OlaClip

Data protection

Privacy Notice

This notice explains what OlaClip collects, why it is used, who helps process it, and how to exercise privacy rights during the beta.

Last updated September 22, 2026

1. Scope and responsible party

This notice explains how OlaClip handles personal data about photographers, customers, and visitors. OlaClip is currently offered as a public beta. The operator's legal name, Chilean RUT, and legal domicile will be added before OlaClip begins processing payments or charging platform fees. Privacy requests can be sent now to support@olaclip.com.

2. Data we collect

  • Account data, including name, email address, password credentials stored as a salted cryptographic hash, and account dates.
  • Google sign-in data, including the Google account identifier, verified email, and profile name that Google provides. OlaClip never receives your Google password.
  • Session and media data, including beach, date, time window, photographer name, filenames, file type and size, originals, generated previews, upload status, and listed prices.
  • Customer and order data, including selected media, totals, request or order reference, photographer-confirmed payment status, delivery status, and timestamps. The current selection flow does not require a customer account, email address, or phone number. A customer may optionally provide an email address for a one-time notification when originals are released.
  • OlaClip does not receive card, bank, or transfer credentials for direct beta payments. When integrated payments launch, the payment provider may send transaction identifiers and payment status.
  • Technical and security data, such as request time, IP address, browser or device information, cookies, error reports, and logs needed to operate, troubleshoot, and secure the service.
  • Diagnostic information submitted by the photographer app after an upload, preview, sign-in, session, order, or download error, including the app build and limited technical context needed to investigate the failure.
  • If a photographer enables notifications, OlaClip stores an app notification token linked to the account so the device can receive alerts about new customer requests. Notification permission can be changed in device settings.
  • For specifically designated internal test accounts, OlaClip may record when the app becomes active and its installed build number, then send a push notification and/or email notice to the designated project owner. This notice identifies the tester account but does not report screens viewed, media content, or actions taken inside the app.
  • Messages, reports, and support information you choose to send us.

3. Why we use data

  • Authenticate users, maintain accounts, and prevent unauthorized access.
  • Create and publish sessions; upload, process, protect, preview, sell, and deliver media.
  • Record checkout requests, process future payments, provide receipts and downloads, and handle refunds or disputes.
  • Answer support, privacy, copyright, and safety reports.
  • Detect abuse, investigate incidents, enforce agreements, and comply with legal obligations.
  • Measure reliability and improve OlaClip. Marketing or optional analytics will use consent where required.
  • Coordinate invited internal testing, including limited session-start alerts for designated test accounts.

4. Legal grounds and choices

Depending on the activity and applicable law, OlaClip processes data to provide a requested service or perform a contract, comply with law, protect legitimate operational and security interests, or act with consent. Where processing depends on consent, you may withdraw it for future processing, although prior lawful processing remains valid.

You may decline optional data, but information marked as necessary may be required to create an account, publish media, submit an order, or receive a download.

5. Service providers and disclosures

OlaClip uses service providers for hosting, databases, private object storage, content delivery, authentication, notifications, email, monitoring, and support. Current infrastructure includes Cloudflare-hosted services, Google OAuth, Expo notification delivery, and Apple Push Notification service. When payments are enabled, a disclosed payment provider may process payment and fraud-prevention data under its own privacy notice.

Providers receive only the data reasonably needed for their function and may process it in other countries. OlaClip may also disclose data when required by law, to protect people or the service, in a business reorganization, or with your direction. OlaClip does not sell personal data or uploaded media to advertisers.

6. Public and shared information

Published session pages can display the photographer name, beach, date, session details, protected previews, and prices to anyone with the public link. Private order pages display the customer’s selection, amount, status, and order reference to anyone with that unguessable link. Do not publish information you are not authorized to share or share a private order link unnecessarily. Original files remain locked until the photographer confirms payment and enables delivery.

7. Retention

OlaClip keeps account data while an account is active and for a reasonable period afterward for security, disputes, and legal obligations. Authentication sessions expire automatically. Session media remains until removed by the photographer or OlaClip, subject to completed orders, takedown review, backups, and technical deletion cycles.

Order, payment, refund, and tax records may be retained for the period required by law. Security logs and support records are retained only as long as reasonably needed for their purpose. Beta data may be reset, but deletion from backups can take additional time.

8. Security

OlaClip uses measures designed to protect data, including encrypted connections, restricted storage access, protected previews, and hashed passwords. No system is completely secure. Notify support@olaclip.com promptly if you believe an account or media link has been compromised.

9. Your rights

Subject to applicable law, you may ask whether OlaClip holds your personal data and request access, correction, deletion, blocking, objection, portability, or withdrawal of consent. Send the request to support@olaclip.com, describe what you need, and include the relevant account email or order reference when available. OlaClip may verify identity and retain information that must legally be kept.

You may also complain to the competent Chilean authority or another authority with jurisdiction. This notice will be reviewed for Chile's Law 21.719 before it takes effect on December 1, 2026.

10. Cookies, biometrics, and minors

OlaClip currently uses essential cookies for sign-in security and OAuth flow state. It does not currently use advertising cookies or sell cross-site behavioral profiles.

OlaClip does not currently perform facial recognition or biometric identification. If a future matching feature uses biometric data, it will launch only with a separate notice, appropriate legal basis, safeguards, and consent where required.

People who cannot legally consent or contract on their own should use OlaClip only through a parent or guardian. Contact us to report personal data involving a minor that should not be on the service.

11. Updates

Material changes will be posted here with a new date and, where required, communicated directly or presented for consent. Final production disclosures will identify the operator, payment providers, international processing, and commercial retention requirements before live payments begin.