Privacy Policy
Last updated November 2026
Who we are
Shoot Planner (“we”, “us”) provides business-management software for photographers and event entertainment businesses. For the personal data of your own clients that you store in the platform, you are the data controller and we act as your data processor.
What we collect
Account data (your name, business name, email, password hash). Customer data you enter (your clients’ names, contact details, event details). Payment data is handled by our payment processor (Stripe); we do not store card numbers. Usage and technical logs needed to run and secure the service.
How we use it
To provide the service: managing enquiries, events, contracts, payments, communications and team coordination on your behalf; to send service emails; to maintain security; and to meet legal obligations. We do not sell personal data or use it for advertising.
Legal bases (UK GDPR)
Performance of a contract (providing the service), legitimate interests (securing and improving the service), consent (where required, e.g. optional communications), and legal obligation (e.g. financial record-keeping).
Processors we use
Hosting and database (cloud infrastructure providers), email delivery, payment processing (Stripe), and AI (Anthropic, whose Claude models write drafted replies, the assistant’s answers, Ask AI reports and shoot briefs; it receives only the enquiry, booking or question each feature needs, processes it to return the answer, and does not train its models on it). Each is bound by data-processing terms. A current list is available on request.
AI features
In the iPhone, iPad and Mac apps, AI features are off until you allow them: the first time you use one, the app explains what is sent to Anthropic and asks for your permission. You can turn them off at any time in App settings → AI features.
Retention
We keep personal data for as long as your account is active and as needed to provide the service, then delete or anonymise it within a reasonable period, subject to legal retention requirements.
Your rights
Under UK GDPR you may request access, correction, erasure, restriction, portability, and to object to processing. Account owners can export or erase individual client records directly in the app, and can delete their whole account in the iPhone, iPad or Mac app (App settings → Delete account); see our Your data page. For other requests contact us and we will respond within one month.
Security
We use encryption in transit, hashed passwords, access controls and reputable infrastructure providers. See our Security page for more detail.
International transfers
Where data is processed outside the UK/EEA, we rely on appropriate safeguards such as adequacy decisions or standard contractual clauses.
Contact
For any privacy request or question, contact the account owner via the email on file, or reach us through the Contact page.