Privacy policy

OnePic's operator is responsible for your personal data. Write to 1onepic1@gmail.com for any question or request about it.

• Account: your name, email address, password (stored only in scrambled form by our sign-in service), whether you are a client or a creator, and your profile picture if you add one.
• Creator profile: headline, about text, city, country and the point shown on the map, Instagram name, cover picture, photos and clips, packages and prices, and, if you add them, a contact email and phone number.
• Bookings and messages: booking requests and private offers with their dates, places, details and steps, and the messages between a client and a creator.
• Activity: reviews you write, photos you like or save, and how often a creator's profile is viewed (a count, not who viewed it).
• Technical: the cookies that keep you signed in, and the logs our hosting services keep to run and protect the site (for example your IP address and browser).

Mostly from you. If you choose "Continue with Google", Google gives us your name and email address. Some creator profiles were moved from the first version of OnePic, with the public Instagram name and photos those creators had posted publicly on Instagram; any of them can change or remove this at any time, or ask us to.

• To run OnePic for you: your account, your profile, bookings and messages (needed for the service you asked for).
• To keep OnePic safe: stopping abuse and fraud, handling complaints, and protecting accounts (our legitimate interest).
• To show creators simple counts about their own profile (our legitimate interest).
• To meet legal obligations, for example answering a lawful request from an authority.

• Everyone: creator profiles with their photos, clips, packages, city and place on the map; reviews with the reviewer's name and picture.
• Only the people involved: a booking and its conversation are seen by its client and its creator. A creator's contact email and phone are seen only by the creator and by clients who have a booking with them.
• OnePic's admins: can see accounts, bookings and conversations to run the site and to deal with problems and complaints.

We use these services to run OnePic. They handle data on our behalf, only for that purpose:

• Supabase: the database and the sign-in service.
• ImageKit: stores the photos and clips and delivers them in the right size.
• Vercel: hosts the site.

When you open a page, your browser also contacts other services directly, which then receive your IP address: OpenFreeMap for the map, Google if you sign in with Google, and Instagram (Meta) on the few profiles that show the creator's Instagram posts; Instagram may set its own cookies, under Meta's privacy policy.

Some of these services work in other countries, including the United States. Where the law requires it, they protect the data with safeguards such as the European Commission's standard contractual clauses.

OnePic uses only the cookies it needs: one set that keeps you signed in, one that remembers whether the side menu of the dashboard is open, and, when you are not signed in, one that remembers which kinds of work, creators and photos you looked at or searched for, so the home feed can show them and similar-looking work first. Similar looks are worked out by OnePic's own software from the photos themselves; no photo or choice is sent to an AI service for this. That one stays on OnePic, holds no name or contact details, is never shared, and its choices fade after a few weeks; when you are signed in, the same choices are kept with your account and are deleted with it. Your browser also remembers, for this visit only, where you were in the feed so that "back" returns you there. There are no advertising or analytics cookies, so we do not ask you to accept cookies.

As long as your account exists. When you delete your account under My account, everything linked to it is deleted: your profile, photos, clips, packages, likes, saves and reviews, and your bookings and conversations, also for the people on the other side. Copies may remain in our services' backups for a short time until they are replaced.

You can see and change most of your data yourself, on your profile and under My account, and delete your account there. You can also ask us for a copy of your data, to correct or delete it, or to stop or limit a use of it: write to 1onepic1@gmail.com. If you think we handle your data wrongly, you can complain to the data protection authority where you live.

The site is served only over an encrypted connection, every table in the database has access rules so that each person reaches only their own data, and passwords are never stored in readable form.

Client accounts are for people of 8 years or older, and creator accounts for people of 18 or older. Anyone under 18 needs the agreement of a parent or guardian to make an account; a parent or guardian can ask us at any time to see or delete a child's data. We delete accounts we learn were made by a child under 8.

When we change this policy we update the date at the top of this page; for important changes we also tell signed-in users on the site.