Privacy

In force since September 1, 2026

In short: we collect exactly what the service cannot work without, we sell it to no one, and we install no advertising trackers. Below, in detail: which data, where it is kept and who it is passed to.

Who is responsible for the data

Learning Horizons Hub LLC (State of New York, USA), contact: [email protected].

What data we store

Yours, as the owner of the site

• Email and password. The password is stored only as a hash — we cannot see it and cannot recover it.
• Whatever you entered yourself: your name or studio name, city, contact details for clients, page texts, photographs.
• Your answers in the setup wizard — your genres, what you shoot and for whom.
• A technical trail: when you last signed in, when you published pages. We need it so that live sites are not archived by mistake.
• Subscription status: access period, payment date. We hold no card data — see below.

Your mailbox, if you connect it

Letters to clients are sent from your own mailbox, so the reply arrives there and not to us. For the cabinet to know about a reply, it opens that mailbox and looks through new messages for the ones that answer letters sent from here.

• What we read: the envelopes of new messages — sender, subject, service headers. Exactly enough to tell which message answers a letter of yours.
• What we store: only those replies — the text, the sender, the subject and the date. They go into the client's card, next to the letter they answer.
• What we do not store: everything else in the mailbox. The envelopes of unrelated messages are read on the fly and written nowhere: no text, no subject, no address. All that remains of them is one number, the last message checked, so the next pass does not read the same mail twice.
• We change nothing in the mailbox: it is opened read-only. Messages are not marked as read, not moved and not deleted.
• One action turns it off: remove the mailbox under Connections and the reading stops that same day. Replies already saved stay in the cards until you delete them yourself.

Data of the clients who write to you from the site

An inquiry from the form is a name, a contact and the text of the message. You are the owner of that data; we only store it for you and show it in the CRM. We do not write to your clients, do not add them to any mailings and do not use them for anything of our own.

What we do not collect

• There are no advertising or analytics trackers on the sites at all.
• We never receive bank card details: Stripe takes them on its own page.
• We do not sell or pass data to third parties for advertising. Never, to anyone.

Cookies

Strictly necessary ones only: they keep you signed in and protect forms from forgery. Without them the account does not work. There are no advertising or tracking cookies, which is why you see no consent banner.

Who the data is shared with

Everyone listed below is a provider the service cannot run without. Each receives only what its own work requires.

• Hetzner (Germany) — the server the site runs on and where photographs are stored.
• Supabase (EU servers, Frankfurt) — the database and the sign-in system.
• Cloudflare — protection and acceleration of access to the sites.
• SendGrid — sending email: invitations, password resets, inquiry notifications.
• Stripe — payment processing. Card details go straight to them, bypassing our server.
• Anthropic — text generation in the setup wizard. When you ask it to write the copy for your site, your answers from the questionnaire are sent to the model. Photographs are never sent. If you would rather not, you can write the copy by hand — the wizard allows it.

Where the data physically sits

The server is in Germany and so is the database. The company is registered in the USA, which means access to the data is also possible from the USA, by the people who maintain the service.

How long we keep it

For as long as the account exists. If the site closed for non-payment, the data stays where it is — we delete nothing over a debt. Once you ask for the account to be deleted, we delete everything within 30 days; backups age out naturally over the same period.

Your rights

You can ask us to:

• show what data about you we hold;
• correct anything inaccurate;
• give you a copy of your texts and photographs as a file;
• delete the account and everything connected to it.

An email to [email protected] from the address the account is registered to is enough. We reply within 30 days, usually the same day.

Security

Connections are encrypted and the account is password-protected. Each user’s data is isolated at database level: one site has no technical means of reading another’s data. We do make backups, but we advise you to keep the important originals of your shoots yourself as well.

Children

The service is intended for adults. We knowingly collect no data from anyone under 18.

Changes

If this document changes materially, we will write to you. The date of the latest revision is always shown at the top.