Privacy Policy

Last updated November 5, 2026

This explains what Rollshot collects, why, who can see it, and how to delete it. We don't sell your information, we don't show ads, and we don't use analytics, tracking pixels or session recording.

What we collect

• Account: your email, name, and whether you own a car or shoot cars. If you sign in with Google or Apple, we get your name and email from them.
• Age check: when you sign up we ask your date of birth to make sure you're at least 13. We don't save the date, only that the check passed.
• Creator profile: your photo, city, bio, what you shoot, packages and prices, portfolio photos, Instagram reel links, open dates and username.
• Contact details: the Instagram handle and phone number creators choose to add.
• Garage: your cars and car photos, if you add them.
• Activity: requests, offers, bookings, crew jobs, messages and notifications.
• Push notifications: if you turn them on, an address from your browser's push service so we can reach this device.
• Technical: sign-in cookies that keep you signed in, your light or dark theme choice (saved only in your browser), and standard server logs such as IP address and browser type, kept by our hosting providers for security.

Who can see it

• Everyone: creator profiles, portfolio photos, packages, prices and open dates, finished shoot posts, open requests on the requests board, and cars in your garage marked Shared (you can switch any car to Private in your garage).
• People you deal with: messages are seen only by the two people in the chat. A creator's phone number and Instagram are shown only to clients with a confirmed shoot.
• Rollshot: the people who run Rollshot can access the database to run the site, keep people safe and answer legal requests.

Services we use

These companies process data for us only to run Rollshot:

• Supabase: database, sign-in, sign-in emails and photo storage.
• Vercel: hosting the website.
• Google or Apple: only if you choose to sign in with them.
• Browser push services (Apple, Google, Mozilla): deliver push notifications you turn on. The message is encrypted on the way.
• Instagram: reels on creator pages play in Instagram's own player, which loads from Instagram and follows Instagram's privacy policy.
• Google Calendar: only if you tap "Add to Google Calendar" on a shoot.

We may also share information if the law requires it, or to protect someone's safety.

Emails and notifications

We only email you sign-in links. We don't send marketing emails. In-app and push notifications are about your own shoots, requests and messages, and you can turn push off at any time on the Notifications page or in your browser settings.

Keeping and deleting your data

We keep your information while your account is open. You can delete your account at any time in Settings. That removes your profile, photos, garage, packages, requests, bookings and messages right away. Copies in our providers' backups are erased on their normal schedule, usually within a few weeks.

Your choices

You can see and edit most of your information in the app. To ask for a copy of your data, a correction, or deletion, email us. Depending on where you live (for example California, Virginia, Colorado or Texas), you may have these rights by law, and we honor them for everyone.

Teens and children

Rollshot is not for children under 13, and we don't knowingly collect information from them. If we learn we have, we delete it. If you are 13 to 17, please use Rollshot with a parent's permission and never meet anyone for a shoot without a parent knowing. Parents can email us to review or delete their teen's account.

Security

Data is sent over encrypted connections, and database rules limit each person to their own private information. No system is perfectly secure, so please use a sign-in email that only you can access.

Changes

If we change this policy in an important way, we'll tell you on the site before it applies.

Contact

See also the Terms of Service.