Privacy Policy

Last updated: May 21, 2026

This Privacy Policy describes how Professional Image Works (operated by RG Holdings LLC) collects, uses, and protects information about you when you use our website and services at professionalimageworks.com.

Short version: We collect your email + the photo you upload, use them only to fulfill your order, never sell them to anyone, and delete the photo within 30 days. We use Stripe for payments and Brevo for sending you delivery emails. We use Microsoft Clarity to understand how people use the site. That's basically it.

1. Information we collect

Information you give us directly

Email address — required to place an order; used to send you the finished photo and any support correspondence.
Photo(s) you upload — the image file(s) you submit for editing.
Optional notes — any instructions you include with your order (e.g. "please remove the background distractions on the left").
Payment information — handled by Stripe; we receive only a billing zip code, last 4 digits of your card, and a transaction confirmation. We do not see or store full card numbers.

Information collected automatically

Server logs — IP address, browser type, pages visited, timestamps. Used for security + debugging. Rotated after 90 days.
Microsoft Clarity — anonymous session recordings + heatmaps used to understand how people use the site. Clarity strips form input by default. Microsoft's privacy statement.
Cookies — we use a small number of functional cookies (cart, checkout session). No advertising cookies. No tracking across other sites.

2. How we use information

We use the information we collect to:

Process and deliver your order.
Send you order-status and delivery emails.
Respond to your support requests.
Detect and prevent fraud or abuse.
Understand site usage (via Clarity) and improve the product.
Comply with legal obligations (e.g. tax reporting, law-enforcement requests with valid legal process).

3. How long we keep your data

Data type	Retention
Photo(s) you uploaded	Deleted within 30 days after delivery
Finished photo(s) we delivered	Download link expires 30 days after delivery, then file is deleted
Order record (email, service, amount, date)	7 years (US tax requirement)
Email correspondence	3 years
Server logs	90 days
Clarity session recordings	Per Microsoft Clarity defaults (~30 days)

You can request earlier deletion of your photo (before the 30-day default) by emailing [email protected] with your order ID. We will confirm deletion within 5 business days.

4. Who we share information with

We share information only with the service providers we need to operate the business:

Stripe — payment processing. Stripe Privacy Policy.
Brevo — transactional email delivery. Brevo Privacy Policy.
Backblaze B2 — file storage for the finished photo download links. Backblaze Privacy Policy.
Cloudflare — DNS, CDN, and email routing. Cloudflare Privacy Policy.
Microsoft Clarity — anonymized site-usage analytics. Microsoft Privacy.

We do not sell your data. We do not share your photos with anyone outside this list, ever. We do not use your photos to train AI models without your explicit, opt-in written permission.

5. AI processing of your photo

Our pipeline uses third-party AI image models (currently from OpenAI and Google) to perform the actual editing work. When we pass your photo to these models for processing, the model providers' terms of service apply to that transient API call. As of this writing:

OpenAI's API data-usage policy states they do not train on data submitted via their API.
Google's Gemini API terms state that paid-tier API requests are not used to train Google's models.

We use the paid tier of both providers, which excludes our requests from their training data.

6. Your rights

You have the right to:

Know what data we have about you (email [email protected] with the subject "Data request").
Request deletion of your photo and order history (subject to the 7-year tax retention requirement on order records).
Object to or opt out of Clarity tracking via your browser's Do Not Track setting or an ad-blocker.
If you are in California, the CCPA gives you additional specific rights — see below.
If you are in the EU/UK, the GDPR gives you additional specific rights — see below.

6.1 California (CCPA)

California residents have the right to know what personal information is collected, the right to delete personal information, the right to opt out of sale of personal information (we do not sell), and the right to non-discrimination for exercising these rights. Email [email protected] with subject "CCPA request" to exercise these rights.

6.2 EU / UK (GDPR)

Our lawful basis for processing your data is the performance of a contract (delivering the photo edit you paid for) plus your consent (Clarity analytics). You have the right to access, rectify, erase, restrict processing, data portability, and to lodge a complaint with your local data protection authority. Email [email protected] with subject "GDPR request" to exercise these rights.

7. Children

The Service is not intended for children under 13. We do not knowingly collect information from children under 13. If we learn we have collected such information, we will delete it. Parents/guardians can contact [email protected] if they believe their child has used the Service.

8. Security

We use HTTPS for all site traffic, encrypted storage at rest for uploaded photos, and TLS for SMTP delivery. No system is perfectly secure; we make a reasonable effort but cannot guarantee against all attacks.

9. Changes to this policy

We may update this policy from time to time. Material changes will be announced via email to anyone with an active order; the "Last updated" date at the top reflects the most recent change.

10. Contact

Questions about your data or this policy: [email protected]

RG Holdings LLC, doing business as Professional Image Works.