TRUST & SECURITY

Built to be trusted with the work that can’t be re-shot.

A wedding happens once. A gallery you’ve delivered has to still be there, intact, next year. Here’s exactly how we protect it — the architecture, the guarantees, and the paperwork — in plain terms.

EU DATA RESIDENCY SHA-256 VERIFIED DELIVERED = PERMANENT GDPR-NATIVE · DPA
The guarantees

Four promises, each built into the system — not the marketing.

Never loses a photo

Every upload is a resumable, multipart transfer verified with a SHA-256 checksum per chunk. A file isn’t marked complete until it’s provably intact — a mismatch pages our team, never you.

Never drops a delivered gallery

Once a gallery has a live share link, it is structurally excluded from every quota and retention job. No automated process can remove delivered work — it’s a rule in the code, enforced at launch.

Stays in the EU

Files are stored and served from EU-jurisdiction infrastructure, with an EU-hosted database. Your clients’ data does not leave the region — usable by organisations a US consumer tool can’t serve.

Delivers true colour

Every derivative runs through a colour-managed pipeline (sRGB conversion), so what your client sees on the web matches what you exported — no muddy blacks or shifted skin tones.

Reliability targets

The numbers we hold ourselves to.

Tracked from day one via our activity log and synthetic monitoring. These are the commitments behind the promises above.

Metric
Target
How we measure it
Upload success rate
≥ 99.9%
Files verified ÷ attempted. A resumed upload counts as a success.
Silent data loss
Zero
Every delivered asset carries a verified checksum; mismatches alert us.
Delivered-gallery availability
99.9%
A synthetic monitor loads the client viewer path continuously.
Thumbnail-ready latency
< 5 min
Grid derivatives ready within minutes of an upload completing.

Targets, tracked continuously. We publish live status and incident history at status.curatepics.app.

The delivered-gallery invariant

A gallery you’ve delivered can’t be taken away.

The failure that has burned photographers elsewhere — a host silently deleting an already-delivered gallery over a storage policy — is made structurally impossible here. Purge candidates exclude any gallery with a live share. If a storage limit is ever reached, we block new uploads and tell you in-app first; we never remove delivered content.

LAUNCH GATE §1 · NO AUTOMATED JOB CAN REMOVE A DELIVERED GALLERY
Data & security

Where your data lives, and how it’s protected.

  • EU region, end to end. Object storage in the EU jurisdiction, EU-hosted application database, EU processing.
  • No client accounts. Galleries open from a capability-token link — clients never create logins or hand over personal data to view.
  • Encrypted in transit & at rest. TLS everywhere; storage encrypted at rest by default.
  • Private by default. PIN-gating, download controls and right-click protection available on every gallery.
  • Soft-delete & retention. Deletions are recoverable within the retention window; nothing is hard-purged on a whim.
  • Audit trail. Access and delivery events are logged — the accountability agencies and schools require.
  • Zero-egress economics. We never meter your clients’ downloads, so there’s no incentive to throttle or expire.
  • Founder-answered support. A real person, fast — plus a public status page and docs.
Sub-processors

The short, EU-first list.

We keep the chain deliberately small. Each is bound by a data-processing agreement.

Provider
Purpose
Region
Cloudflare R2
Object storage & edge delivery
EU JURISDICTION
Supabase
Application database & auth
EU (FRA)
Transactional email
Delivery & notification emails
EU

The current, authoritative list is maintained here and updated before any change takes effect.

Compliance

GDPR-native, with the paperwork to match.

We’re built for the EU from the ground up — not retrofitted. If your organisation needs documentation to sign off, we have it ready.

Data Processing Agreement

Request our standard DPA and sub-processor list. Turned around quickly, no enterprise sales gauntlet.

Request a DPA
Privacy & terms

Read how we handle data and the terms of service in plain language.

Privacy Policy Terms