← Foqus Media

Privacy Policy

Last updated: August 9, 2026

1. WHO WE ARE

Foqus Media ("Foqus", "we", "us") operates a marketplace connecting real
estate agents with professional photographers, at https://foqus.io. We act as
the data controller for information collected through the platform.

2. INFORMATION WE COLLECT

Information you provide:
- Name, email address, and phone number
- Business or brokerage details
- Property addresses and shoot details
- Payment information (processed by Stripe; we do not store card numbers)
- Photographs and media you upload
- Communication preferences

Information collected automatically:
- Device and browser information
- Usage data (pages viewed, actions taken)
- Approximate location, where you grant permission

Information from connected services:
- Google Calendar or Microsoft Outlook data, when you choose to connect a
  calendar. See section 4.

3. HOW WE USE YOUR INFORMATION

This section does not apply to Google user data — see section 4.

- Provide, maintain, and improve the platform
- Match agents with available photographers
- Schedule shoots and prevent double-booking
- Process payments and send receipts and invoices
- Send service communications about your bookings
- Send promotional communications, where you have consented
- Respond to support requests
- Detect and prevent fraud and abuse

4. GOOGLE USER DATA

This section describes our use of data obtained through Google APIs. It
applies only if you choose to connect a Google Calendar; connecting is
optional and the platform works without it.

THIS SECTION OVERRIDES EVERY OTHER SECTION OF THIS POLICY WITH RESPECT TO
GOOGLE USER DATA. Where anything else in this policy describes a broader use
or disclosure of information — marketing, analytics, sharing with the other
party to a booking, transfer in a merger or acquisition, or any other purpose
— that does not apply to data obtained through Google APIs. Google user data
is used for one purpose only: providing the calendar features described
below.

What we request, and why:

- https://www.googleapis.com/auth/calendar.readonly
  Read-only access to your calendar events. We use this to determine when you
  are already busy, so the platform does not offer those times to agents
  booking a shoot with you.

- https://www.googleapis.com/auth/calendar.events
  Permission to create and update calendar events. We use this to place
  confirmed shoots on your calendar, and to update or remove them when a
  booking is rescheduled or cancelled.

We request these scopes only when you start the calendar connection flow, not
when you sign in.

How we handle it:
- Event data is used to display your availability and your scheduled shoots
  inside your own Foqus dashboard.
- We store the minimum necessary event information (times, and the identifiers
  needed to update events we created) plus the access and refresh tokens
  required to keep the connection working.
- Tokens are stored encrypted and are used only to make the calendar requests
  described above.

Limited Use commitment:
Foqus's use and transfer of information received from Google APIs adheres to
the Google API Services User Data Policy, including the Limited Use
requirements. Specifically, we do not:
- sell Google user data;
- transfer Google user data to third parties, except as necessary to provide
  or improve the calendar features described above, or to comply with
  applicable law;
- use Google user data for marketing, promotional messages, or analytics of
  any kind;
- share Google user data with the agent or photographer on the other side of
  a booking, or with our photo-processing partner or any other AI service;
- use Google user data for advertising, or serve advertisements of any kind;
- use Google user data to train generalized artificial intelligence or machine
  learning models;
- allow humans to read Google user data, unless we have your explicit consent
  for a specific request, it is necessary for security purposes such as
  investigating abuse, to comply with applicable law, or the data has been
  aggregated and anonymized.

AI and machine learning — data isolation:
Foqus uses two third-party AI services, and neither of them ever receives
Google user data:

- AutoHDR (Quantum Reach Advertising) enhances property photographs. It
  receives only image files that a photographer has uploaded to Foqus for a
  specific shoot. It never receives calendar data of any kind.
- An equipment-identification assistant, accessed through the Lovable AI
  Gateway (currently routing to Google Gemini), helps a photographer match a
  free-text description of their camera or lens to a real product. It receives
  only that short description, typed by the photographer, and nothing else.

Google user data obtained through the Calendar scopes is used solely to
display availability and to create, update and remove Foqus booking events. It
is never sent to any AI or machine learning service, and it is never used to
create, train, or improve any foundational or generalised artificial
intelligence or machine learning model, whether ours or a third party's.

The use of raw or derived user data received from Google Workspace APIs
adheres to the Google User Data Policy, including the Limited Use
requirements.

How to disconnect or delete:
- Disconnect at any time from Settings, or from Availability, inside Foqus.
  Disconnecting deletes the stored tokens and stops all further access.
- You can also revoke access directly at
  https://myaccount.google.com/permissions.
- To request deletion of calendar data we have already stored, email
  hello@foqus.io and we will delete it.

5. INFORMATION SHARING

This section does not apply to Google user data, which is never shared with
any of the parties listed below — see section 4.

We do not sell or rent your personal information. We share it only:
- With the photographer or agent on the other side of a booking, limited to
  what is needed to complete that booking
- With service providers who operate the platform on our behalf, including
  Supabase (hosting and database), Stripe (payments), Twilio (messaging),
  Resend (email), Uploadcare (media storage), and our photo-processing partner
- To comply with legal obligations
- To protect our rights, safety, or property
- In connection with a merger, acquisition, or sale of assets

6. DATA SECURITY

We use technical and organizational measures to protect your information,
including encryption in transit and at rest, access controls, and row-level
database security. No system is perfectly secure, and we cannot guarantee
absolute security.

7. DATA RETENTION

We keep personal information for as long as your account is active or as
needed to provide the service. After account closure we retain what we must
for legal, tax, and accounting purposes, and delete the rest. Google calendar
data and tokens are deleted when you disconnect the calendar or close your
account.

8. INTERNATIONAL TRANSFERS

Your information may be processed in countries other than where you live,
including the United States. Where required, we put appropriate safeguards in
place for those transfers.

9. YOUR RIGHTS

Depending on where you live, you may have the right to:
- Access the personal information we hold about you
- Correct inaccurate information
- Request deletion of your information
- Request a portable copy of your information
- Object to or restrict certain processing
- Withdraw consent, including for marketing
- Opt out of marketing at any time via the unsubscribe link

To exercise any of these, email hello@foqus.io.

10. CHILDREN

Foqus is not intended for anyone under 18, and we do not knowingly collect
information from children.

11. COOKIES AND SIMILAR TECHNOLOGIES

We use cookies and similar technologies to keep you signed in, remember your
preferences, and understand how the platform is used.

12. CHANGES TO THIS POLICY

We will post any changes on this page and update the date above. Material
changes will be communicated to you directly.

13. CONTACT US

Questions about this policy or your data: hello@foqus.io