This is not a privacy policy promise. It is an architectural fact. Your client images physically cannot end up on our infrastructure, because of how the system is built, not because of a policy that could change.
You create a cloud storage account during setup that you own and control. Images are served directly from your storage to her browser, never transiting through our servers at any point.
Every studio connects its own separate cloud storage account. There is no shared image layer. It is structurally impossible for one studio's files to be accessed through another studio's portal.
Our platform connects to your storage using credentials stored encrypted. Our team has no master key to client storage accounts. We cannot access your images without your credentials, which we never see in plaintext.
Your images are in your storage account. If My Boudoir Portal ceased to exist tonight, your cloud storage would remain exactly as it is, fully accessible, completely under your control, with no dependency on us.
During setup, you add a CORS policy containing your exact studio portal address. This permits your dashboard to create clients, read gallery information, and upload files from the browser. It does not give another studio permission to use your bucket.
At no step does an image file land on My Boudoir Portal servers. We are the orchestration layer. The files move directly between you and your client.
Questions about security? Email hello@myboudoirportal.com.
Images go from your computer directly to your cloud storage account. My Boudoir Portal does not proxy or touch files during upload.
We store image names, sequence order, and settings in our database, but never the image files themselves. Files stay in your storage.
A push notification fires to her phone. A signed URL is generated pointing directly to your storage account.
The reveal player loads images directly from your cloud storage via the signed URL. Nothing is served from our infrastructure.
Signed URLs expire on your gallery expiry date. When it expires, the URL becomes invalid. Her access ends.
We give straight answers. Email us or read the full privacy policy.