Privacy Policy

Introduction

Vivian (“we”, “our”, or “us”) is a photography portfolio platform operated by TinyOrange. This Privacy Policy explains how we collect, use, and protect your information when you use our service.

Information We Collect

Account Information

• Email address (from Google Sign-In)
• Display name
• Profile picture URL

Google Drive Access

• We request read-only access to your Google Drive to sync photos you choose to display in your portfolio
• We only access folders you explicitly select
• We do not modify, delete, or share your Google Drive files

Portfolio Content

• Photos and images you choose to sync from Google Drive
• Blog posts and news content from Google Docs
• Gallery titles, descriptions, and organisation settings
• Theme and display preferences

Technical Data

• Browser type and version
• Device information
• IP address (for security and rate limiting)
• Usage logs

How We Use Your Information

We use your information to:

• Provide and maintain the Vivian portfolio service
• Sync your photos from Google Drive
• Display your public portfolio to visitors
• Improve our service and user experience
• Ensure security and prevent abuse

Data Storage

Your data is stored securely using:

• Firebase Authentication for account management
• Cloud Firestore for portfolio data and settings
• Firebase Storage for image thumbnails

All data is stored in secure, encrypted cloud infrastructure.

Data Sharing

We do not sell, trade, or rent your personal information. We may share data only:

• When required by law
• To protect our rights or safety
• With your explicit consent

Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your account and associated data
• Revoke Google Drive access at any time via your Google Account settings
• Export your data

Public Portfolios

When you make a gallery public:

• Your photos and portfolio content are viewable by anyone with the link
• Your display name may be shown on your portfolio
• You control what content is visible through privacy settings

Cookies

We use essential cookies for:

• Authentication session management
• Security (CSRF protection)

We do not use advertising or tracking cookies.

Data Retention

• Account data is retained while your account is active
• You may delete your account at any time
• Upon account deletion, your data is removed within 30 days

Children's Privacy

Vivian is not intended for users under 13 years of age. We do not knowingly collect information from children.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through the service.

Contact Us

For privacy-related questions or requests, contact us at:

Email: hello@tinyorange.cloud

Address:
TinyOrange
United Kingdom

Google API Services

Vivian's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.