the right to collect it and for telling your clients how you use it. We never contact your clients for our own purposes.

3. How we use data

• to create your account, sign you in and keep your session secure;
• to provide the features you use, such as bookings, contracts, invoices and team access;
• to send service emails, such as verification codes, password-reset codes and team invites;
• to protect the service, prevent abuse and investigate problems;
• to answer your messages when you contact us.

We do not sell personal data, and we do not use it for advertising.

4. Google user data

Information we receive from Google APIs is used only to create your Lensaati account and sign you in. We do not sell it, use it for advertising, or share it with anyone other than the service providers listed below that are needed to run Lensaati. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

5. Who processes data for us

We use a small number of service providers, each only for the job described:

• Supabase: database, authentication and file storage. Your data is stored on Supabase servers in Mumbai, India.
• Vercel: hosting and delivery of the Lensaati website and app.
• Google: sign-in with Google, and Gmail for sending our service emails.

Because these providers operate internationally, your data may be processed outside your country. We may also disclose data when the law requires it, or to protect the rights and safety of our users or of the service. If Lensaati is ever transferred to a new owner, your data would move with it under the same protections, and we would tell you first.

6. Security

Data travels over encrypted connections (HTTPS). Each studio’s data is kept apart from every other studio’s at the database level, private files such as payment receipts are served only through short-lived links, and access inside a studio follows the roles its owner assigns. No system is perfectly secure, so please use a strong password and do not share it.

7. How long we keep data

We keep your data while your account is active. If you ask us to delete your account, we remove it and its business data from our active systems within 30 days, except for records the law requires us to keep.

8. Your choices and rights

You can:

• ask for a copy of the personal data we hold about you;
• ask us to correct details that are wrong or out of date;
• ask us to delete your account and its data;
• stop Google sign-in at any time by removing Lensaati from the connected apps in your Google account.

To make a request, email lensaatiapp@gmail.com from the address on your account. Depending on where you live, data protection law may give you further rights, and you can also contact the data protection authority in your country.

9. Children

Lensaati is a business tool for adults. It is not intended for anyone under 18, and we do not knowingly collect data from children.

10. Changes to this policy

If we change this policy, we will update the date at the top of this page. If a change is significant, we will also tell account owners by email before it takes effect.

11. Contact us

Questions or requests about privacy: lensaatiapp@gmail.com.