Privacy Policy
Tobren Software LLC ("Tobren", "we", "us") operates Tobren Deliver. This Privacy Policy explains what personal information we collect, how we use it, and the rights you have. By using the service, you agree to this Policy and our Terms of Service.
1. Roles and Data Processing
For the purposes of data protection laws, when a photographer or videographer ("Tenant Admin") uses our platform to deliver media to their own clients ("Customers"):
- Tenant Admin is the Data Controller of Customer information and uploaded media.
- Tobren is the Data Processor, acting on the instructions of the Tenant Admin.
Customers seeking to exercise their privacy rights (access, deletion, etc.) should contact their photographer directly.
2. Information we collect
2.1 Information you provide directly
- Account information: Name, email, and hashed passwords.
- Workspace information: Business name, custom domains, and branding assets.
- Payment information: Tokenized payment details handled by Square. We do not store full card numbers.
- Media: Photos, videos, and metadata uploaded for delivery.
- Waitlist & contact forms: If you join a product waitlist or send us a message, we collect the email address (and, for contact, your name and message) you submit, plus basic metadata (timestamp, referrer, and a hashed IP) to prevent abuse. We use it only to reply to you or to notify you about the product you asked about, and we do not sell it.
2.2 Information collected automatically
- First-party cookies: We use essential HTTP-only cookies for authentication and security (e.g., session management, CSRF protection). The application itself sets no advertising cookies.
- Website analytics: Our public marketing website (tobren.io) uses Plausible Analytics to count visits. Plausible sets no cookies, collects no personal data, and does not track visitors across sites or over time; it reports only aggregate figures such as page views and referring sites.
- Advertising measurement: Our public marketing website also carries the Meta Pixel, which reports page views and similar website activity to Meta Platforms so we can measure our advertising and build audiences. This is third-party advertising technology and it does set third-party cookies. You can limit it through your browser's cookie controls, an ad blocker, or your Meta ad preferences. The Pixel also runs on the Tobren Deliver sign-up pages (deliver.tobren.io/signup and deliver.tobren.io/signup/studio), where it reports that the page was viewed, that an account was created (on any plan, Free included), and, when a paid-plan trial is created, the plan and billing cycle chosen, the plan's list price, whether a card was added, and the campaign parameters in the link you arrived by. It is not present anywhere else in the application, including every signed-in page. Our servers may also send Meta the same sign-up events directly, with your IP address, browser type, Meta's own browser cookies and those campaign parameters. When you start a paid-plan trial and have confirmed your email address, that server event also includes a scrambled (hashed) form of the address. Meta does not receive your email address itself.
- Live demo: See section 2.3.
- Technical Logs: IP addresses, browser types, and usage metrics used for security monitoring and billing.
2.3 The live demo ("Try it live")
- What we create: Starting a live demo from tobren.io creates a temporary sample studio with a generated login. We do not ask for your name or email address to start one.
- Abuse limits: Cloudflare Turnstile checks your browser when you start a demo. We use your IP address, and the network it belongs to, to count how many demos are started each day (at most 3 per address and 10 per network). Those counts are kept for at most two days.
- Deletion: A demo expires 24 hours after it starts and is then deleted, together with everything uploaded to it.
- What we keep: For 90 days after a demo ends we keep a record of it: when it started and ended, when it was first and last used, how it ended, and whether you went on to create a real workspace. We also keep any feedback you send from inside the demo (up to three notes, with any screenshots deleted with the demo). Our team reads these to improve Tobren Deliver, and may copy a feedback note into our private issue tracker. We also keep a summary of which features were used in the demo, which contains nothing that identifies you.
3. Photo and video ownership
Tenant Admins retain all rights to media they upload. We do not claim ownership. We do not use uploaded media to train artificial intelligence (AI) models.
4. Who we share information with
- Infrastructure: Google Cloud Platform (USA) for hosting and storage.
- Payments: Square and Stripe for billing and customer transactions.
- Communications: Hostinger SMTP for transactional emails.
- Website analytics: Plausible Analytics, for aggregate marketing-website statistics. No personal data is shared.
- Advertising: Meta Platforms, which receives marketing-website and sign-up-page activity through the Meta Pixel, and the server-side sign-up events, described in section 2.2.
- Bot protection: Cloudflare, whose Turnstile check runs when you start a live demo (section 2.3).
- Issue tracking: GitHub, which hosts our private issue tracker and receives feedback you send us from inside the app.
We do not sell personal information. Apart from the Meta Pixel activity on our marketing website and sign-up pages, and the server-side sign-up events, described in section 2.2, we do not share personal information with third-party advertisers.
5. International Rights (GDPR & CCPA)
EEA/UK Residents: Our lawful basis for processing is the performance of our contract with you. For business users in these regions, our Data Processing Addendum (DPA), including Standard Contractual Clauses (SCCs) for international transfers, is incorporated into our Terms of Service by reference.
California Residents: We comply with the CCPA. We do not "sell" your personal information as defined by California law.
No Automated Decision-Making: We do not use your data for automated profiling or decisions that have legal effects on you.
6. Data retention
We retain billing records for up to 7 years. When a workspace is cancelled and its data deleted, we keep a short record of each team member's email address and name, the workspace's name and address, their role, the plan, and the dates they were active, so we can answer questions about the account. If you ask us to erase your data, we delete that record and keep only a one-way, keyed fingerprint of your email address, which cannot be turned back into the address and is used only to recognise a repeat free-trial sign-up. Tenant Admins control the retention of their uploaded media. Once deleted by a Tenant Admin, media is removed from active storage; backups may persist for up to 30 days. A live demo is deleted 24 hours after it starts; its record and any feedback sent from it are kept for 90 days after it ends, and the daily demo counts that use IP addresses for at most two days (section 2.3).
7. Contact
Tobren Software LLC
Email: contact@tobren.io