Privacy Policy
My Boudoir Portal was built on a foundational belief: your clients' images are private, intimate, and sensitive. They should never pass through a server you do not own and control. This policy explains exactly how our architecture protects that privacy by design — not by policy alone.
Last updated: June 2026
The most important thing to understand about My Boudoir Portal's privacy architecture: Your client image files are never stored on My Boudoir Portal servers. They are stored in your own cloud storage account, which you create and control independently. My Boudoir Portal provides the software interface — you own and control the data.
My Boudoir Portal is a software platform that provides boudoir photographers with a branded client portal, cinematic gallery reveal experience, and ordering system. Unlike traditional gallery software that stores your client images on its own servers, My Boudoir Portal uses a self-hosted architecture.
During setup, you create your own account with a third-party cloud storage provider and connect it to My Boudoir Portal by entering your account credentials in your settings. When you upload client images through My Boudoir Portal, those images are written directly to your personal cloud storage account — not to any server owned or operated by My Boudoir Portal.
When your client views their gallery, images are served from your cloud storage account through My Boudoir Portal's delivery infrastructure in transit, but are not stored, cached, or retained by My Boudoir Portal at any point.
Studio Account Data: When you create a My Boudoir Portal account, we collect your name, email address, studio name, and billing information processed through our payment provider. We also store your studio branding settings (logo URL, brand colors, studio contact information) and your cloud storage credentials in encrypted form.
Client Record Data: When you add a client inside your My Boudoir Portal dashboard, we store the client's name, email address, session date, and gallery status information. We do not store client payment information. We do not store client image files.
Order Data: If you are on the Full System tier, we store order records including package selections, item selections, and order totals. Payment processing is handled by your designated payment processor and is not stored by My Boudoir Portal.
Usage Data: We collect basic usage data including login timestamps, dashboard activity, and gallery status changes. This data is used to operate the platform and is not sold to any third party.
Client image files. Your client photographs are stored in your cloud storage account, not ours. We do not have persistent access to your image files beyond the transit required to serve them to your clients during gallery viewing.
Client payment information. We do not process or store your clients' payment details. All client payments route through your designated payment processor.
Cross-studio data. Because each studio connects its own independent cloud storage account, there is no shared storage environment. It is architecturally impossible for one studio's client data to be exposed to another studio through the My Boudoir Portal platform.
My Boudoir Portal requires you to create and maintain your own account with a recommended third-party cloud storage provider. This account is yours, created under your own name or business name, billed directly to you by that provider (approximately $0.50 to $2.00 per month for a typical boudoir studio), and fully under your control.
The credentials you provide to My Boudoir Portal to connect your storage account are stored in encrypted form in our systems and are used solely to read and write files on your behalf. My Boudoir Portal employees do not access your cloud storage account or the files stored within it.
If you cancel your My Boudoir Portal subscription, your cloud storage account and all files within it remain intact and under your control. Canceling My Boudoir Portal does not delete your files. You continue to own and control them regardless of your relationship with My Boudoir Portal.
My Boudoir Portal implements industry-standard security measures including encrypted storage of credentials, HTTPS encryption for all data in transit, and access controls that limit data access to authenticated studio accounts only.
You are responsible for maintaining the security of your My Boudoir Portal account credentials and your cloud storage account credentials. My Boudoir Portal is not liable for unauthorized access resulting from compromised credentials that were not stored or transmitted by My Boudoir Portal.
In the event of a security incident affecting My Boudoir Portal infrastructure, affected studio account holders will be notified within 72 hours of confirmed discovery.
Studio account data and client records are retained for the duration of your active subscription. Upon cancellation, your account data is retained for 30 days to allow for reactivation, then permanently deleted from My Boudoir Portal systems.
Client image files stored in your cloud storage account are not affected by account cancellation. Those files remain in your storage account and are your responsibility to manage, retain, or delete.
You may request deletion of your account data at any time by contacting My Boudoir Portal support. Deletion requests will be processed within 10 business days.
My Boudoir Portal does not sell, rent, or share your data or your clients' data with third parties for marketing or advertising purposes.
My Boudoir Portal uses the following categories of third-party service providers to operate the platform: payment processing, cloud infrastructure, and email delivery. These providers are bound by data processing agreements and are not permitted to use your data for purposes other than providing their services to My Boudoir Portal.
If you use the GHL webhook integration available on the Full System tier, order data you elect to send to GoHighLevel is governed by GoHighLevel's own privacy policy and terms of service.
Questions about this Privacy Policy or how My Boudoir Portal handles your data may be directed to our support team. We are committed to responding to privacy inquiries within 5 business days.
We are happy to walk you through the architecture before you sign up.
Join the Beta Program