Privacy Policy

B4RAW is software for photography businesses. We operate the Service so studios can manage accounts, orders, files, delivery, communications, and related workspace tools.

When this Policy says we, us, or our, it means B4RAW, a sole proprietorship based in Houston, Texas, doing business under the trade name B4RAW.

When it says Customer or Tenant, it means the photography business or other organization that holds a B4RAW workspace.

When it says User, it means an individual who accesses the Service, including Tenant staff, invited collaborators, and client-portal users.

When it says Client, it means a customer or contact of a Tenant—not a customer of B4RAW—unless that person also has their own B4RAW account.

B4RAW is a software platform used by independent photography businesses. Information appears in more than one context.

Account and platform information. We use information to create and manage user accounts, authenticate Users, help secure the Service, manage platform subscriptions, operate and support the platform, and communicate about account or service matters.

Tenant business and customer information. A photography business using B4RAW may enter, store, or process client and contact information, locations, orders, schedules, communications, photos, video, documents, provider or workforce information, and billing or payment metadata. The Tenant generally determines the business reason for collecting and using that information for its own photography operations.

Depending on the context and applicable law, B4RAW and a Customer may have different legal roles with respect to personal information.

If you are a Client of a photography business, that business may be the appropriate first contact about information it collected for its own services. See Section 24.

The Service may collect or process the following categories. Not every User or Tenant uses every feature.

A. Account and profile information

Name, email address, phone number if supplied, role, membership, work capability, account status, and Tenant relationship.

B. Authentication and security information

Password hashes (not plaintext passwords), account-security records, refresh-session records and hashes (not the raw refresh token), authentication state, login or security events, and presence or session state where the product uses it.

C. Tenant business information

Studio or business profile, settings, branding, and subscription or account configuration.

D. Client and CRM information

Client and contact names, email, phone, addresses, locations, gate, lockbox, or other access notes, CRM communications, consent or status information, and inbound or outbound communication metadata.

E. Orders and scheduling

Service or property address, date and time, timezone, service or product selections, order notes, staff or provider assignments, on-site contacts, activity records, and travel or mileage data.

F. Media and files

RAW images, JPG and other final images, photos, video, documents, delivery assets, attachments, and public listing or portfolio media.

G. Communications

Transactional email, inbound CRM email previews, email body storage where that feature is enabled, email attachments, SMS metadata or limited previews, account or security communications, and workflow notifications.

H. Payment and billing metadata

Plan, subscription state, payment-provider identifiers, invoice and payment state, amounts, and related transaction metadata.

B4RAW does not store raw payment card numbers. Card details are collected and processed by the payment provider.

I. Workforce and provider information

Provider profile, assignments, rates, earnings, payment ledger, payment-preference labels, mileage, certifications, drone credential information, and base address where supplied.

J. Public content

Published listings, portfolios, Tenant branding, descriptions, display or contact details, and public photos or videos.

K. Technical information

Infrastructure or request logs, browser, device, or request metadata where logged by B4RAW or its infrastructure providers, session or cookie identifiers, and application audit events.

Information may come from:

• B4RAW account Users;
• Tenant administrators;
• Tenant employees or providers;
• Tenant Clients;
• booking or other public forms;
• portal Users;
• inbound email senders;
• integrations;
• payment-provider events;
• Google services where a Tenant or User connects or uses them; and
• ordinary browser and application interactions.

B4RAW does not purchase consumer marketing lists as part of the current product.

We use information to:

• create and manage accounts;
• authenticate Users;
• help prevent abuse and security incidents;
• enforce Tenant access controls;
• operate CRM features;
• create and manage orders;
• support scheduling;
• ingest, store, process, and deliver media;
• generate applicable previews or watermarks;
• host public pages a Tenant chooses to publish;
• send transactional communications;
• support email or SMS workflows where those features are enabled;
• bill for platform subscriptions;
• support Tenant-enabled Client payment features;
• operate Calendar or Maps integrations where connected or used;
• provide customer support;
• audit and operate the Service;
• maintain and improve the platform, including with aggregated or reasonably deidentified information;
• handle legal, compliance, or security matters; and
• respond to valid legal process.

We do not use Tenant or Client personal data to build third-party advertising profiles or to enable third-party targeted advertising based on activity inside B4RAW.

We do not automatically use Customer Content for B4RAW’s own website marketing, social posts, ads, case studies, portfolio, or promotional campaigns. Separate explicit permission is required for that use.

Tenants choose what client, order, and media information they place in B4RAW.

The Tenant is responsible for having appropriate authority and permissions for its own collection and use of that information, including consent before publicly exposing intimate or sensitive content.

B4RAW processes that information to operate the platform. B4RAW may restrict sexually explicit adult or other sensitive content from public-facing pages.

Questions about a photography business’s use of its Client data may need to be directed to that photography business.

Depending on the context and applicable law, B4RAW and a Customer may have different legal roles with respect to personal information.

Private source, final, and vault media may be stored in private object storage. Authorized upload and download flows may use controlled or time-limited access. Portal delivery may be proxied. Applicable previews may be watermarked. Content a Tenant selects may later be published on public pages.

We do not promise universal permanent storage, guaranteed recovery, immediate deletion at cancellation, or a tenant-wide wipe.

If a Tenant intentionally publishes a listing, portfolio, gallery or presentation, branding, or other content, that material may become available through public URLs and may be indexable by search engines.

Third parties may view, copy, share, cache, or potentially index that content. We do not promise removal from third-party caches or search engines. We do not claim that every public page is indexed.

B4RAW uses third-party email and communications service providers for transactional and service communications, assignment and workflow notifications, Client communications, and inbound CRM email where that feature is enabled. Those providers receive the recipient address, subject, and message content needed to send or receive the message.

Transactional and service messages may include account and security notices, billing, important account changes, assignments, workflow, and other service-operation messages.

The Service may store transactional email content, inbound email previews, and—where enabled—full message bodies or attachments needed to operate CRM or message-log features.

We do not promise automatic email purge. If we later send promotional email, those messages should include an applicable unsubscribe control. Unsubscribing from marketing does not turn off necessary transactional or service messages.

B4RAW may support SMS where that feature is enabled. Where SMS is enabled, B4RAW uses third-party SMS and communications service providers. Those providers receive the destination phone number and the message content needed to deliver the message, and they may return delivery or status information. B4RAW may process phone numbers. Message or log metadata, or a limited preview, may be stored.

Client communication consent controls exist for Tenant CRM-style messaging. Account or security one-time codes are separate from Tenant CRM messaging. SMS availability depends on the workflow and applicable permissions or law.

B4RAW may use third-party payment processors for B4RAW platform subscriptions and Tenant-enabled Client payment flows.

The payment provider collects and processes payment-card details. B4RAW does not store raw card numbers. B4RAW stores relevant payment, customer, or subscription identifiers and status metadata.

This Policy does not state that B4RAW is merchant of record for Tenant–Client charges unless a separate written agreement says otherwise. Subscription cancellation and refund rules are described in the Terms of Service: cancellation may be made at any time, takes effect at the end of the current paid billing period, paid access normally continues through that period, and already-paid subscription fees are non-refundable except where applicable law requires otherwise.

A Tenant may record provider profiles, assignments, rates, earnings or payment-ledger information, mileage, payout or payment-preference labels, address, certifications, and drone credentials.

B4RAW does not independently certify or externally verify those credentials. Tenant staff may internally approve or reject profile information. That is not government verification or external certification.

Google Calendar

Connecting Google Calendar is optional. It is not required to use B4RAW. If a Tenant owner or administrator connects Google Calendar, B4RAW accesses that Google account only to identify the connected account, display calendars that the account can edit, allow the Tenant to select a calendar, and create, update, or delete calendar events for B4RAW appointments on that selected calendar.

Data accessed

From Google, B4RAW receives and may store:

• the Google account email address;
• granted OAuth scopes;
• OAuth token expiry information;
• encrypted OAuth access and refresh tokens;
• calendars that the connected account can edit, including calendar name and identifier;
• the selected calendar name and identifier; and
• identifiers for calendar events created by B4RAW.

B4RAW does not import or store the titles, descriptions, attendees, recurrence details, or other content of existing Google Calendar events. B4RAW does not access Google Photos through this integration.

How B4RAW uses it

B4RAW uses this Google user data only to provide the Google Calendar connection the user requested. B4RAW sends appointment information originating from the Tenant orders to Google when creating or updating calendar events on the selected calendar. That appointment information includes the order number, schedule time, location, assigned staff names, and service titles. Google receives the OAuth and Calendar API requests for this feature, including that appointment information and the event identifier used to update or delete an event B4RAW created.

Storage and retention

OAuth access and refresh tokens are encrypted at rest in the B4RAW application database. They are not displayed to Users in the application. They are used to communicate with Google APIs for the connected Calendar feature.

Tenant owners and administrators may see the connected Google account email address, the granted scopes, the selected calendar information, and the Calendar connection and sync status. They do not see the OAuth tokens.

Sharing, transfer, and disclosure

B4RAW does not sell Google user data. B4RAW does not share Google user data for advertising or retargeting. B4RAW does not provide Google user data to data brokers. B4RAW does not use Google user data for creditworthiness, lending, or similar eligibility decisions.

B4RAW shares, transfers, or discloses Google user data only in these cases:

• With Google, as necessary to provide the Calendar feature the user requested. B4RAW sends OAuth tokens back to Google to call the Calendar API, and sends the appointment information described above so Google can create, update, or delete the event on the calendar the Tenant selected.
• With the Tenant owners and administrators who use B4RAW Settings, so they can see the connected account email, granted scopes, selected calendar, and connection status. OAuth tokens are not shown to them.
• With service providers that support application hosting, database storage, network transmission, security, and backup operations, solely as necessary to operate and secure the Service. These providers process Google user data on behalf of B4RAW for those operational purposes. Google user data is stored in the B4RAW application database. Requests that carry the OAuth return and Settings responses, including the connected account email and calendar name, are transmitted by network and security providers. Backups of the application database may include the stored Google connection record and are kept by backup or storage providers. These providers do not receive Google user data for advertising, analytics, or model training.
• When Section 23 applies, for valid legal process such as a court order or subpoena.

B4RAW does not send Google user data to email-delivery, SMS, payment, analytics, or artificial-intelligence or machine-learning providers. Google Calendar credentials and Google user data are not stored in the photography or media-file storage used by B4RAW.

Google Workspace API Data and Artificial Intelligence

B4RAW does not use, transfer, or disclose Google user data obtained through Google Workspace APIs to develop, improve, or train generalized, non-personalized, foundational, or frontier artificial intelligence or machine-learning models.

Google Workspace API data is used only to provide the user-facing Google Calendar integration requested by the user.

B4RAW does not transmit Google Workspace API user data to an artificial-intelligence or machine-learning provider. B4RAW does not use Google Workspace API user data, including raw, aggregated, anonymized, or derived Google Workspace data, to develop, improve, train, or fine-tune generalized artificial-intelligence or machine-learning models. Google Workspace API data is not used to develop, improve, or train generalized artificial intelligence or machine-learning models.

Disconnect and deletion

A Tenant owner or administrator can disconnect Google Calendar in workspace settings. Disconnect attempts to revoke the Google authorization. Stored access and refresh tokens, token-expiry information, the selected calendar, and the Calendar sync setting are cleared even if revocation does not succeed. The connected Google account email address and granted scopes may remain on the connection record. Records that link a B4RAW appointment to a calendar event identifier may remain until the Tenant workspace is deleted. Disconnect does not delete the Tenant orders, and it does not immediately delete every Google-related metadata field. General workspace retention and deletion are described in Section 21.

Limited Use

The use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. B4RAW uses Google user data only to provide and secure the Calendar feature the user requested, and B4RAW transfers that data only as this Google Calendar section describes.

Google Maps, Places, and distance features. Where used, address or location information may be sent to Google Maps, Places, or distance services for address search, mapping, or distance calculations. Those requests do not use the Google Calendar OAuth connection.

These services do not run on every page. They are used where the relevant feature is loaded or connected.

B4RAW uses service providers to help operate the Service. Those providers process the information needed for their function. Current categories include:

• application hosting and database infrastructure;
• network and security services;
• backup and storage providers;
• object storage for photographs and other media files;
• email and communications service providers;
• SMS and communications service providers;
• payment processors; and
• maps or calendar services. Google is identified in Section 13 where a Tenant uses those Google features.

B4RAW uses first-party cookies and browser storage that are needed to operate the Service. These are essential or functional technologies. They are not used as third-party advertising cookies.

We may use first-party cookies and browser storage for authentication and session operation, functional preferences such as the last workspace a User selected, and optional inactivity or session functionality if a User configures it.

B4RAW does not currently use third-party advertising pixels.

If our practices materially change, we will update this Privacy Policy and provide additional notices or choices where required by applicable law.

B4RAW does not currently use third-party advertising pixels on the website.

As a business policy, B4RAW does not intend to sell personal information of Users, Tenants, or Tenant Clients to third parties for money.

B4RAW will not use Tenant or Client personal data to build third-party advertising profiles or to enable third-party targeted advertising based on activity inside B4RAW.

This does not prohibit service providers needed to operate B4RAW, internal product analytics using aggregated or reasonably deidentified information, or future marketing of B4RAW using appropriately collected B4RAW account data, subject to applicable law.

Certain privacy laws define terms such as “sale,” “sharing,” or “targeted advertising” differently; rights may vary by applicable law.

B4RAW may use aggregated or reasonably deidentified information for internal analytics, security, reliability, performance, product improvement, and understanding general platform usage.

That use is intended not to identify an individual Tenant, User, or Client. It is not used for third-party targeted advertising and is not sold as personal data. We do not claim that deidentification is irreversible in every technical sense.

If you interact with B4RAW through a third-party social platform, that platform may separately collect or process information under its own terms and privacy practices.

B4RAW will not use Tenant photos, videos, files, or other Customer Content to train general-purpose B4RAW or third-party AI or machine-learning models without explicit permission.

If an AI-powered feature requires Customer Content, the Tenant would need to intentionally use or enable that feature. Processing for that feature would not automatically authorize general model training. Any relevant third-party AI provider would be disclosed in this Policy or related provider documentation.

B4RAW does not currently offer an AI-powered product. The Google Calendar integration in Section 13 is not an AI feature. Any future AI functionality involving Google Workspace API data would be subject to the Google API Services User Data Policy, including the Limited Use requirements.

B4RAW will not silently introduce facial recognition, biometric identification, identity matching, or search-by-person or search-by-face without separate product, privacy, and legal review. Ordinary technical face detection for focus, crop, or quality is distinct from biometric identification. B4RAW does not currently use facial recognition or biometric identification. Hosting ordinary photographs that contain faces does not by itself mean B4RAW creates biometric identifiers.

B4RAW uses technical, administrative, and organizational safeguards designed to protect information. Those safeguards include password protection, access controls, encrypted connections in deployed environments, and controlled access to non-public media. B4RAW does not store raw card numbers.

No system can guarantee absolute security.

If you believe an account has been used without authorization, or you need to report a security or abuse incident, contact [email protected].

If a security incident occurs, B4RAW will investigate, take reasonable steps to contain and remediate, and notify affected Users or Customers when required by applicable law or when appropriate in context.

How long information is kept depends on account status, the product function involved, operational requirements, security needs, legal obligations, and backup cycles.

Cancellation is not deletion. Canceling a paid plan changes billing and access. It does not automatically delete Tenant data. After cancellation, B4RAW may temporarily retain Tenant data for reactivation, operations, legal obligations, security, backups, fraud prevention, accounting, or disputes. We do not specify a universal fixed deletion period.

Backups. B4RAW may keep backups for continuity, recovery, and security. Backups are not a guaranteed personal archive for the Tenant and do not guarantee recovery of every individual file. A backup may temporarily contain information that has been deleted from primary systems. Tenants remain responsible for keeping their own copies of critical content and business records.

Account closure. Requests for permanent account closure may be sent to [email protected]. We may verify identity and authority, retain information required for legal, accounting, fraud, security, dispute, or backup purposes, and delete or anonymize other information when appropriate and operationally feasible. We do not promise total immediate deletion, a universal wipe, or immediate deletion from backups.

We do not promise that all data is deleted in a set number of days. This Policy does not promise a universal or self-service export.

Privacy and data-rights requests may be submitted to [email protected].

Depending on where you live and applicable law, you may have rights regarding your personal information. Where those laws apply, rights may include access, correction, deletion, restriction or objection, portability, or appeal or similar statutory rights. Not all rights apply in every place.

We may need to verify identity, verify authority, determine whether B4RAW or the applicable Tenant is the proper party to handle the request, and direct a Tenant’s Client to the relevant photography business when appropriate.

B4RAW may disclose information when required by valid legal process, a court order, a subpoena, or another legally binding request. Where lawful and reasonable, we intend to limit disclosure to what is necessary and to notify the affected Customer where permitted. We may preserve information when subject to a lawful preservation obligation. We do not promise advance notice in every case.

If you are a customer or Client of a photography business using B4RAW, that photography business may be the appropriate first contact about information it collected for its own services.

B4RAW may assist its Customer where appropriate. Depending on the context and applicable law, B4RAW and a Customer may have different legal roles with respect to personal information.

B4RAW accounts are intended for persons 18 or older. Account administration is not intended for children.

Legitimate photography workflows may include children, families, newborns, and minors depicted in professional photography. The Tenant or photographer is responsible for obtaining appropriate parental or guardian permissions, releases, publication consent, and other necessary authority where required.

B4RAW prohibits sexual exploitation of minors and unlawful sexual content involving minors.

Information may be processed in the United States and in other locations where B4RAW’s service providers operate.

B4RAW is currently focused primarily on the United States.

We send transactional and service communications, including account, security, billing, important account-change, assignment, workflow, and other service-operation messages.

If we later send promotional communications, we intend to do so only as permitted and to provide applicable unsubscribe controls. Unsubscribing from marketing does not disable necessary transactional or service messages.

B4RAW does not currently operate an automated system that makes eligibility, employment, credit, or similar profiling decisions about individuals.

Hosting ordinary photographs is not the same as automated personal scoring.

B4RAW and its infrastructure providers may keep technical or security logs for operation, troubleshooting, abuse prevention, security, and reliability.

We do not claim a specific log-retention period.

We may update this Privacy Policy. For a material change, we will provide a reasonable form of notice, such as posting the updated Policy and updating the effective date, or sending a notice to an account email we have on file.

B4RAW

Houston, Texas, USA

Privacy, legal, copyright, account closure, security, unauthorized-access, and abuse: [email protected]

General: [email protected]