Privacy policy

Who we are

Obtur is software for photography studios: a client list, forms, quotes, bookings and emails. Each studio decides what it stores about its own clients; Obtur keeps it on the studio's behalf and uses it only to run the service for that studio. Questions: hello@obtur.com.

What we keep

• Studio accounts: name, email and password (the password is held by our authentication provider, never in plain text).
• What a studio's clients send through its forms and booking pages: name, email, phone and the answers to the questions asked.
• Quotes, bookings, payments and the emails sent to a client from Obtur.
• Where a lead came from: the ad or page link they arrived with (UTM parameters, ad click ids, the referring site).

We don't sell any of it, and we don't use one studio's data for another.

Cookies

A login cookie for studio accounts, and on booking pages a cookie that remembers which link a visitor arrived from, so the studio knows where its bookings come from. A studio can also add its own Meta Pixel or Google tag to its booking page; those are the studio's and follow Meta's and Google's policies.

Who helps us run it

Supabase (database and login), Vercel (hosting), Stripe (payments, on the studio's own Stripe account), Resend (email) and Cloudflare Turnstile (spam protection on booking pages). They process data only to provide their service to us.

Meta ad accounts

A studio can connect its Meta (Facebook and Instagram) ad account to see its ad spend next to its bookings. Obtur gets read-only access to the one ad account the studio picks: the account's name, currency and time zone, its campaigns' names and status, and the daily amount spent, overall and per campaign. Obtur can't create, change or pause ads, and reads nothing else from Facebook. The access token is stored encrypted and is used only to read those numbers.

Deleting this data

• On Obtur's Ads page, Disconnect ad account deletes the access token and all the ad data Obtur stored, at once.
• Removing Obtur on Meta's side (Business Settings → Integrations → Connected apps, or Settings → Apps and websites on a personal profile) cuts the access immediately. Obtur deletes the token once Meta tells it the access is gone, usually within the hour; the spend already stored stays until you disconnect or ask us to delete it.
• To have anything else deleted, email hello@obtur.com from the studio's account email. We do it within 30 days and confirm by email.

Your rights

If you are a studio's client, the studio holds your data: ask them to see, correct or delete it, or write to us and we'll pass it on. Every marketing email has an unsubscribe link. A studio can ask us for a copy of its data or to close its account and delete everything.