Last updated August 27, 2026
This forms part of the Terms of Service and applies when you use ShootOS to handle other people's personal information — which, in practice, is whenever you put a client into it.
You are the controller of the personal information you and your team put into ShootOS, including your clients'. We are the processor — we handle it on your instructions, which for ordinary use means your actions in the product and what these terms say.
We're independently responsible for a narrow set of our own records: your account and billing details, security and audit logs, and aggregate service metrics. Those are covered by our Privacy Policy.
For: providing ShootOS, for as long as you subscribe plus the wind-down below.
What: names, emails, phone numbers, property and postal addresses, booking details and prices, message content, voice notes, photographs and video of properties, team records and roles, and device push tokens.
Whose: your team members, your clients, and — incidentally, through property media — the people whose homes are photographed.
We use sub-processors to run ShootOS. The current list is at shootos/subprocessors, and we stay responsible for what they do. We'll give you 30 days' notice before adding or replacing one, by email and by updating that page. If you object on reasonable data-protection grounds and we can't resolve it, you may cancel without penalty for the rest of your term.
They are all in the United States, so your data is stored and processed outside Canada, where it can be reachable by courts and authorities under that country's law.
What is actually in place, stated plainly:
When we look at your account. Our staff can open your account to help with a support request. Every session is recorded — who, why, and when it started and ended — and you can see that history yourself in your settings. We don't browse customer accounts outside a support request.
We'll tell you without undue delay, and within 72 hours of becoming aware, of a breach that destroys, loses, alters or exposes your data. We'll describe what we know: what happened, roughly what and how much is affected, the likely consequences, and what we've done. Any notice you owe your own clients or a privacy commissioner stays yours to give.
Your data stays exportable throughout. On cancellation we send reminders around days 60 and 80, delete stored media at day 90, and delete remaining account records at one year. If a reminder went out late, deletion waits so the full notice period runs. You can ask us to delete data at any point. Backups age out on their own cycle, so a copy inside a backup goes when that backup does rather than immediately.
On reasonable written notice, up to once a year, we'll give you the information you reasonably need to confirm we're doing what this says.
For anything about handling personal information, this document wins.