Privacy Policy

What Data We Access

When you connect your Google account, the plugin requests the following OAuth scopes and accesses the corresponding Google user data:

How We Use Your Data

Your Google user data is used only to perform the photo publishing actions you explicitly initiate within Lightroom. We do not use your data for advertising, profiling, or any purpose beyond operating the plugin's core functionality.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

What Data We Store

All data is stored locally on your computer:

• OAuth tokens - stored in Lightroom preferences on your machine, used to authenticate with Google
• License key - stored in Lightroom preferences on your machine

The plugin itself sends no data to any server other than Google's APIs (for photo uploads and album management) and LemonSqueezy's API (for license key validation). Our website is a separate matter, and it does use analytics and a form provider - see The website below.

How We Protect Your Data

We apply the following technical and procedural safeguards to protect sensitive data:

• Encryption in transit - All communication with Google Photos API and LemonSqueezy uses HTTPS/TLS. OAuth tokens and photo data are never transmitted over unencrypted connections.
• Secure local storage - OAuth access tokens and refresh tokens are stored exclusively in Lightroom's built-in preferences store on your local machine. That storage is protected by macOS file-system permissions (user-only read/write access). No credentials are held on any external server.
• No token logging - OAuth tokens are never written to log files, analytics systems, or any UI element. The only credential-derived information displayed is your Google account email address, used solely to confirm which account is connected.
• Minimal-privilege access - The plugin requests only the narrowest OAuth scopes required for its core functions. It is technically unable to access photos or albums not created by the plugin (enforced by Google API restrictions since April 2025).
• Token expiry and revocation - Access tokens expire automatically (typically within 1 hour). Refresh tokens are used only to obtain new short-lived access tokens without re-prompting you. Revoking access at myaccount.google.com/permissions immediately invalidates all tokens.

What We Do Not Do

• We do not store your photos on our servers
• We do not sell your data, and we do not share it with anyone except the service providers listed below, who process it on our behalf
• We do not use your data for advertising or profiling
• We do not collect plugin usage data - the plugins do not phone home
• We do not access photos you did not upload through the plugin (enforced by Google's API restrictions since April 2025)

The Website

Everything above is about the plugins, which run on your own machine. This section is about lightroom-tools.com, which is an ordinary website and does collect some data about visitors.

Analytics

• Cloudflare Web Analytics - anonymous traffic counts (pages visited, referrer). No cookies, no personal data.
• Google Analytics 4 - page views, button clicks and scroll depth, so we can see which pages work. IP addresses are anonymized and Google's advertising signals are turned off. It sets cookies (_ga, _ga_*).

Google Analytics only runs if you accept it. The first time you visit, we ask. Until you say yes, it is not loaded at all - no script, no cookie. If you opt out, it stays off and we clear any analytics cookies left on your device. You can change your mind by clearing this site's data in your browser, which brings the question back.

Cloudflare Web Analytics is not part of that question, because it sets no cookies, stores no identifier and cannot recognise you - it only counts page views.

Forms

Our contact form, feedback form and post-purchase survey are handled by Formspree, which receives and stores what you type into them - your email address, and (on the contact and feedback forms) your name, message and rating - and forwards it to us by email. See Formspree's Privacy Policy. We keep these messages for as long as we need them to answer you and to keep a record of support history, and you can ask us to delete yours at any time.

There are two places we ask for your email. The first is the free Lightroom presets: when you download them you give us your email so we can send them to you and keep a record of the request. The second is the thank-you page you land on after buying a plugin, where you can choose to join our mailing list - nothing is captured there unless you fill in that form and tick its consent box.

In both places, if - and only if - you tick the optional consent box, we add you to a mailing list and send you occasional emails about Lightroom tips, new presets, and our own tools - including product launches and subscriber-only discounts. Those lists are handled by MailerLite (see MailerLite's Privacy Policy); every email carries a one-click unsubscribe link, and leaving is instant and permanent. We never sell or share them.

Aside from those opt-in lists, we do not send marketing email. Writing to us, buying a plugin, or answering the post-purchase survey does not subscribe you to anything - only ticking a consent box does. You can ask us to delete your email from either list at any time, and unsubscribing removes you from all future emails.

Buying a plugin

Checkout is handled entirely by LemonSqueezy, which acts as the merchant of record: it takes your name, email and payment details, and we never see or store your card details. After a purchase, LemonSqueezy sends you back to a thank-you page on our site. We remove your email address from that page's web address before any analytics script reads it, so it is not recorded in the analytics above. If you choose to join the mailing list from that page, the form arrives pre-filled with that same address to save you typing it out; nothing reaches MailerLite unless you submit the form with the consent box ticked.

Third-Party Services

These are everyone who receives data from the plugins or the website:

• Google Photos API - used by the Google Photos plugin to upload photos and manage albums. Subject to Google's Privacy Policy.
• LemonSqueezy - checkout, payments and license key validation. Subject to LemonSqueezy's Privacy Policy.
• Cloudflare - hosts the website and its downloads, and provides Web Analytics. As host it processes standard technical logs, including IP addresses. Subject to Cloudflare's Privacy Policy.
• Google Analytics - website analytics (see above).
• Formspree - receives and stores what you submit through our forms (see above).
• MailerLite - stores the email addresses collected on the free-presets page and on the post-purchase thank-you pages and, for those who opt in, sends the presets email and our occasional updates, all with one-click unsubscribe. Subject to MailerLite's Privacy Policy.

The Portfolio Website product (Keptfolio) is a hosted service with its own separate privacy policy, at keptfolio.com/privacy.

Your Rights

You can ask us to show you the personal data we hold about you, correct it, or delete it. You can also object to how we use it, or ask for a copy. To do any of these, email support@lightroom-tools.com - there is no account to log into, so email is the way. We will respond within 30 days, and we will not charge you for it.

In practice the data we hold about you is small: whatever you typed into a form, and your purchase record at LemonSqueezy. The plugins' own data - your photos, your OAuth tokens, your face data - stays on your computer, so it is not ours to hand over or delete; you control it directly, as described above.

Data Deletion

• Revoke Google access: Disconnect your account in the plugin settings, or revoke access at myaccount.google.com/permissions
• Deactivate license: Use the deactivate option in plugin settings to clear your license data
• Uninstall: Remove the plugin from Lightroom to delete all locally stored data

Face Tagger - Biometric Data

This section applies only to the Face Tagger plugin. It describes how the plugin handles face data (biometric identifiers and biometric information as defined by laws such as Illinois BIPA and GDPR Art. 9).

• Everything stays on your Mac. Face Tagger detects and recognizes faces using AI that runs entirely on your computer (InsightFace for face encoding, YOLO for body detection). Face images, face encodings (512-dimensional numeric vectors), and scan results are stored in a local SQLite database (face_data.db) next to the plugin folder.
• Nothing is uploaded. The plugin does not transmit your photos, face encodings, or any derived biometric data to our servers, to any cloud service, or to any third party. After a one-time model download at first launch (~500 MB of public AI model weights), the plugin operates fully offline.
• Model weights source. On first launch, the plugin downloads InsightFace (ArcFace buffalo_l) and YOLO model weights from their respective public CDNs. These are the AI models themselves - no personal data is sent to download them. After that initial download, no further internet access is required for face recognition.
• You are the controller. You alone decide which photos to scan, which faces to train, and which names to assign. We have no access to any of this data.
• Deletion:
  • Remove a specific person: Library > Plug-in Extras > Manage People & Data > Delete Person erases that person's training encodings and all scan-result rows referencing them.
  • Remove all face data: delete face_data.db from the plugin parent folder, or uninstall the plugin.
  • Uninstalling the plugin from Lightroom's Plug-in Manager does not delete face_data.db automatically - remove the file from disk as well if you want a clean slate.
• Retention: face data is retained only on your machine, only for as long as you keep the plugin installed and the database file in place. There is no fixed retention period; you delete it when you want to.
• No sharing or sale. We do not and cannot sell, share, trade, or otherwise transfer your biometric data. It never reaches us.
• GDPR (EU/UK users): you act as both the data controller and the data processor of the biometric data Face Tagger generates. We are not in the data flow and have no processor relationship with you regarding this data.
• BIPA (Illinois users): biometric identifiers (face geometry) and biometric information derived from your photos are collected by Face Tagger running on your own computer, solely to provide the face-recognition feature you purchased. The data is stored on your device, retained only at your discretion, and is never disclosed, redisclosed, sold, leased, traded, or otherwise profited from by Lightroom Tools.
• License validation: the only outbound network call Face Tagger makes is to LemonSqueezy for license-key activation and deactivation. No biometric data, photo data, or face encodings are included in that call - only the license key and a machine identifier.

Contact

For privacy inquiries, email support@lightroom-tools.com or use our contact form. A real person replies, usually within a day.