Privacy Policy · N5 Galleries

N5 Galleries is a product and service of N5 Solutions LLC (“N5 Solutions”, “we”, “us”). This policy explains what information we collect, how we use it, and your choices. It is part of our Terms & Conditions.

Gallery owners are responsible for their galleries. The photographs in a gallery, who appears in them, and who the gallery is shared with are decided by the gallery owner, not by us. For those photos we act on the owner's behalf, and the owner is responsible for having the right to share them and for any notice and consent the law requires.

1. Information We Collect

From gallery owners:

Account details — name, email address, phone number (if given), time zone
Photographs and gallery content you upload, and settings such as passwords and share links
Purchases — token purchases and invoices. Card details are handled by our payment provider, Stripe; we never see or store your card number.

From visitors and buyers:

Email address and name if you sign in to a gallery to like, favorite, add to cart or use “That's me”
Likes, favorites and cart items in that gallery
Order details — name, email, phone number, delivery address (if given) and notes — which are shared with the gallery owner so they can fulfil the order
Gallery visits — when you open a gallery: the time, which gallery and how you came in (a share link, the photographer's page, a single-photo link or a TV), your IP address, your approximate location (city and country, from our network provider), your type of device and browser, and your name and email if you're signed in

From everyone:

Usage data — pages visited, features used, browser type
Activity records — a log of important actions (for example signing in, creating or deleting galleries, uploading photos, creating share links, buying tokens) and of errors, with the time, browser type and IP address. For everyday activity the IP address is shortened; for security-related events such as sign-ins it is kept whole. We never record passwords, one-time codes or share-link tokens.
Messages you send us, for example through the Contact us page

2. How We Use Information

Provide, secure and improve the Service
Sign you in, including emailing one-time security codes
Host and show galleries to the people they are shared with
Process token purchases and send statements and receipts
Send order confirmations to buyers and order details to gallery owners
Send service messages about your account, such as warnings before galleries are marked for deletion, and referral invitations you ask us to send
Respond to support requests, investigate problems, and detect and prevent abuse

We do not sell personal information and do not use it for advertising.

3. Sharing & Disclosure

Service providers who run parts of the Service for us, under their own security commitments — such as Render (application hosting), Supabase (database), Cloudflare (photo storage and DNS), Stripe (payments) and our email delivery provider.
People a gallery is shared with — anything in a public gallery, or reachable through a share link or password, is visible to anyone who has that link or password, and they can forward it.
Gallery owners — see the visitors and buyers who interact with their galleries, as described above, and a log of visits to their galleries: when, which gallery, approximate location, device and browser, and the visitor's name and email if signed in. Owners do not see visitors' IP addresses.
Law enforcement or others when the law requires it, or to protect our rights, users or the public
A successor if our business is sold or merged

4. Data Storage & Security

Photographs are stored in Cloudflare R2 object storage and account data in a PostgreSQL database. Passwords are hashed and never stored in plain text, and all data travels over encrypted (TLS) connections. No system is perfectly secure, and we cannot guarantee that information will never be accessed, lost or disclosed without authorization.

5. Face Grouping

If a gallery owner turns on face grouping (“Detect People”) for a gallery, we process the photos in that gallery to find faces. For each face we store its position in the photo, a small cropped image of it, and a numerical face template used to compare faces — which may be considered biometric data under some laws. This happens on our own servers; we do not send photos to any third-party face-recognition service.

First names only. People can only be labelled with a single first name, entered by the gallery owner. We do not identify anyone, and last names are not allowed, so a face is never shown together with a full identity.
Face data stays within that gallery: it is not compared across galleries or accounts, not sold, not used for advertising and not used to train any model. Visitors' own faces are never scanned.
It is deleted when the owner removes the photo or gallery, clears face groups with “Start over”, or when the gallery is deleted under section 7.
“That's me”. A visitor can say which person in a gallery is them after confirming their email address. We then link their account to that person in that gallery only, so they — and nobody else — can set their first name, hide themselves (the gallery owner can't undo this), or remove the link. The gallery owner can see which account made the link.
The gallery owner decides whether to use face grouping and is responsible for any notice and consent it requires. To be untagged or hidden, use “That's me”, ask the photographer, or contact us to request deletion of face data about you.

Galleries that use face grouping show a “privacy/legal” notice under Filter by person with full details.

5A. Content Screening

To keep illegal and abusive content off the Service, we automatically check newly uploaded photos and the text gallery owners enter (gallery and section names, descriptions, captions, product names and person labels):

Photos are checked for nudity by a model that runs on our own servers, and text is compared with a word list. Nothing leaves our systems for these checks.
When we switch it on, newly uploaded photos are also sent to Microsoft Azure AI Content Safety, which analyses each photo for sexual, violent, hateful and self-harm content and returns a rating. Microsoft processes the photo for that purpose only, as our service provider.
Our content delivery network, Cloudflare, may compare images we serve against lists of known child sexual abuse material.
The results are a score or a matched word, kept with the gallery so a member of our staff can review it. They are never used to identify anyone, to advertise, or to train any model.

6. Cookies and Browser Storage

We use only cookies the Service needs to work. We do not use advertising or cross-site tracking cookies.

Sign-in — keeps you signed in (separately for gallery owners, visitors and site administrators)
Security — protects forms against cross-site request forgery
Gallery unlock — remembers, for a few hours, that you entered a gallery's password
Time zone — remembers your time zone (for example “America/Chicago”) so dates and times are shown correctly
Show on TV — remembers the last gallery you viewed, for 7 days, so scanning a TV's code with your phone's camera can return you to it

Your browser's own storage also keeps small preferences, such as your slideshow speed and an active TV connection. Disabling cookies will prevent you from signing in.

7. How Long We Keep Information

Account information is kept while your account exists.
Galleries are kept until you delete them. If your token balance stays at zero for 60 days, your galleries are marked for deletion and may then be permanently deleted, with their photos, share links and face data.
If an account has no token purchase or use for 120 days, it becomes dormant: its tokens are forfeited and its galleries may be deleted. We email warnings before both (see section 6 of our Terms).
Order, purchase and activity records are kept as long as needed for accounting, security and legal purposes, even after a gallery or account is deleted.
Gallery visit records are kept for 13 months, then deleted.
Deleted content may remain in routine backups for a limited time before they expire.

8. Your Choices and Rights

Update your profile, password and time zone
Delete photos and galleries, and download a backup of your galleries
Ask us, through our Legal & Privacy Requests page, for a copy of your information, to correct it, or to delete your account

Depending on where you live, you may have further rights under the law; we will honor them as the law requires. For photos in someone else's gallery, contact the photographer first; we will help where we can.

9. Reporting a Privacy or Security Issue

If you believe your privacy has been breached, that a gallery shows you without permission, or that there has been a security problem, tell us through our Legal & Privacy Requests page with enough detail for us to find the gallery or account involved. We will respond and, where appropriate, take steps to remedy the issue within 30 days of receiving your notice. If we learn of a security breach affecting your personal information, we will notify you as the law requires.

10. Children's Privacy

The Service is not directed at children under 13, and we do not knowingly collect information from them. Photos of children may appear in galleries; the gallery owner is responsible for having a parent's or guardian's permission. If you believe we hold information about a child that we should not, contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time and will change the date at the top when we do. Material changes will be posted on this page.

12. Contact

Questions about this policy? Reach N5 Solutions LLC through our Contact us page, or use our Legal & Privacy Requests page for a privacy request or report.