Privacy Policy

About this policy

Lightwork provides real estate photography and related booking and delivery services through lightwork.com.au. This policy explains what information we collect, why we use it, how it is handled, and the choices available to you.

Information we collect

When you create an account or make a booking, we may collect your name or email address, property address, property occupancy status, selected services, appointment details, delivery email addresses, and communications with Lightwork. We also process basic technical and authentication information needed to keep your account signed in and operate the website securely.

Google user data

When an authorised Lightwork administrator connects a Google account, Lightwork requests access only for the following operational purposes:

• Read Google Calendar event dates, times, locations and attendee email addresses to identify scheduled property shoots and their intended delivery recipients.
• Create Gmail delivery drafts containing a property delivery link. Lightwork does not automatically send these drafts.
• Read the authorised account's Gmail send-as settings and signature so the normal signature can be included in a draft.

Google OAuth credentials are retained in restricted server-side storage while the integration remains connected. Calendar event data is processed to perform the automation and is not used to build advertising profiles.

How we use information

We use information to provide and manage accounts, bookings, calendar availability, property shoots, file delivery, customer support, security, troubleshooting, and essential service communications. We do not sell personal information or Google user data, use it for targeted advertising, or use it to train general-purpose artificial intelligence or machine-learning models.

Service providers and disclosure

We disclose information only when needed to operate Lightwork, comply with the law, protect users, or respond to a lawful request. Providers used to deliver the service may include Google and Firebase for authentication, calendar and email functions; Vercel for website hosting; and Dropbox for property delivery folders and links. A property address and shoot date may be used in a Dropbox folder name as part of the delivery workflow. These providers process information under their own terms and privacy commitments.

Google API Limited Use

Lightwork's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Google Workspace API data is used only to provide or improve the user-facing features described above.

Storage, security and retention

We use reasonable administrative and technical safeguards, including access controls and encrypted connections, to protect information. No online service can guarantee absolute security. We retain personal information only for as long as reasonably necessary to provide the service, maintain business and legal records, resolve disputes, and enforce agreements. OAuth credentials are retained until the integration is disconnected, access is revoked, or deletion is requested.

Your choices

You may ask to access, correct or delete your personal information by contacting us. You can revoke Lightwork's Google access at any time from your Google Account permissions. Revoking access will stop features that depend on that connection.

Contact us

For privacy questions or requests, email caleb@lightwork.com.au.