Privacy Policy

Account information. When you create an account we collect your name, email address, and a password. Passwords are never stored in plain text — they are stored only as a one-way hash (bcrypt).

Content you create. The lens, lighting, and light-count selections you submit, the AI-generated shoot suggestions, and any presets you save are stored in your account so you can revisit them.

Technical data. We process limited technical information such as login attempts (for security/abuse prevention) and standard server logs.

• To create and authenticate your account and keep it secure.
• To generate, store, and display your photography suggestions and presets.
• To send transactional emails, such as password-reset links.
• To protect the Service against fraud, abuse, and excessive use (e.g., rate limiting).

We rely on a small number of trusted processors to operate the Service:

• AI provider (Anthropic Claude). Your lens/lighting selections are sent to the AI model to generate suggestions. We do not send your email or password to the AI provider.
• Resend. Used to deliver transactional emails such as password resets.
• Database hosting. Your account data and saved content are stored in our managed database.

These providers process data only on our behalf and according to their own privacy and security commitments.

We retain your account information and saved content for as long as your account is active. Password-reset tokens expire within one hour. You may request deletion of your account and associated data at any time (see Contact below).

We use industry-standard safeguards including hashed passwords, signed authentication tokens, encrypted transport (HTTPS), brute-force lockout, and request rate limiting. No method of transmission or storage is 100% secure, but we work to protect your information.

Depending on your location, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact us using the details below.

Illinois & Arizona residents. Chapter 8 Studio operates from Illinois and Arizona. We do not collect, capture, or store biometric identifiers or biometric information (such as facial geometry, fingerprints, or voiceprints) as defined by the Illinois Biometric Information Privacy Act (BIPA). Residents of Illinois and Arizona may contact us at any time to access or delete the personal information associated with their account.

This Privacy Policy and any dispute arising from your use of the Service are governed by the laws of the State of Illinois and, where applicable, the State of Arizona, without regard to conflict-of-law principles.

The Service is not directed to children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect personal data from them.

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the effective date above. Continued use of the Service after changes take effect constitutes acceptance.

If you have questions about this Privacy Policy or your data, contact Chapter 8 Studio at lawrence@chapter8studio.com.