Quick Summary
We collect only the data necessary to provide our photography studio management services.
Your data is encrypted, stored securely, and never sold to third parties.
You have full control over your data — access, export, or delete it anytime.
Focus Flow is a product of Stefan Blejeru Photography (P.IVA 15392121008), which is the data controller responsible for your personal data.
Registered Office:
Stefan Blejeru Photography
Via Casilina 1879, 00132 Roma, Italy
P.IVA: 15392121008
Contact Information:
Email: privacy@focusflowstudio.app
Website: https://focusflowstudio.app
For photographers using Focus Flow, we act as a data processor when handling their clients' data. The photographer (our user) is the data controller for their clients.
We process your data based on:
We share your data only with trusted service providers:
| Service | Purpose | Data Shared |
|---|---|---|
| Supabase | Database hosting (EU) | All app data |
| Stripe | Payment processing | Payment info, email |
| Resend | Transactional emails | Email addresses |
| Backblaze B2 | File storage (EU) | Uploaded files |
| Vercel | Hosting, analytics | Usage data |
| Google (OAuth, Calendar, Gmail) | Authentication, calendar sync, email sending | See "Google Integrations" section below |
We never sell your personal data.
Focus Flow integrates with Google services to enhance productivity for photographers. These integrations are optional and require your explicit consent via Google's OAuth consent screen.
Focus Flow Studio's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
In particular, Focus Flow Studio affirms that data obtained through Google Workspace APIs (including Gmail and Google Calendar) is used only to provide or improve user-facing features that are prominent in the Focus Flow application, and is not used for any of the following prohibited purposes:
This Limited Use disclosure applies to gmail.send, calendar.events, calendar.readonly, and userinfo.email scopes that Focus Flow Studio requests through Google OAuth. You can revoke these permissions at any time from your Google Account permissions page or from your Focus Flow settings.
We use Google Sign-In to allow you to log in with your Google account. We access only your email address and basic profile information (name, profile picture) to create and manage your Focus Flow account. We do not access any other Google account data through sign-in.
When you connect Google Calendar, Focus Flow accesses your calendar to:
We read event times and titles to show availability. We only create or modify events that you explicitly trigger through Focus Flow. We do not delete, share, or store your Google Calendar data beyond what is displayed in the app.
When you connect Gmail, Focus Flow uses the gmail.send scope exclusively to send emails from your Gmail address to your clients (booking confirmations, payment reminders, gallery access links). This ensures clients recognize your email and communications don't end up in spam.
Important: We never read, access, scan, or store your inbox, drafts, contacts, or any existing Gmail messages. We only send emails that you explicitly compose and authorize within Focus Flow.
Your data is primarily stored in the European Union (Supabase Frankfurt, Backblaze EU).
When data is transferred to the United States (e.g., Stripe, Vercel), we ensure compliance through:
| Data Type | Retention Period |
|---|---|
| Account data | Until account deletion + 30 days |
| Financial records | 7 years (legal requirement) |
| Galleries | As configured by photographer |
| Audit logs | 90 days |
| Marketing consent | Until withdrawn |
Under GDPR (Articles 15-22), you have the right to:
To exercise these rights, contact us at privacy@focusflowstudio.app or use the Privacy Center in your account settings.
Right to Lodge a Complaint: You can file a complaint with your local data protection authority. In Italy: Garante per la protezione dei dati personali.
If you are a California resident, you have the following rights:
We do not sell personal information. However, you can submit a request via our Do Not Sell page.
To exercise your CCPA rights, contact us at privacy@focusflowstudio.app.
We use cookies to provide essential functionality and, with your consent, for analytics.
For detailed information, please see our Cookie Policy.
You can manage your cookie preferences at any time using the cookie banner or settings.
We implement industry-standard security measures:
Focus Flow is not intended for users under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.
For significant changes, we will send an email notification to registered users.
For any privacy-related questions or to exercise your rights, contact us:
We aim to respond to all privacy requests within 30 days.
