Privacy Policy

Last updated October 17, 2026

Luovex is client-management software for photography and creative studios. It is operated by Arise Digital LLC, which trades as Luovex. This policy explains what the software stores, who else can see it, and how long it is kept.

Two kinds of information, held two different ways

This is the part most policies skip, and it decides who you should ask about what.

Your studio’s own information is held by us. Your name, your email address, your password, your billing details and the settings on your account exist because you gave them to us, and we decide how they are used.

Your clients’ information is held on your instruction. The names, contact details, photographs, contracts and invoices in your workspace are yours to control. We store and process them so the software works, and we do not decide what happens to them. A client who wants their information changed or removed should ask the studio, not us.

A client never creates a Luovex account by themselves. A client record exists because a studio entered it, imported it from a previous system, or invited that person to a portal using an email address the studio supplied.

What is stored

About a studio and the people who work there:

• Name, email address and a password, held as a hash by our sign-in provider.
• Billing details held by Stripe. Card numbers, security codes and expiry dates never reach us.
• What was done in the workspace, and by whom, in an activity log.

About a studio’s clients, entered by the studio:

• Names, email addresses, phone numbers, postal addresses, and the organization and industry they belong to.
• Named individual contacts at that client, and free-text notes a studio writes about them. Some notes are marked shared and visible in the client’s portal; others are not.
• Dates a studio chooses to record, such as a birthday or an anniversary, so they can be reminded of them.
• Projects, sessions and the addresses where work takes place, which are often homes.
• Invoices, payments, contracts and quotes.
• Photographs and video of identifiable people, which is the product’s main purpose.
• On a signed contract: the signer’s typed name, the wording they agreed to, the time, and the network address the signature came from. That record exists so what was agreed can be shown later.
• On a model or property release, the name of the subject, and where the subject is a minor, that fact and the name of a guardian.
• For studios photographing property: the address of the property and the name, email address, phone number, brokerage and photograph of the listing agent.

If a studio asks us to manage a website for them, we can hold credentials for that studio’s own third-party services. They are encrypted, they are readable only by the part of the system that uses them, and no person at Luovex can read them back, including the person who entered them.

Photographs keep their camera data

A photograph as it leaves a camera carries technical information inside the file: the time it was taken, the camera and lens, and on some cameras the coordinates of where the photographer was standing. We store the original file exactly as it was uploaded, because that information belongs to the photographer and is part of their work.

Anywhere a page can be opened by somebody with no account, including a public portfolio, we serve a re-encoded copy with that information removed. A studio and the client they shared a gallery with can still download the original.

Who else sees it

We use these companies to run Luovex. Each one only receives what it needs to do its part.

• Supabase hosts the database and the sign-in system, and therefore holds every record in the product.
• Vercel runs the application and receives requests made to it.
• Cloudflare R2 stores uploaded files, unless a studio connects a bucket of their own.
• Stripe takes payments. See below, because its role differs depending on who is paying.
• Resend delivers email we send on a studio’s behalf.
• DataForSEO answers keyword and ranking lookups, for studios who use the SEO tools. It receives search terms and website addresses, not client information.

Stripe appears twice and the relationship is not the same. When a studio pays us, we send Stripe the studio’s name, email address and billing details, and Stripe is processing on our instruction. When a studio’s client pays the studio, the money goes to the studio’s own Stripe account; we never hold it, and Stripe is acting for the studio rather than for us.

If a studio connects their own storage, uploaded files are written to the provider, endpoint and region that studio chose. We do not control where that is or what that provider does with it.

If a studio connects a calendar or an analytics account, we read from it using a key they supplied and keep what it returns, so the software can show a correct figure or avoid double-booking a busy day.

We do not sell your information

We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes. Nothing in Luovex sends information to an advertising network, a data broker or a marketing list, and we do not use your information or your clients’ information to train an artificial intelligence or machine learning model.

Text messages

Where a studio uses text messaging, the studio is the sender and we deliver on their behalf. A mobile number is used for that purpose only, and only where the person it belongs to agreed to it. We record when they agreed, the exact wording they were shown, and which form it came from. Replying STOP ends it, and that is recorded too.

What Luovex staff can see

Account-level information, including a studio owner’s email address and which plan they are on, is visible to us so we can run the service and bill for it.

A studio’s client records, files and messages are not. Reaching them requires opening a support session with a stated reason, which is recorded and which the studio can see on their own account. We do not record every individual record viewed during such a session, so a studio should read the session itself as the event rather than assume a line-by-line account exists.

How long it is kept, and what deletion means here

This section is specific because the usual wording would be untrue.

Records are kept for the life of the account. Nothing expires on a schedule and nothing is removed automatically after a period of inactivity.

Closing an account stops sign-in and hides the workspace. No client record, project, invoice, contract, gallery, message or file is removed by closing it, and reopening the account restores access to all of it. If you ask us to close an account we record the request and a date thirty days ahead; nothing is deleted on that date.

Removing a file sets it aside rather than erasing it. The stored bytes are removed later by a separate maintenance process, which runs no sooner than thirty days afterwards, and the file’s name, size and checksum are kept after the bytes have gone. Files written to our own storage carry a thirty-day lock that prevents them being deleted or overwritten, so a removal request cannot be completed faster than that.

A studio can archive a client record, which hides it and keeps every row attached to it. There is no button anywhere that erases a person.

If you need information actually erased rather than hidden, write to us and we will do it by hand. We would rather say that than imply a self-service erasure that does not exist.

Getting a copy

A studio owner can export their workspace at any time, on every plan including the free one, from the billing page. The export is a JSON file covering clients, projects, invoices, contracts, messages and the rest of the record. A studio’s client does not have their own export button and should ask the studio.

Where it is stored

Our database and application are hosted in the United States. Uploaded files are stored by Cloudflare R2, which we have configured to choose a location automatically, so we cannot promise a particular region. Where a studio has connected their own storage, the location is whichever they chose.

Children

Luovex is sold to businesses and is not for use by children. A studio may record that a person appearing in a photograph is a minor, together with the name of a guardian, because releases require it. That information is entered by the studio on their own authority and is held on their instruction.

Changes

When this policy changes we will update the date at the top. If a change materially affects what we do with personal information we will tell account owners by email rather than relying on anybody re-reading this page.

Contact

Arise Digital LLC, trading as Luovex. Write to privacy@luovex.com. If you are a client of a studio that uses Luovex and you want your information changed or removed, the studio holds it and is the faster route, but write to us if you cannot reach them.

This page describes how the software behaves, accurately and in plain words. It is not legal advice and it is not a substitute for a lawyer reading it. See also our Terms of Service.