Privacy Policy

The controller is Adriano Minnella, operator of FindAShoot, Wehlistraße 45/3, 1200, Austria. Contact: info@findashoot.com. Privacy requests: privacy@findashoot.com or info@findashoot.com.

At registration: email address, password (hashed), display name, role (Model / Photographer / MUA).

In your profile (optional): stage name, bio, city, country, categories, photos, Instagram URL.

During use: messages (stored encrypted), booking inquiries, favorites, activity logs (login, logout, profile changes).

Identity verification (temporary): when verification is requested, a selfie and a photo of a valid identity document — retained solely for the duration of the verification process, then permanently deleted.

Support requests: subject, message, category, email address, name (for non-logged-in users), IP address and browser type.

Technical: IP address, browser type (for security and abuse prevention), session cookie.

Chat images: images you attach to a private message, together with any caption. Camera metadata (EXIF, including GPS location) is removed during upload and is never stored.

Providing platform features (profile, search, messaging, booking inquiries).

Platform moderation and safety.

Showing recent activity status (last sign-in) to administrative staff for moderation and support purposes.

Communication for account requests, password reset, and notifications.

Legal obligations (e.g. upon request from authorities).

We process the data necessary to provide the features you request under Art. 6(1)(b) GDPR. Optional Collections permissions and subscribed newsletters rely on consent, Art. 6(1)(a); refusal does not prevent use of the other services.

Security, abuse prevention, management of disputes and public discovery use legitimate interests under Art. 6(1)(f), subject to your rights and a balancing assessment. Mandatory disclosures and applicable record-keeping duties rely on Art. 6(1)(c). You may withdraw consent and object to processing based on legitimate interests.

Uploaded photos are stored on our servers and are visible as part of your public profile.

By uploading, you confirm that you own all necessary rights to the images.

Photos can be deleted at any time from your dashboard. Changes to publicly visible photos are subject to admin review.

Uploaded photos may be automatically analysed by an AI model that suggests photographic style categories (e.g. portrait, fashion). Suggestions are reviewed by our admin team and only affect where a photo appears in discovery filters — never your account status.

For identity verification, users may be asked to upload a selfie and a photo of a valid identity document.

This data is processed solely for verification purposes and is accessible only to authorised administrative staff.

The identity document images and selfie are permanently deleted as soon as the verification process is concluded (approved or rejected) — in any case within 7 business days of receipt.

No copy of this data is retained after the verification process is complete.

Private messages are stored encrypted (AES-256).

Messages are not actively monitored. The operator accesses messages only in the case of a user report, reasonable suspicion of abuse, or legal order.

Reported messages are stored in plaintext for moderation review.

Images attached to messages are stored encrypted (AES-256-GCM), each with its own key material, and are never publicly accessible: they can be retrieved only by the two participants of the conversation, through an authenticated request.

Images from a contact whose media you have not yet chosen to reveal are delivered covered — their content is not loaded into your browser until you ask for it. You decide whether to open them, at your own risk, and you can cover that contact's images again at any time.

Chat images are deleted automatically 7 days after they are sent, and immediately if you delete your account.

The content of chat images is never analysed automatically: no classifier examines them and they are never sent to a third party for that purpose. An image is looked at only if someone reports it, and only by a person.

If you report an image, a copy of it is frozen for the moderation review and kept with the report beyond the 7-day limit (see section 9). The image is hidden from you immediately.

Hetzner provides hosting in Germany. Cloudflare provides DNS/email routing, R2 photo storage and Workers AI photo-category suggestions. Hosting in Germany does not mean every processing operation stays in the EU.

MailerSend is the configured primary email transport; Brevo is a configured alternative. Email delivery involves recipients’ addresses, subjects and message content. DeepSeek (China) processes editorial texts submitted by administrators for translation/drafting; personal information included in those texts is also transmitted. Private chat images are not sent to AI classifiers.

Some providers operate outside the EEA. Applicable contractual safeguards, transfer arrangements and a copy of the relevant guarantees can be requested at privacy@findashoot.com. We do not sell personal data. Authorities receive information only where a legal basis permits or requires it.

Account data is retained for as long as the account is in use. Any sign-in counts as use. After 12 months without a sign-in we send you an email; if you do not sign in within 30 days, your profile is taken out of search and the listings, while the data itself is kept in full. After 24 months without a sign-in we send a final notice and delete the account 30 days later. Every sign-in resets these periods.

Account closure removes profiles, owned Collections and Shoot plans, team memberships/invitations and references to your photos in others’ Collections. Other participants’ collaboration records may remain without the deleted creator’s plan title. Some administrative records remain as described below; deletion is not complete anonymisation of every record.

A deletion record containing account ID, email, display name, role, deletion date and reason is kept for five years for handling disputes and documenting account closure. Activity logs, including any identifiers in their metadata, are scheduled for deletion after 24 months. Administrative moderation logs: 60 months; message reports: 36 months from creation. These are retention policies, not a blanket five-year requirement imposed by the DSA.

Photo-consent logs are scheduled for deletion 60 months after creation. Revoked agency authorisations and associated contracts: 60 months after revocation. Collections consent history and account Terms receipts are removed on account closure; Collections history is otherwise kept with the account.

Where financial records are generated, applicable accounting/tax duties determine retention, normally seven years in Austria; specific statutory duties or ongoing proceedings can require longer periods. A universal ten-year period does not apply to all data.

On account closure, the sender’s message text is replaced by a placeholder. Conversations and necessary structural records remain for the other participant. Reported copies can remain for moderation and disputes.

Chat image files expire after seven days and are removed by scheduled cleanup; limited attachment metadata remains to show expiry. A reported image has a separate evidence copy retained with its report (normally 36 months), followed by storage cleanup. A documented legal hold may delay deletion. Operational failures are retried; copies required for proceedings are restricted to that purpose.

Identity-verification documents and selfies are deleted when verification concludes, within the stated verification window. Requests about retention, restricted records or erasure can be sent to privacy@findashoot.com.

You have the right to: access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection (Art. 21 GDPR).

To exercise your rights, contact: privacy@findashoot.com

You have the right to lodge a complaint with the Austrian Data Protection Authority (dsb.gv.at).

You can submit inquiries via the contact form on our support page. We store the subject, message, category, your email address, as well as IP address and browser type.

If you are not logged in, your name and email address are additionally required.

This data is used solely to process your request and is not shared with third parties after the ticket is resolved.

Replies to your ticket are sent via email to the address on file.

We use only technically necessary cookies (session cookie for authentication).

No tracking, advertising, or analytics cookies are set.

We use Umami — a privacy-friendly, self-hosted analytics tool. Umami is cookieless, anonymizes IP addresses, does not track users across sites, and all analytics data is stored on our own servers (Hetzner, EU). No Google Analytics, Facebook Pixel, or similar third-party trackers are used.

Public profile visibility includes discovery and editorial selections on FindAShoot, including the site’s display pages on partner-studio monitors. Profile visibility controls and photo removal apply to these views; cached screens may update later.

A public profile and Collections permission do not by themselves authorise separate social-media campaigns, advertising or external press use. Those uses require a separate appropriate permission and rights clearance. Contact privacy@findashoot.com to withdraw a permission or request removal. Copies held independently by third parties cannot be remotely recalled. Uploaders must have the necessary image and personality rights; the operator’s own legal responsibilities remain unaffected.

Collections save references to photos for inspiration and shoot planning. Access depends on the collection: its owner, an authorised team or visitors to public/shared collections. Photos remain subject to source-profile visibility, moderation and the profile owner’s separate optional consent.

Collections consent starts off for each profile. You can refuse without losing access to FindAShoot and withdraw in profile settings. Withdrawal prevents new saves and hides previous photos, covers and moodboards; internal references remain and may reappear if you consent again. We record the decision, date, version, language and notice text separately from general Terms acceptance.

Shoot plans contain participants, roles, invitations, dates and location. Public plans can expose team and descriptive content; the dedicated exact-location field is limited to the creator and accepted team. Do not place private addresses in public descriptions. Invitations use registered profiles; organisers can share a registration link externally without submitting a non-member’s email to FindAShoot.

Accepting a team invitation is not proof that a shoot took place. Completion by the organiser creates collaboration records; VERIFIED does not guarantee attendance, identity, payment or quality. A completed Shoot counts once in the visibility score, irrespective of team size. Your export includes your Collections, Shoot records, conversations and Collections consent history, subject to others’ rights. Contact privacy@findashoot.com for additional access or correction requests.