1. Introduction
Welcome to Pictokey. This application is owned and operated by Atom Image, Inc., a Florida-based S-Corporation. Pictokey is a professional management platform for real estate photographers and agents to coordinate services, manage invoicing, and deliver media assets.
2. Intellectual Property & Media Rights
Ownership of Content: Professional photographers retain all ownership and intellectual property rights to the media they create. Pictokey acts solely as a delivery conduit.
- Limited License: Users grant us a limited license solely to host and transmit files for the purpose of fulfilling delivery requests.
- No Transfer of Ownership: Using this application does not transfer ownership of creative work to Atom Image, Inc.
3. Information We Collect
- Account Information: Name, email, and business contact details.
- Google Calendar Data: Accessed solely for syncing photography appointments.
- Payment & Invoicing Data: Handled via Stripe and Square. We do not store sensitive financial credentials.
4. Google API Disclosure (Limited Use)
Pictokey adheres to the Google API Service User Data Policy, including Limited Use requirements. We do not share or sell your Google user data to third-party advertisers.
5. Third-Party Service Providers
We share necessary data with Firebase (Authentication), Stripe & Square (Payments), and Cloudflare (Infrastructure).
6. Data Security & Protection
We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, or misuse:
- Encryption in Transit: All data transmitted between your device and our servers is protected using HTTPS/TLS encryption.
- Encryption at Rest: Data stored in Firebase is encrypted at rest by Google Cloud infrastructure.
- Access Controls: Only authenticated users can access their own data. Role-based access controls restrict data visibility to authorized parties.
- Payment Security: Payment and invoicing data is processed exclusively by PCI-compliant providers (Stripe and Square). We do not store raw payment credentials.
- Google Credentials: We never store your Google account credentials. Authentication is handled entirely by Google's OAuth 2.0 infrastructure.
7. Data Retention & Deletion
We retain your information only for as long as necessary to fulfill the purposes described in this policy:
- Google Calendar Data: Accessed in real time for appointment syncing and not stored beyond your active session. Sync data is removed upon account deletion.
- Account Information: Name, email, and business contact details are retained for as long as your account remains active.
- Booking & Event Records: Scheduling and invoicing records are retained for up to one (1) year from the date of the event for business record-keeping purposes. After this period, records are deleted or anonymized.
- Deletion Requests: You may request deletion of your data at any time by emailing [email protected]. We will process your request within 30 days and confirm once deletion is complete.