Privacy Policy
Last updated November 5, 2026
This Privacy Policy describes how Lensentra LLC collects, uses, discloses, retains and protects personal information. It applies to photographers who use Lensentra, individuals who apply for the beta, visitors to our websites, and the clients of photographers who use Lensentra.
1. Who We Are and Our Role
Lensentra is operated by Lensentra LLC, a Texas limited liability company (“Lensentra,” “we,” “us” or “our”). Please direct questions and requests to [email protected].
Our role depends on the information concerned:
- Controller. For account, application, website and security information, Lensentra determines the purposes and means of processing, and this Privacy Policy applies directly.
- Service provider or processor. For information about a photographer’s clients (“Client Data”), whether added by the photographer or submitted by the client through a booking form, questionnaire, contract, client portal or gallery, the photographer determines what is collected and how it is used, and Lensentra processes it on the photographer’s behalf and at the photographer’s direction. The photographer’s own privacy notice may also apply. Lensentra acts as controller only of the limited information about clients that it processes for its own security, abuse prevention and legal compliance purposes. See Section 8.
2. Information We Collect
Beta Applications
Your name, email address and studio name, together with any website or Instagram handle, type of photography, typical monthly sessions and intended first use that you provide.
Account Information
- Your name, email address and password. Passwords are never stored in readable form. Our authentication provider retains only a salted, one-way bcrypt hash, and neither we nor our staff can view your password.
- Studio and business details, such as your business name, address, telephone number, time zone, logo, and the payment instructions you elect to display to clients.
- Your plan and account status, and your communications with us.
Content You Add to Lensentra
Client records, sessions, appointments, questionnaires, proposals, contracts and signatures, invoices, payment records, expenses, mileage, emails and replies, photographs, RAW files, galleries and website content. Client records may include names, contact details, important dates, notes and preferences recorded by the photographer. Clients may also submit information directly through booking forms, questionnaires, contracts, client portals and galleries.
Information Collected Automatically
- Security log. For each sign-in session and each uploaded photograph, we record the network (IP) address, an approximate location derived from that address, the device and browser, and the time. We use this information to protect accounts and to investigate and prevent abuse.
- Contract signing records. When a contract is signed, we record the time, device and network address in order to help authenticate the signature.
- Gallery activity. When a client uses a gallery, we record activity such as views, favorites, selections and downloads, a random device identifier, and a keyed hash of the network address, which we use to limit repeated incorrect PIN attempts.
- Website forms. When a person submits a booking, contact or report form on a website hosted by Lensentra, we store a hash of the network address to limit abuse.
- Email delivery. Whether an email was delivered, bounced or reported as spam.
- Site statistics. We use Cloudflare Web Analytics to obtain aggregate page statistics.
- Browser storage. Lensentra uses your browser’s local storage to maintain your session and remember preferences such as your theme. This storage is necessary for sign-in. We do not use advertising cookies, and because we do not track individuals across other websites, we do not respond differently to browser “Do Not Track” signals. We do not knowingly permit third parties to collect personal information about your online activities over time and across different websites through Lensentra. Providers listed in Section 4, such as Google and Cloudflare, may receive technical information, including network addresses, when their services load.
Photo Metadata
Lensentra is designed to remove location data, camera and lens serial numbers, and camera owner names from JPEG, PNG and WebP gallery photographs before they are uploaded. RAW files may retain their original metadata.
3. How We Use Information
- To provide, operate and maintain Lensentra and to carry out your requests, including booking sessions, sending emails, delivering galleries and publishing your website.
- To review beta applications and administer the beta, including sending communications about your seat.
- To secure accounts and the service, and to detect, prevent, investigate and report fraud, abuse and violations of our terms.
- To diagnose problems, provide support and improve Lensentra.
- To send service communications about your account. Any product news includes a means of opting out.
- To comply with legal obligations, enforce our agreements, and protect the rights, property and safety of Lensentra, our users and others.
We do not sell personal information, and we do not share it for cross-context behavioral or targeted advertising. We do not use your photographs or your clients’ information for advertising.
Lensentra does not use facial recognition and does not extract biometric identifiers from photographs.
4. How We Disclose Information
We engage the following providers to operate Lensentra. Each handles information in accordance with its own terms and privacy commitments.
| Provider | Service |
|---|---|
| Supabase | Database hosting and authentication |
| Cloudflare | Website hosting, photograph and file storage, security, site statistics, and receipt of email replies |
| Resend | Email delivery |
| Stripe | Card payments, where a photographer connects a Stripe account. Stripe processes card details under its own terms; we do not receive or store full card numbers. |
| U.S. Census Bureau and OpenStreetMap | Geocoding of the studio location you enter |
| National Weather Service | Weather forecasts for your studio location |
| Google Fonts | Web fonts on certain public pages. Your browser requests these fonts directly from Google, which receives your network address. |
We may also disclose information:
- At your direction, such as when you send an email to a client or publish your website.
- Within your studio, to staff you add to your account.
- For legal and safety reasons, where we believe in good faith that disclosure is required by law or legal process, or is necessary to protect the rights, property or safety of any person or of the service. This includes reporting apparent child sexual abuse material to the National Center for Missing & Exploited Children (NCMEC) and to law enforcement.
- In a business transaction, such as a merger, financing, reorganization or sale of assets, subject to this Privacy Policy.
Website reports may be reviewed by our staff and by automated tools, which may include artificial intelligence services.
5. Staff Access
Access to account contents is limited to a small number of authorized Lensentra personnel and is permitted only to provide support, protect the service or investigate a report. Staff visits to a studio are logged.
6. Data Retention
- Studio information: until you delete it or your account is closed and deleted.
- Deleted items: deleted galleries and clients remain in Recently Deleted for 30 days, and a proofing gallery removed when its final gallery is delivered remains there for 7 days. They are then permanently deleted. Invoices, income and other financial records may remain in your account after a related client or session is deleted. Where a client record cannot be fully removed for that reason, its name and contact details are erased.
- Closed accounts: if you close your account, you have 30 days to download your data or reopen the account, after which it is permanently deleted. Account deletion does not pass through Recently Deleted and cannot be undone. During the beta, our staff perform this final step manually, so deletion may occur some time after the 30-day period ends.
- Beta applications: for the duration of the beta, unless you ask us to remove yours sooner.
- Security log: 12 months. If an account is taken offline for review or terminated, a hold preserves its log for one year, even if the account is deleted, so that it remains available as evidence.
- Accounts under review: no data is deleted while an account is offline for review.
- Billing and tax records: once paid plans begin, Lensentra LLC will retain its own billing and tax records for as long as the law requires, including after an account is deleted.
Residual copies may persist in routine backups for a limited period until they are overwritten. We may also retain information where required by law or necessary to establish, exercise or defend legal claims. Before trials and paid plans begin, we will update this section to describe the retention periods that apply to them, including any longer retention of business records.
7. Your Choices and Rights
- Access and portability: Settings → Your data allows you to download your records, website text and galleries.
- Correction: you may update most details in Settings, or contact us.
- Deletion: you may delete individual items, close your account from Account → Close account, or contact us.
- Marketing: you may use the unsubscribe link in any marketing email.
Depending on where you reside, applicable law, including the Texas Data Privacy and Security Act and comparable state laws, may give you additional rights, such as the right to confirm whether we process your personal information, obtain a copy, correct or delete it, opt out of certain processing, and appeal our decision on a request. To exercise these rights, email [email protected]. We will respond within 45 days, or within any further period the law permits, and will not discriminate against you for exercising your rights. We may need to verify your identity before acting on a request. To appeal a decision, reply to our response within 60 days and state that you are appealing. We will give you our written decision and reasons within 60 days of receiving your appeal. If we deny your appeal, we will also tell you how to contact your state attorney general where applicable law so provides.
8. Clients of Photographers
Your photographer controls the information held about you in Lensentra, including information your photographer added and information you submitted through a booking form, questionnaire, contract, client portal or gallery. To access, correct or delete that information, please contact your photographer first. If you cannot reach your photographer, email us and we will assist where we are able.
Lensentra separately processes limited information for its own purposes, such as records that protect against abuse and help authenticate signatures. You may direct requests about that information to us.
Galleries are stored privately and are accessible only by their link and any PIN the photographer sets. Anyone holding the link and PIN can open the gallery, so please keep them confidential. Photographers can see gallery activity, including favorites, selections, downloads and any notes or names you enter.
Marketing emails from a photographer are sent only to clients who have opted in, and each includes an unsubscribe link.
9. Security
We maintain administrative and technical safeguards designed to protect personal information. Data is encrypted in transit using TLS. Our database and file storage providers encrypt stored data at rest using AES-256. Each studio’s data is logically separated by database access rules, photographs are stored privately, and administrator access requires two-step authentication.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a security incident affects your personal information, we will notify you as required by applicable law. Please use a strong, unique password.
10. Children
You must be at least 18 years old to hold a Lensentra account. Lensentra is intended for adults operating photography businesses and is not directed to children under 13, and we do not knowingly collect personal information directly from them. Photographers may store photographs of, or information about, children as part of their work and are responsible for obtaining the consent of a parent or guardian. If you believe a child’s information has reached us in error, please email us.
11. Where Information Is Processed
Lensentra is operated from the United States. Our providers may process information in the United States and other countries. If you use Lensentra from outside the United States, your information may be transferred to and processed in countries whose data protection laws differ from those of your jurisdiction.
12. Changes to This Privacy Policy
We will post any update on this page and revise the date above. If a change is material, we will notify account holders by email or in the app before it takes effect.
13. Contact Us
Lensentra LLC
5900 Balcones Dr Ste 100
Austin, TX 78731-4298
[email protected]