Draft for review: have a lawyer check this page before ShotSync takes paying customers.
Studios trust us with their business and their clients’ wedding photos. This is how we look after them.
Each studio is sealed off
Every record belongs to one studio, and the database itself refuses to show it to anyone outside that studio (row-level security). Within a studio, roles are enforced the same way: freelancers see only their own shoots, clients see only their own events, and only owners see billing. Automated tests check every role against every table.
No passwords to steal
Sign-in uses one-time codes sent by email. Studios are invite-only: nobody can join your studio unless you invite them.
Photos
Photos are stored privately and served only to people allowed to see them. Proofs can be watermarked. Uploads are checked with checksums so files arrive intact.
Proposal links and signatures
Proposal links use long random tokens, stored only as a hash and an encrypted copy. Signed contracts record the signer’s name, time, IP address and a SHA-256 fingerprint of the exact document.
Everything is logged
Changes and overrides are written to an audit log that cannot be edited. ShotSync staff cannot open your studio’s content; support actions are logged with a reason.
Your data is yours
Export your studio’s data any time from Settings. Found a security issue? Email security@shotsync.app.