Privacy Policy

Effective date: July 27, 2026

TrueNorth Frames (the “Site”) is owned and operated by Yogesh Kumar Rajakumar Vimaleswari, operating as Yogesh Strategy and Analytics. You can contact us at aceinnovate21@gmail.com.

1. Purpose

The purpose of this Privacy Policy is to inform users of our Site of the following:

  • The personal data we collect;
  • How we use collected data;
  • Who has access to the data collected;
  • The rights of Site users; and
  • The Site’s cookie policy.

This Privacy Policy applies in addition to the terms and conditions of our Site.

2. Consent

By using our Site, users agree that they consent to the conditions set out in this Privacy Policy and to the collection, use, and retention of the data listed in this Privacy Policy.

3. Personal data we collect

We only collect data that helps us achieve the purposes set out in this Privacy Policy. We will not collect any additional data beyond the data listed below without notifying you first.

Data collected automatically

When you visit and use our Site, we may automatically collect and store:

  • IP address;
  • Hardware and software details (such as browser and device information); and
  • Usage data, such as pages visited, features used, and photographer profiles viewed.

Data collected in a non-automatic way

We may also collect the following data when you perform certain functions on our Site:

  • First and last name;
  • Email address; and
  • Profile content (bio, tagline, specialties), portfolio photos and videos, connected social-media data for Trust Score calculation (Instagram, Facebook, Google), booking details, messages and attachments, and reviews.

This data is collected when users create an account, build or edit their photographer profile, connect their social media accounts, book a photographer, send messages, or leave reviews.

4. How we use personal data

Data collected on our Site will only be used for the purposes specified in this Privacy Policy or indicated on the relevant pages of our Site. We will not use your data beyond what we disclose here.

The data we collect automatically is used to operate and secure the platform, keep users logged in, display photographer profile-view counts, diagnose technical issues, prevent fraud and abuse, and understand which features are used so we can improve the service.

The data we collect when you perform certain functions is used to create and manage your account, operate the marketplace and facilitate bookings, calculate and display Trust Scores, enable messaging between clients and photographers, publish reviews, and send transactional notifications about bookings and messages.

5. Who we share personal data with

Service providers

We may share user data with the following third-party service providers who process it only to provide services to us:

  • Supabase — database and authentication (name, email, account credentials, messages, bookings, reviews, profile content, IP address on login);
  • Cloudflare — storage of uploaded photos and videos;
  • Vercel — website hosting (IP address, browser/device info, server request logs);
  • Resend — email delivery (email address and notification content for booking/message alerts);
  • Google and Meta (Instagram, Facebook) — when you connect a social account, authentication tokens are exchanged to retrieve public reputation data (follower count, engagement, ratings) for Trust Score calculation; and
  • Google Places — public business/location lookups to retrieve review ratings used in Trust Scores.

These providers will not access user data beyond what is reasonably necessary to achieve the given purpose.

Other disclosures

We do not sell your personal data. We will not share your data with other third parties except: if the law requires it; if it is required for a legal proceeding; to prove or protect our legal rights; or to buyers or potential buyers of this company in the event that we seek to sell it.

If you follow hyperlinks from our Site to another site, please note that we are not responsible for and have no control over their privacy policies and practices.

6. International data transfers

Your data may be stored or processed by our service providers on servers located outside of Canada, including in the United States. By using the platform, you consent to the transfer of your data to these jurisdictions, where it may be subject to the laws of those countries.

7. How long we store personal data

User data will be stored until the purpose the data was collected for has been achieved. When you delete your account or request deletion, we delete or de-identify the personal data associated with your account, such as your profile, uploaded content, and preferences.

Some data cannot be fully deleted for legal and operational reasons, including:

  • Messages you sent to another user remain visible to that user, since they are also that user’s record of the conversation.
  • Booking, transaction, and payment records we are required to retain for legal, tax, and accounting purposes.
  • Data we must keep to comply with the law, resolve disputes, prevent fraud, or enforce our agreements.

Where we retain such data, we limit it to what is necessary and, where practical, remove information that directly identifies you. Backup copies are removed on our regular backup rotation cycle.

8. How we protect your personal data

We take reasonable measures to protect your personal data. All connections to our platform are encrypted in transit using industry-standard TLS/HTTPS. We host data with established third-party service providers (Supabase, Cloudflare, and Vercel) that maintain their own physical, network, and infrastructure security safeguards. Access to user data is protected by authentication and access controls, including database row-level security policies, and passwords are stored using secure one-way hashing. Access to production data is limited to authorized personnel.

However, no method of transmission or storage is completely secure. While we strive to protect your personal data, we cannot guarantee its absolute security.

9. Children

The minimum age to use our website is 18 years of age. We do not knowingly collect or use personal data from children under 13 years of age. If we learn that we have collected personal data from a child under 13, that data will be deleted as soon as possible. If a child under 13 has provided us with personal data, their parent or guardian may contact our privacy officer.

10. Social platform data

When you connect Instagram, Facebook, or Google, we access only the data necessary to calculate your Trust Score (follower count, post engagement, review ratings). We do not post on your behalf. You can disconnect at any time from your dashboard.

11. How to access, modify, delete, or challenge the data collected

If you would like to know whether we have collected your personal data, how we have used it, whether we have disclosed it and to whom, or if you would like your data deleted or modified, please contact our privacy officer at aceinnovate21@gmail.com.

12. How to opt out of data collection, use, or disclosure

In addition to the methods described above, we provide the following specific opt-out methods:

  • To opt out of the collection and use of your social media data (Instagram, Facebook, Google) for Trust Score calculation, disconnect the linked social account at any time from your dashboard.
  • To opt out of email and in-app notifications about bookings and messages, update your notification preferences in your account settings.
  • To opt out of the collection and use of your personal data on the platform, delete your account, or email aceinnovate21@gmail.com to request deletion, subject to the retention limits described above.

13. Cookie policy

A cookie is a small file, stored on a user’s device by a website, used to collect data relating to the user’s use of the site. You can disable cookies in your browser settings, but this may decrease the quality of your experience. We use the following types of cookies:

  • Functional cookies — strictly necessary session cookies used to authenticate users and remember your selections so you stay signed in.
  • Third-party cookies — may be set by Google and Meta (Instagram, Facebook) when you sign in or connect your social accounts, to enable secure authentication and account connection.

We do not use cookies for advertising, retargeting, or cross-site tracking.

14. Modifications

This Privacy Policy may be amended from time to time to maintain compliance with the law and to reflect changes to our data collection process. When we amend it, we will update the effective date at the top of this page. We recommend that users periodically review this Privacy Policy. If necessary, we may notify users by email of changes.

15. Contact

If you have any questions, concerns, or complaints, you can contact our privacy officer, Yogesh Kumar R V, at aceinnovate21@gmail.com.