Privacy Policy
Last updated July 23, 2026
The short version
Photos you select pass through our server's memory to be sorted by a model that runs on that same server — no photo is ever sent to an AI company. Print-quality copies of your selected photos are then held encrypted only between the day you save your selections and the day the print lab confirms it has them — at most a couple of weeks — and are then deleted. We keep no lasting photo library. What we keep is small: your account, your shipping address, and bookkeeping about which photos (by ID) went into which envelope.
What we collect
Your name, email and profile picture from Google sign-in; the shipping address you give us; your print orders and their prices; short-lived, encrypted references to the photos you select each month (identifiers and temporary access URLs — not the files); and the curator's one-line note about each selected photo. Payment details live with Stripe; we never see your card number.
Google Photos access
You choose the photos Shoebox can see, every month, inside Google's own photo picker. We cannot browse your library. Shoebox's use of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements. We use this access only to curate and print the photos you selected; we never use your photos to train models, never sell or share them, and never keep them.
Who touches your photos
Curation happens on our own server: an image model we run ourselves scores small preview copies in memory. No AI provider ever receives your photos. One processor touches them: our print partner, which receives the ten photos you approved in order to print them. Emails go through our email provider. That's the full list.
Retention and deletion
Encrypted print copies: deleted as soon as the lab confirms download, or when a month is skipped — never later than the end of the print cycle. Temporary Google access references expire within about an hour. Account and order records stay while you have an account. Email djviau@gmail.com to delete your account and everything tied to it; Google access can also be revoked anytime at myaccount.google.com/permissions.
Security
OAuth tokens and photo references are encrypted at rest (AES-256). Transport is HTTPS everywhere. Print-lab photo handoffs use signed, expiring URLs.
Contact
Questions or requests: djviau@gmail.com.