Privacy Policy

Last updated June 26, 2026

INTRODUCTION AND WHO WE ARE

HDPhotoHub is operated by Dierks Technology, Inc. ("HDPhotoHub," "we," "us," or "our"), a platform that provides real estate photography businesses with tools for media delivery, property listing sites, marketing kits, payment processing, and related services. We are headquartered at 104 S. Freya St., Lilac Flag Building STE 216, Spokane, WA 99202, United States.

This Privacy Policy explains how we collect, use, share, and protect your personal information when you use our website, platform, or services (collectively, "Services"). It also describes the privacy rights available to you depending on where you live.

SCOPE OF THIS POLICY

This Privacy Policy applies to:

Registered users of HDPhotoHub, including real estate photographers, franchise operators, and business administrators ("business users")
End users who access property listing sites, media galleries, or other content delivered through the HDPhotoHub platform ("property viewers")
Visitors to our marketing website at hdphotohub.com

This Policy applies to information collected through our online Services. It does not apply to information collected by telephone or in person, or to third-party websites or services that may be linked from our platform.

Where there is a conflict between this Policy and a more specific privacy notice provided to you at the point of data collection, the specific notice controls.

DATA PRIVACY FRAMEWORK COMMITMENT

HDPhotoHub complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. HDPhotoHub has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF. HDPhotoHub has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this Privacy Policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework program and to view our certification, please visit www.dataprivacyframework.gov.

HDPhotoHub is subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission (FTC).

Dispute Resolution Under the DPF: In compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF, HDPhotoHub commits to refer unresolved complaints concerning our handling of personal data received in reliance on the DPF to JAMS, an alternative dispute resolution provider based in the United States. If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your complaint to your satisfaction, please visit www.jamsadr.com for more information or to file a complaint. These services are provided at no cost to you.

EU, UK, and Swiss DPA Cooperation: HDPhotoHub commits to cooperate with and comply with the advice of the panel established by the EU data protection authorities (DPAs), the UK Information Commissioner's Office (ICO), and the Swiss Federal Data Protection and Information Commissioner (FDPIC) with regard to unresolved complaints concerning our handling of personal data received in reliance on the DPF.

Binding Arbitration: As a last resort and in limited situations, EU, UK, and Swiss individuals may invoke binding arbitration for unresolved complaints concerning our DPF compliance not resolved by any of the other DPF mechanisms. For additional information, please visit www.dataprivacyframework.gov/s/article/ANNEX-I-introduction-dpf.

Onward Transfer Liability: When HDPhotoHub transfers personal data received under the DPF to a third-party agent acting on our behalf, HDPhotoHub remains responsible and liable under the DPF Principles if that agent processes personal data in a manner inconsistent with the Principles, unless HDPhotoHub proves it is not responsible for the event giving rise to the damage.

Government Access: In certain situations, HDPhotoHub may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

INFORMATION WE COLLECT

A. Information You Provide to Us

We collect information you provide directly when you:

Create an account (name, business name, email address, phone number, postal address)
Process payments (credit and debit card numbers, bank account and routing numbers for ACH transfers, billing address)
Upload content to the platform (photographs, videos, audio files, virtual tour files, property addresses, and associated metadata)
Communicate with us (support requests, survey responses, feedback, or dispute notices)
Sign up for marketing communications (email address and communication preferences)
Participate in our referral program (your account information and contact details of referred businesses)

B. Information Collected Automatically

When you use our Services, we automatically collect:

Device and connection information (IP address, browser type and version, operating system, device identifiers)
Usage data (pages viewed, features used, time spent, referring URLs, clickstream data)
Log data (access times, error logs, session identifiers)
General geographic location inferred from your IP address
Cookie and tracking data (see our Cookie Policy at hdphotohub.com/learn-cookies for full details)

C. Information from Third Parties

We may receive information about you from:

Third-party integrations you authorize (such as Google, Dropbox, YouTube, Vimeo, iGuide, CubiCasa, and others)
Payment processors, for transaction verification purposes
Partner brands or franchise operators through whose platform you access our Services
Publicly available sources, for fraud prevention and security purposes

D. Information About Your Clients

If you are a business user of HDPhotoHub, you may upload personal data about your clients and their customers — such as names, email addresses, and property details — to deliver media and listing sites. When you do this, you are the data controller of that information and HDPhotoHub processes it as your data processor under your instructions. Our Data Processing Agreement, available at hdphotohub.com/learn_dpa or upon request, governs this processing.

LEGAL BASES FOR PROCESSING (EEA, UK, AND SWISS USERS)

If you are located in the European Economic Area, United Kingdom, or Switzerland, we process your personal data only on the following lawful bases:

Contract performance (Art. 6(1)(b) GDPR): Processing necessary to create and manage your account, deliver our Services, process payments, and fulfill our contractual obligations to you.
Legal obligation (Art. 6(1)(c) GDPR): Processing required to comply with applicable law, including tax record-keeping, responding to lawful requests from courts or authorities, and fulfilling data subject rights requests.
Legitimate interests (Art. 6(1)(f) GDPR): Processing necessary for our legitimate interests, including:
- Platform security, fraud detection, and abuse prevention
- Service analytics to understand and improve how our Services function
- Sending transactional and service-related communications
- Enforcing our Terms of Use and protecting our legal rights
- Maintaining business records
We have assessed that these legitimate interests are not overridden by your rights and interests. You have the right to object to processing on this basis — see "Your Privacy Rights" below.
Consent (Art. 6(1)(a) GDPR): Where we rely on your consent, including for non-essential cookies and tracking technologies, and for marketing and promotional communications. You may withdraw consent at any time — see "Your Privacy Rights" below for how.

We do not engage in automated decision-making, including profiling, that produces legal or similarly significant effects on you. If we implement such processing in the future, we will update this Policy and provide the required disclosures.

HOW WE USE YOUR INFORMATION

We use the information we collect to:

Create and manage your account and deliver our Services
Process payments and manage billing
Deliver media, listing sites, marketing kits, and other products you or your clients order
Send transactional and service-related emails (order confirmations, delivery notifications, account alerts)
Respond to your questions and support requests
Send marketing and promotional communications where you have opted in or where permitted by applicable law
Analyze usage patterns and improve the functionality, performance, and content of our Services
Detect, investigate, and prevent fraud, unauthorized access, and illegal activity
Comply with legal obligations and respond to lawful government requests
Enforce our Terms of Use and other agreements
Protect the rights, property, and safety of HDPhotoHub, our users, and the public

We do not use your personal information for purposes materially different from those described above without first providing you notice and, where required, obtaining your consent.

HOW WE SHARE YOUR INFORMATION

We do not sell your personal information to third parties for monetary consideration. We do not share your personal information with third parties for their own independent marketing purposes without your consent. We share your information only in the following circumstances:

A. Service Providers and Sub-Processors

We engage trusted third-party companies to perform services on our behalf. These providers process personal data only under our instructions and are contractually required to maintain its confidentiality and security. Categories of service providers include:

Cloud infrastructure and hosting providers
Payment processors (including Stripe and Square)
Email delivery service providers
Analytics providers (including Google Analytics)
Video hosting platforms (including YouTube and Vimeo), when you request media delivery through those platforms
Customer support tools
Third-party integration partners you authorize (including Dropbox, Google Drive, iGuide, and CubiCasa)

A current list of our sub-processors is available upon request by emailing [email protected].

B. Franchise and Partner Brands

HDPhotoHub operates as a white-labeled multi-tenant platform. If you access our Services through a branded partner or franchise operator, that partner may have access to account data and activity within their branded environment as part of the service relationship.

C. Your Clients and End Users

When you use our Services to create property listing sites or deliver media to clients, those clients will be able to access content you have designated for them. This sharing occurs at your direction as the business user.

D. Legal Requirements

We may disclose your information when required by law, court order, or valid legal process, or when we reasonably believe disclosure is necessary to protect our rights, prevent fraud or abuse, or protect the safety of our users or the public.

E. Business Transfers

If HDPhotoHub is involved in a merger, acquisition, financing, or sale of business assets, your information may be transferred as part of that transaction. We will notify you by email or prominent notice on our Site prior to any change in ownership or control of your personal information. Any successor entity will be bound by the terms of this Privacy Policy.

F. With Your Consent

We may share your information with third parties in ways not described above when we have your explicit consent.

DATA RETENTION

We retain personal data for as long as necessary to fulfill the purposes described in this Policy, comply with legal obligations, and resolve disputes. Specific retention periods by data type:

Account and profile data: Duration of your account, plus 3 years after closure
Payment and transaction records: 7 years from the date of transaction (U.S. tax law)
Media and uploaded content: Duration of your account; deleted within 90 days of account closure unless earlier deletion is requested
Marketing consent records: 3 years from your last interaction with us
Support communications: 3 years from the date of the communication
Server and access logs: 90 days
Cookie and analytics data: As described in our Cookie Policy
Legal hold data: Until the relevant legal matter is resolved

When data is no longer required, we securely delete or anonymize it. You may request earlier deletion. See "Your Privacy Rights" below.

INTERNATIONAL DATA TRANSFERS

HDPhotoHub is based in the United States. If you are located outside the United States, your personal data will be transferred to and processed in the United States.

EEA, UK, and Swiss Transfers:

For transfers of personal data from the EEA, UK, and Switzerland to the United States, HDPhotoHub relies primarily on its certification under the EU-U.S. Data Privacy Framework, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework, as described in the "Data Privacy Framework Commitment" section above.

For transfers not covered by the DPF — including personal data transferred under our Data Processing Agreement with business users who act as data controllers — we rely on Standard Contractual Clauses (SCCs) approved by the European Commission, or the UK International Data Transfer Agreement (UK IDTA) for UK transfers. Copies are available upon request by emailing [email protected].

All Other International Users:

By using our Services from outside the United States, you acknowledge that your personal data will be processed in the United States. We take reasonable steps to ensure that internationally transferred personal data is protected in accordance with this Policy and applicable law.

COOKIES AND TRACKING TECHNOLOGIES

We use cookies and similar technologies to operate our Services, remember your preferences, analyze usage, and support marketing. Our Cookie Policy at hdphotohub.com/learn-cookies provides full details, including:

The categories of cookies we use (strictly necessary, functional, analytics, and marketing)
The specific cookies and third-party trackers deployed on our Services
How to manage or withdraw your preferences

EEA, UK, and Swiss users: We obtain your consent before placing non-essential cookies. You may withdraw or change your cookie preferences at any time through the Cookie Preference Center accessible via the "Cookie Settings" link in our website footer.

All other users: You may manage cookies through your browser settings or through the Cookie Preference Center.

YOUTUBE API

Some features of our platform integrate with the YouTube API Services, provided by Google LLC. When you use these features:

We may access publicly available YouTube data (video content, channel information, playlists) to provide functionality you have requested
We do not access or store private YouTube user data unless you explicitly authorize it through the YouTube OAuth flow
You may revoke our access to your YouTube data at any time through your Google Account security settings at https://security.google.com/settings/security/permissions
Data accessed through the YouTube API is subject to Google's Privacy Policy at https://policies.google.com/privacy and Google's Terms of Service

We use YouTube API data solely to provide the platform functionality you have requested. We do not use YouTube API data for independent analytics or share it with third parties for purposes unrelated to your requested service.

YOUR PRIVACY RIGHTS

A. Rights Available to All Users

Regardless of where you live, you may:

Access the personal information we hold about you
Correct inaccurate or incomplete personal information
Delete your personal information, subject to legal retention obligations
Request portability of your personal information in a structured, machine-readable format
Opt out of marketing communications at any time by clicking the unsubscribe link in any marketing email or contacting us at [email protected]

B. Additional Rights for EEA, UK, and Swiss Users (GDPR)

If you are in the EEA, UK, or Switzerland, you also have the right to:

Restrict processing — request that we temporarily or permanently stop processing some or all of your personal data
Object to processing — object at any time to processing based on our legitimate interests (Art. 6(1)(f) GDPR). We will cease processing unless we have compelling legitimate grounds that override your interests, or the processing is necessary for legal claims
Withdraw consent — where processing is based on your consent, withdraw that consent at any time without affecting the lawfulness of prior processing. To withdraw:
- Non-essential cookies: use the Cookie Preference Center via "Cookie Settings" in our website footer
- Marketing communications: click unsubscribe in any marketing email, or contact [email protected]
- Any other consent-based processing: email [email protected] with subject line "CONSENT WITHDRAWAL"
Not be subject to solely automated decisions that produce legal or similarly significant effects — we do not currently engage in such processing

Right to Lodge a Complaint with a Supervisory Authority:

You have the right to lodge a complaint with your local data protection supervisory authority at any time. You are not required to contact us first, although we encourage you to reach out and will work in good faith to resolve concerns.

EEA residents: Contact your national DPA; a directory is available at www.edpb.europa.eu
UK residents: Information Commissioner's Office at www.ico.org.uk
Swiss residents: Federal Data Protection and Information Commissioner at www.edoeb.admin.ch

C. Additional Rights for California Residents (CCPA/CPRA)

Categories of Personal Information Collected

In the past 12 months, we have collected the following categories of personal information from California residents:

CCPA CategoryExamplesCollected

Identifiers: Name, email, postal address, IP address, account ID — Yes
Customer records: Name, address, phone, financial account numbers — Yes
Protected characteristics: Age, sex, national origin — No
Commercial information: Purchase history, subscriptions, credits, orders — Yes
Biometric information: Fingerprints, facial geometry — No
Internet/network activity: Pages visited, features used, cookie data, referral URLs — Yes
Geolocation: General location from IP address; property addresses — Yes
Sensory/audio/visual: Photographs, videos, and audio files uploaded to the platform — Yes
Professional/employment: Business name, job title — Yes
Education information — No
Inferences: Usage preferences derived from interaction data — Yes

Sensitive Personal Information (CPRA)

We collect the following sensitive personal information as defined by the CPRA:

Financial account numbers with access codes (credit card numbers, bank account and routing numbers for ACH payments) — used only to process payments; not used for any secondary purpose
General geolocation inferred from IP address — we do not collect GPS-precise location data

We do not use or disclose sensitive personal information beyond what is necessary to provide our Services. We do not sell or share sensitive personal information.

Your CCPA/CPRA Rights

You have the right to:

Know — request disclosure of the categories and specific pieces of personal information collected about you, the sources, purposes, and third parties with whom it is shared or sold
Access — receive a copy of the personal information we hold about you
Delete — request deletion of personal information we have collected, subject to certain exceptions
Correct — request correction of inaccurate personal information
Opt out of sale or sharing — opt out of the sale or sharing of your personal information, including sharing for cross-context behavioral advertising
Limit use of sensitive personal information — limit our use of sensitive personal information to what is necessary to provide our Services
Data portability — receive your personal information in a portable format
Non-discrimination — we will not discriminate against you for exercising any of these rights

Sale and Sharing of Personal Information

We do not sell personal information for monetary consideration. However, certain disclosures to advertising and analytics partners — including cookie identifiers, IP addresses, and browsing data used for targeted content delivery — may constitute "sharing" under the CPRA.

To opt out of the sale or sharing of your personal information, you may:

Click "Do Not Sell or Share My Personal Information" in our website footer
Email [email protected] with subject line "DO NOT SELL OR SHARE"
Use a browser or device with a recognized Global Privacy Control (GPC) signal enabled — we honor GPC signals as valid opt-out requests

We do not knowingly sell or share the personal information of California residents under 16 years of age without legally required affirmative authorization.

Notice of Financial Incentive

HDPhotoHub offers referral credits to users who refer new businesses to the platform. To the extent this constitutes a financial incentive under the CCPA/CPRA: participation is entirely voluntary, the value of the credit we provide is reasonably related to the value of the referral, and you may withdraw from the referral program at any time by contacting [email protected] without affecting your access to any other Services.

California "Shine the Light"

California residents may request information about our disclosures of personal information to third parties for their direct marketing purposes. To make such a request, contact us at [email protected].

D. Nevada Residents

Under Nevada Revised Statutes Chapter 603A, Nevada residents may opt out of the sale of certain covered information for monetary consideration. We do not currently sell covered information for monetary consideration. If you wish to submit an opt-out request, contact us at [email protected]. We may take reasonable steps to verify your identity before responding.

HOW TO EXERCISE YOUR RIGHTS

Methods to Submit a Request

You may submit a privacy rights request using either of the following methods:

Email: [email protected] — subject line: "PRIVACY REQUEST"
Phone: (509) 515-3338

Verification

To protect your privacy and security, we will verify your identity before processing any request. Verification typically requires confirming your name, email address, and account information. For sensitive requests, additional verification may be required. We will not use information collected for verification for any purpose other than verification.

Authorized Agents (California)

California residents may designate an authorized agent to submit requests on their behalf. To authorize an agent, provide the agent with written, signed permission and notify us before the request is submitted. We may contact you directly to verify the authorization before processing the request.

Response Timeline

We will acknowledge your request within 10 business days and respond within 45 days. If additional time is required, we will notify you and may extend our response by up to an additional 45 days, for a maximum of 90 days total. We will not charge a fee for processing your request unless it is manifestly unfounded or excessive.

CHILDREN'S PRIVACY

Our Services are intended for business use by adults. You must be at least 18 years old to create an account or use our Services. We do not knowingly collect personal information from persons under 18. If we learn that we have collected personal information from a person under 18, we will delete it promptly. If you believe we have collected information from a minor, please contact us at [email protected].

DATA SECURITY

We implement technical and organizational security measures designed to protect your personal information against unauthorized access, alteration, disclosure, or destruction, including:

Encryption of data in transit (TLS) and at rest
Role-based access controls and authentication requirements
Regular security assessments and monitoring
Incident detection and response procedures

No security system is impenetrable. We cannot guarantee the absolute security of information transmitted to us over the internet. If you believe your account has been compromised, contact us immediately at [email protected].

In the event of a data breach that creates a risk to your rights and interests, we will notify affected users and applicable regulatory authorities in accordance with applicable law.

TESTIMONIALS

We may display testimonials or reviews you have provided on our Site. If you would like us to remove your testimonial at any time, contact us at [email protected] and we will promptly do so.

UPDATES TO THIS POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, Services, or legal requirements. When we update this Policy, we will revise the "Last updated" date at the top of this page.

For all users: We will post notice of material changes on our website for a reasonable period before the change takes effect. Your continued use of our Services after that period constitutes acceptance of the updated Policy.

For users in the EEA, UK, and Switzerland: Where a material change affects how we process your personal data, we will notify you directly by email to your account email address at least 30 days before the change takes effect. Where a material change requires your consent under applicable law, we will seek your affirmative consent before the change applies to you.

CONTACT US AND DATA PROTECTION INQUIRIES

If you have questions or concerns about this Privacy Policy, our data practices, or your privacy rights, please contact us:

HDPhotoHub (Dierks Technology, Inc.)
Attn: Data Protection Officer
104 S. Freya St., Lilac Flag Building STE 216
Spokane, WA 99202
United States

Email: [email protected]
Phone: (509) 515-3338

We will respond to your inquiry within 30 days. For formal data subject rights requests, use the methods described under "How to Exercise Your Rights" above.

If you are in the EEA, UK, or Switzerland and are not satisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority as described in "Your Privacy Rights" above.