Terms

What happens to your photographs

Deleting and recovering

• Delete a photograph and it waits in Recently deleted for 30 days. You restore it yourself, at no cost, and your client’s picks and comments come back with it.
• After 30 days it moves to cold storage, where we can still recover it for up to 6 months from the day you deleted it. That is a paid service and it is not self-serve: ask us, we quote it, and nothing is charged until you accept. Cold retrieval takes hours rather than minutes.
• Deleting a whole gallery, or your account, removes what it contained on the same footing — the free window first, and no recovery we have not described above.

Where the copies sit

• Every hour the database is copied off this server, encrypted before it leaves to a key we do not keep here. It can write a backup it cannot itself read.
• Your photographs go to another company's storage, on another continent. Nobody — us included — can delete them for 44 days.
• That copy only ever adds: the thing a backup has to survive is exactly the thing that deletes.
• And we have taken that encrypted copy back out, restored it, and checked that what came back matched.

Keep your cards until you’ve delivered

We are a delivery and proofing tool, not your archive. Those copies are our insurance against losing your work, not a restore button we hand you. Your as-shot file stays yours to download, untouched. But nothing on the internet replaces the copy in your own hands.

What we do not promise

No uptime figure, no durability percentage and no service-level agreement. We have not published one because we have not measured one, and a number we cannot stand behind is worth less to you than its absence.