FAQ·Contact Us·Terms of Service·Privacy Policy·Acceptable Use Policy·Copyright & DMCA Policy·Data, Storage & Backup Policy·Data Processing Agreement·Sub-processors·Open-Source Licenses
Privacy Policy
Effective Date: August 30, 2026 · Last updated: October 9, 2026Image Depot ("Image Depot," "we," "us," or "our") respects your privacy. This Privacy Policy explains how Image Depot collects, uses, stores, shares, and protects information when you use imagedepot.net, photo-depot.net, image-depot.net, the Image Depot platform, galleries, storage services, sales features, and related services (collectively, the "Service"). By using the Service, you acknowledge the practices described in this Privacy Policy.
1. Information We Collect
Depending on how you use Image Depot, we may collect:
Account Information
- Name
- Business or studio name
- Email address
- Phone number
- Billing information
- Account credentials
- Subscription information
- Business address
- Profile information
Content
When you use Image Depot to upload or manage photography or other media, we may process:
- Photographs
- Videos
- Graphics
- Gallery information
- Captions
- File names
- Metadata
- EXIF information
- Keywords
- Client information associated with galleries
- Other information you choose to upload
Client Information
Studios may use Image Depot to provide galleries to their own customers. Depending on how a Studio configures its galleries, Image Depot may process:
- Client names
- Email addresses
- Gallery access information
- Download activity
- Purchase information
- Messages or other information submitted through a gallery
The Studio, rather than Image Depot, is generally responsible for determining what client information it collects and why it collects it.
Payment Information
Payments may be processed through third-party payment providers. Image Depot may receive limited transaction information such as:
- Transaction amount
- Transaction date
- Payment status
- Customer information associated with a transaction
- Transaction or order identifiers
Image Depot does not need to receive or store full payment-card numbers when those transactions are processed by a third-party payment provider.
Student Accounts
If you have an Image Depot Student account (see Section 11A), we collect your name, email address, account password (stored only in protected form), the photos, videos and galleries you upload, your school program and academic year, any photography specialties you choose to list, and records of the orders your own clients place with you. We also record when you confirmed you are 13 or older and accepted these policies, and which versions you accepted. We do not ask for your date of birth.
2. Information Collected Automatically
When you use the Service, we may automatically collect technical information such as:
- IP address
- Browser type
- Device type
- Operating system
- Pages viewed
- Referring pages
- Date and time of activity
- General usage information
- Error and diagnostic information
We may use cookies, pixels, local storage, analytics technologies, or similar technologies to operate and improve the Service.
3. How We Use Information
We may use information to:
- Provide the Service
- Create and maintain accounts
- Host and deliver galleries
- Store and process Content
- Process transactions
- Provide customer support
- Communicate with users
- Send service-related notices
- Process subscriptions
- Prevent fraud and abuse
- Protect account and platform security
- Diagnose technical problems
- Improve platform performance
- Develop new features
- Measure Service usage
- Comply with legal obligations
- Enforce our Terms of Service
4. Your Photographs and Uploaded Content
Image Depot does not claim ownership of your photographs. Your Content remains yours, subject to the rights necessary for Image Depot to operate the Service. We process your Content only as reasonably necessary to provide the services you request, maintain the platform, secure the Service, and comply with applicable law.
If a photographer invited you. The photographer or studio who invited you to a gallery, or who photographed you, decides why your information is collected and how it is used; Image Depot processes it for them (Terms, Section 7A). Contact that photographer first about information they collected. Information Image Depot collects for its own purposes -- running the Service, preventing fraud, keeping its own records -- is described in this policy and is Image Depot's responsibility.
Unless separately authorized by you, Image Depot does not sell your photographs as stock photography or license your photographs to third parties for commercial exploitation. Image Depot does not use customer photographs to train artificial intelligence or generative AI models without separate authorization.
AI-assisted features. Some features use third-party AI services. Each one is listed below with what it receives:
- Jersey and team recognition ("AI Athlete Tags", opt-in, per gallery, paid plans only; not available on Student or School Program accounts). When a Studio turns it on for a gallery, a copy of each photo from that gallery (about 1,600 pixels on the long side, without the watermark) is sent to Anthropic to read jersey numbers, team names and similar uniform text. It does not identify anyone by face or body.
- Support chat (all signed-in accounts, including Student accounts). Messages you type into the in-app support chat, and the account details the assistant looks up to answer you (for example your plan, galleries, orders, or a contract's client name), are sent to Anthropic to generate replies. If the assistant can't help, the conversation goes to an Image Depot staff member, and may be shared with our team in Slack.
- Image Watch (opt-in, paid add-on). When a Studio runs an Image Watch search, a preview copy of the selected photo is sent to Google Cloud Vision to find where else it appears on the web.
- AI quality scoring (opt-in, per gallery, part of the Image Depot Live / Quick Upload add-on). When a Studio turns it on for a gallery, a preview of each uploaded photo is scored by an AI model that runs on Cloudflare's own network (Cloudflare Workers AI). The preview is not sent to any other AI provider.
We do not allow these providers to use your photos or messages to train their models, under our agreements with them. Image Depot does not use your photographs to train AI models.
5. How We Share Information
Service Providers
We use the following providers to run the Service. Each receives only what it needs for its job.
| Provider | What it does for us | What it receives | Where |
|---|---|---|---|
| Cloudflare | Hosting, database, photo and video storage, image processing (including the optional AI quality scoring), website analytics, bot checks, email routing for support@ | Everything stored in the Service | United States and Cloudflare's global network |
| Backblaze (B2) | Off-site backup copy of photo and video files | Photo and video files | United States (us-east) |
| Stripe | Payments, studio subscriptions, payouts to studios | Buyer and studio payment details, order amounts, email | United States |
| PayPal | Payments when a studio uses PayPal (PayPal is coming soon) | Buyer payment details, order amounts, email | United States |
| Resend | Sending email | Recipient email address and the message | United States |
| "Sign in with Google" (if you choose it); Google Cloud Vision for Image Watch; Gmail, where support@ email is read; web fonts on our pages | Your Google account name and email (sign-in); a photo preview (Image Watch); emails you send to support@; your browser's IP address when a page loads its fonts | United States | |
| Anthropic | Support chat answers; AI Athlete Tags | Support chat messages and account details looked up to answer them; gallery photo copies for AI Athlete Tags | United States (support chat requests pass through Cloudflare AI Gateway) |
| Slack | Our team's support escalations | A summary of the support conversation and the studio's name | United States |
| SignWell | Electronic signatures on studio-client contracts | Client name, email, contract text and signature | United States |
| WHCC, Mpix, FinerWorks | Printing and shipping print orders | The buyer's name, shipping address, phone (if given), the photo file and the print order | United States |
| Prodigi | Printing and shipping print orders | The buyer's name, shipping address, phone (if given), the photo file and the print order | United Kingdom, with partner labs in the destination country |
Your Clients
Information you intentionally make available through a gallery may be visible to people you authorize to access that gallery.
Legal Requirements
We may disclose information when reasonably necessary to:
- Comply with law
- Respond to lawful governmental requests
- Protect the rights or safety of Image Depot
- Investigate fraud or abuse
- Enforce our Terms
- Protect users or third parties
Business Transfers
If Image Depot is involved in a merger, acquisition, financing, reorganization, sale of assets, or similar transaction, information associated with the Service may be transferred as part of that transaction.
6. We Do Not Sell Your Personal Information
Image Depot does not sell personal information, and does not share it with third parties for targeted advertising. We also do not sell photographers' uploaded photographs as stock photography.
7. Marketing Communications
We may send service-related communications such as:
- Account notices
- Billing notices
- Security alerts
- Important policy changes
- Service announcements
Where permitted by law, we may also send promotional communications. You may unsubscribe from marketing communications using the unsubscribe mechanism included in the communication. You may still receive essential service-related communications after unsubscribing from marketing messages.
Emails from a Studio. A Studio can use Image Depot to email its own Clients, for example to announce a new gallery. Those emails go to people who confirmed they want that Studio's emails (by clicking a confirmation link we send them) and to customers who bought from that Studio. Where we have turned it on for a Studio, they can also go to people who entered their email address to view one of that Studio's galleries; that gallery's sign-in page says so. They come from the Studio, sent through Image Depot, and include the Studio's postal address and an unsubscribe link; unsubscribing stops all further emails from that Studio. The Studio decides what to send and why (see Section 7A of the Terms).
8. Data Security
Image Depot uses reasonable administrative, technical, and organizational measures designed to protect information. However, no internet-connected system can be guaranteed to be completely secure. You are responsible for protecting your account credentials and limiting access to your account. If you believe your account has been compromised, contact Image Depot promptly.
9. Data Retention
We retain information for as long as reasonably necessary to:
- Provide the Service
- Maintain accounts
- Process transactions
- Comply with legal obligations
- Resolve disputes
- Prevent fraud
- Enforce agreements
- Maintain appropriate business records
Retention periods may vary depending on the type of information and the reason it is retained.
How long we keep it. The periods below apply unless the law requires us to keep something longer, or we need it for a dispute or a security investigation.
| Information | How long |
|---|---|
| Your account, galleries, photos and videos | Until you delete them or close the account (or a plan downgrade or gallery expiry removes them as described in the Terms) |
| Deleted photos and videos | 30 days in a recoverable trash, in our storage and in the off-site copy, then permanently deleted |
| Database backups | 30 days for the nightly copies; one off-site copy is kept up to 120 days |
| Gallery visitor emails (email-gated galleries), download history, and our log of order and payment emails | 13 months |
| Password-reset, email-confirmation, My Orders sign-in, re-enrolment and pairing links | Until they expire, plus 1 day |
| Sign-in sessions | Up to 12 days |
| Website visitor IP addresses and request logs used for security | 90 days (an address blocked for abuse is kept while the block lasts) |
| Error logs | 90 days |
| A closed account's security log (sign-ins) | 90 days after the account is deleted |
| Order records after a studio closes its account | Amounts, dates, payment references and item names and prices are kept for accounting and taxes; the buyer's name, address, phone and note are deleted, and the buyer's email is kept only in a one-way scrambled form |
| Copyright (DMCA) notices and repeat-infringer decisions | Kept as a legal record, also after the account is deleted |
| A student's 13+ and policy acceptance record | Kept as a legal record, also after the account is deleted (it contains no personal details) |
| Support conversations | Kept while the account exists and deleted with it; emails to support@ from people without an account are kept as support records |
| Our tamper-evident audit ledger: what happened to an account, its galleries and photos (sign-ins, downloads, deletions, staff actions), who did it (the account, a client, a staff member or the system), the country, the network part of the IP address, and one-way scrambled forms of the full IP address and browser | 13 months for sign-in and access events, 25 months for account, staff, photo and AI events; kept after the account is deleted because it is the record that the deletion happened |
| Sign-up and sign-in fraud signals: the IP address and device used to sign up, the countries you sign in from, and daily activity counts | Daily counts and sign-in countries for 180 days; the sign-up IP address and device until the account is deleted |
Records not listed above are kept until you delete them or close the account, and are deleted with the account unless the table says otherwise.
10. Deleted Content
When you delete Content, Image Depot may require reasonable time to remove it from active systems and, where applicable, backup or disaster-recovery systems. Some information may need to be retained for legal, security, accounting, fraud-prevention, or dispute-resolution purposes.
11. Children's Privacy
Image Depot is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Studio Accounts are for adults (18 and older). Image Depot Student accounts, created by invitation from a school or instructor, are for students 13 and older; see Section 11A.
Image Depot may host photographs of children or minors as part of a Studio's normal photography business. The Studio is responsible for obtaining the permissions and consents those photographs require.
If you believe a child under 13 has an account or has given us personal information, email support@imagedepot.net and we will delete it.
11A. Student Accounts and School Programs
- What we collect is listed in Section 1 under "Student Accounts".
- Your instructor's access. While you are enrolled, your instructor can see and change everything in your account, including your photos, galleries, settings and the orders your clients place. That access ends when you leave the program.
- What is public. Your portfolio and galleries show your first name and last initial unless you or your instructor turn on your full name. Your portfolio is not listed in search engines. Your school's name is not shown publicly. Your email address is never shown to your clients: their replies go to Image Depot support.
- AI. AI jersey recognition is not available on Student accounts. The in-app support chat uses Anthropic (Section 4).
- Parents and guardians of a student under 18 can ask to see, correct, or delete the student's information, or close the account, by emailing support@imagedepot.net. We will verify the request (for example, by replying to the email address on the account or asking for reasonable proof of guardianship) and may involve the student's instructor.
- When a student leaves. Leaving a program ends the instructor's access. Deleting the account deletes its photos, galleries and personal information as described in Sections 9 and 10.
12. Third-Party Websites and Services
The Service may contain links to or integrations with third-party websites and services. Those third parties have their own privacy practices. Image Depot is not responsible for the privacy practices of third-party services that it does not control.
13. Your Privacy Rights
Depending on where you live, you may have rights concerning your personal information, including rights to:
- Request access
- Request correction
- Request deletion
- Request information about processing
- Opt out of certain uses
- Exercise other rights provided by applicable law
Requests may be submitted to Image Depot using the contact information below. We may need to verify your identity before completing certain requests.
How to make a request, and how to appeal. Email support@imagedepot.net with "Privacy request" in the subject. We will respond within 45 days (we may extend that once by 45 days if reasonably necessary and will tell you why). If we decline your request, in whole or in part, you can appeal by replying to our decision with "Privacy appeal" in the subject within 60 days. A different person than the one who handled your request will review the appeal, and we will tell you the result, with our reasons, within 60 days. If we deny your appeal, you can contact your state attorney general — in Texas, the Office of the Attorney General, Consumer Protection Division (texasattorneygeneral.gov).
14. Texas and Other State Privacy Laws
Image Depot will comply with applicable privacy laws based on the nature of its business, the information it processes, and the jurisdictions in which it operates. Privacy rights may differ depending on your state or country of residence.
15. Canada, Australia, New Zealand and Other Countries
Where your information goes. Image Depot is operated from the United States. Information you give us, and information a photographer puts into the Service about you, is stored and processed in the United States by Image Depot and by the providers named in Section 5 and on our sub-processor page, most of them in the United States. Print orders go to the print lab the photographer chose, which may be in your country or in another one (Section 5 says where). Information held in the United States is subject to United States law, and United States authorities may be able to obtain it under that law.
Canada. Image Depot collects, uses and discloses personal information with consent, or as the law otherwise allows, and only for the purposes described in this policy. The photographer who collected your information is responsible for it under Canadian privacy law and Image Depot processes it on their behalf (Terms, Section 7A). You can ask us for access to or correction of your personal information (Section 13) and you can complain to the Office of the Privacy Commissioner of Canada.
Australia. By using the Service you agree that Image Depot discloses your personal information to its providers outside Australia, in the United States and the countries named in Section 5, and that Image Depot will not be required to take the steps Australian Privacy Principle 8.1 would otherwise call for in relation to those disclosures. We take reasonable steps to protect your information wherever it is held (Section 8). You can ask for access or correction (Section 13) and complain to us first; if you are not satisfied you can complain to the Office of the Australian Information Commissioner.
New Zealand. Image Depot discloses your personal information to its providers outside New Zealand, in the United States and the countries named in Section 5, and by using the Service you authorise those disclosures. We take reasonable steps to protect your information wherever it is held. You can ask for access or correction (Section 13) and complain to us first, then to the Office of the Privacy Commissioner.
Other countries. The Service is offered to Studios in United States, Canada, Australia and New Zealand. If you use it from somewhere else, you acknowledge that your information is processed in the locations above.
16. Changes to This Privacy Policy
We may update this Privacy Policy as Image Depot develops. When changes are made, we will update the Effective Date and, where appropriate, provide additional notice.
17. Contact
Questions regarding this Privacy Policy may be sent to:
Image Depot
Email: support@imagedepot.net
Website: imagedepot.net