1.Who we are
BrackIt is an online service that turns bracketed real-estate photos into HDR-merged stills and photo tours. BrackIt is a product of Han Property Group LLC, a Washington limited liability company. In this policy, “BrackIt”, “we” and “us” mean Han Property Group LLC. Address: Han Property Group LLC, 6012 S Cedar St Unit A, Tacoma, WA 98409. Contact: support@brackitphoto.com.
This policy explains what we collect when you use the website, the BrackIt studio and public tour links, why we collect it, how long we keep it, and the choices and rights you have.
2.Information we collect
We get information from you, from your browser when you use BrackIt, and from Stripe when you pay.
- Account details: your email address, an optional display name and business name, and your password, which we store only as a one-way hash.
- Where you work: the states you choose to shoot in, and for each job its property state, listing type (sale or rental), whether it has aerial photos and when you confirmed the drone reminder. We use these only to apply state photo rules and show reminders.
- Photos you upload: the original files exactly as you upload them, including any embedded camera metadata (EXIF), which can include the date, camera settings and sometimes GPS location.
- Job details: job names, property addresses you choose to enter, room labels and tags.
- What we produce for you: finished stills, smaller preview copies (thumbnails), photo tours and a processing log for each job.
- Plan and usage: your plan, billing interval and status, billing period dates, and how many houses and tours you have used in each period.
- Payment references and checkout records: identifiers for your Stripe customer and subscription, and a record of what you agreed to at checkout (see How long we keep it). We do not receive or store your full card number (see Payments).
- Early-access list: if you join it on our home page, your email address, and the state and business name if you add them, when you joined and, if you unsubscribe, when (see Early-access list).
- Technical data: a session cookie that keeps you logged in; one-time email confirmation and password-reset links, stored only as one-way hashes; abuse-prevention counters (rate limits) keyed by a one-way hash of an email address or IP address, never the address itself; and standard server logs (such as IP address, browser type and time of request) kept by us and our hosting provider.
Camera metadata (EXIF)
Your browser reads the capture time, camera and exposure fields of your photos to group bracketed exposures, and we use the orientation field to show photos the right way up. We do not use GPS location data for any other purpose. The original files keep their metadata, because they are stored unchanged. Finished stills, their preview copies and public tours do not include embedded location data or other camera metadata.
3.How we use it
- To run the service: store your uploads, merge and enhance photos, sort rooms and build tours.
- To show tours to people you share a tour link with, when you turn a link on.
- To manage your account, plan, house allowance and billing, including renewal and price-change notices.
- To send service emails, such as confirmation and password-reset links and important account notices.
- If you joined the early-access list before BrackIt opened: to send you the launch notice and one early-access offer, and nothing else. If you joined after it opened: to send you occasional product updates and one early-access offer, and nothing else.
- Only if you accept marketing cookies: to see which of our ads bring people to our home and pricing pages (see Cookies and tracking).
- To keep the service secure, prevent abuse and fix problems.
- To meet legal obligations, such as keeping billing and checkout consent records.
4.Your photos and originals
Your original files are stored unchanged. Processing always writes a new file, so finished stills sit next to the originals instead of replacing them. Keeping originals is how you can show the unaltered version of a listing photo when you need to (see AB 723 disclosure).
- Photos are stored in private cloud storage and are only reachable through your logged-in account, using links that expire after a short time, except finished tour stills you choose to share through a public tour link (see Public tour links) and originals you choose to publish through a public original link.
- We never make your photos public on our own, and we do not use your photos for advertising or sell them.
- We do not use your photos to train AI models, and we will not start doing so without asking you first.
Your clients’ information
When you upload photos of your clients’ properties or enter their addresses, we process that information on your behalf to provide the service to you. You are responsible for having the right to share it with us.
5.Public tour links
A job’s photo tour is private until you turn on its share link. When you do, anyone who has the link can view the tour without an account:
- What they see: the job name, the address you entered, the tour’s finished stills and room names. They don’t see your original exposures (unless you turn on public original links for that job), other jobs, prices or your account details.
- Branded or unbranded: a Branded link also shows the display name and business name from your profile and the BrackIt mark. An Unbranded link shows no names, logos or contact details.
- Search engines: tour pages ask search engines not to index them or keep copies, but anyone with the link can still pass it on.
- Turning it off: you can turn a link off at any time, or make a new link, which stops the old one at once. Deleting the job or your account also turns it off, and links pause while your plan doesn’t include tours, after it ends and while a payment is past due. Browsers may keep a copy of a still they already loaded for up to 5 minutes.
- Visitors: when someone opens a tour link, we process their IP address and request details to deliver the page and limit abuse (rate limiting, stored as a one-way hash of the IP address). We do not set cookies or use tracking for tour visitors.
- Public original links: if you turn them on for a job, the original photo behind each digitally altered still is public to anyone with its link or QR code, with camera details and location data removed. Visitors see only that photo and its room name, nothing else from your account. The links don’t expire; they stop when you turn the option off, unmark the still, or delete the job or your account. The same visitor handling as tour links applies.
6.Payments via Stripe
Subscriptions are handled by Stripe. When you pay, you enter your card details on Stripe’s secure checkout page, and you manage your plan in Stripe’s billing portal. Stripe processes that information under its own privacy policy.
Stripe tells us your customer and subscription identifiers, which plan you bought, whether payments succeeded, your billing period dates, and that you accepted our Terms and automatic renewal at checkout. We never see or store your full card number or security code.
9.Early-access list
If you join the early-access list on our home page, we store your email address, plus the state and business name if you add them. We use them only to send you the launch notice when BrackIt opens and one early-access offer (if you join after BrackIt opens: occasional product updates and one early-access offer), and to see roughly where interest comes from. You don’t need an account.
Every email from the list has a one-click unsubscribe link; no login needed. After you unsubscribe we keep your address marked as unsubscribed so it is never emailed from the list again. You can also ask us to delete it entirely at support@brackitphoto.com.
10.How long we keep it
- Account details, photos, stills, tours and job details: for as long as your account is open, so you can download them again later. Deleting a job deletes its photos, stills and tour straight away.
- Accounts that never confirm their email address: deleted automatically after 7 days, with everything in them.
- Sessions and one-time links: a session ends when you log out or after 30 days; confirmation links expire after 24 hours and password-reset links after 1 hour. All are deleted with your account.
- Early-access list: until you unsubscribe or ask us to delete it; after you unsubscribe, the address stays on file marked “unsubscribed” so we never email it again.
- Abuse-prevention counters: deleted after 24 hours without activity.
- Checkout consent records (when you subscribed, the plan, price and billing interval, the renewal terms shown to you, that you accepted the Terms, and the Terms version): kept for 3 years, or until 1 year after your plan ends if that is later, as automatic-renewal laws require. They are kept when you delete your account, but no longer linked to it; they hold no name, email or IP address, only Stripe’s customer and subscription references.
- Billing records held by Stripe (invoices, payment history): for as long as tax and accounting law requires, even after the account is deleted.
- Backups: any backup copies are overwritten within 30 days. Server logs: kept for up to 30 days.
11.Downloading or deleting your data
Download a copy
Signed in, open Account in the studio header and choose Download my data. You get one zip file with every original photo you uploaded, every finished still, and a list of your houses, rooms and addresses. You can do this as often as you like.
Delete your account
You can delete your account yourself at any time from Account › Delete account. To protect you, we ask you to type your account’s email address and enter your password. When you confirm, we:
- cancel any active subscription with Stripe straight away, so it doesn’t renew, and invoice any extra houses, tours and plan changes that aren’t invoiced yet (with no payment method on file, we use your email address once more to send you that invoice);
- delete your account, house jobs, original photos, finished stills and tours from our live systems, which also turns off every tour link;
- sign you out on every device.
This can’t be undone, so please download anything you want to keep first. What we keep afterwards, and for how long, is listed under How long we keep it. Deleting your account mid-period doesn’t refund the rest of that period, and extra houses, tours and plan changes that aren’t invoiced yet are still billed (see Refunds in the Terms).
Other requests
If you can’t sign in, want to change your email address, or want us to correct your information, write to us at support@brackitphoto.com from the address you signed up with. For your other privacy rights, see Your privacy rights.
12.Your privacy rights (all US states)
Several US states give their residents privacy rights, and many of those laws only apply to businesses above a certain size. We honor the following rights for everyone, wherever you live in the US:
- Access: ask whether we process your personal information and get a copy of it (you can also use Download my data).
- Correction: ask us to correct inaccurate information (you can edit your profile yourself).
- Deletion: ask us to delete it (or use Delete account). We keep only what the law requires us to keep, as listed above.
- Portability: get your information in a portable, commonly used format (the zip from Download my data).
- Opting out: we do not sell your personal information. Ad measurement tags run only if you accept marketing cookies, never when your browser sends a Global Privacy Control signal, and you can turn them off at any time in Cookie settings (see Cookies and tracking). We do not use your information for profiling that produces legal or similarly significant effects. We do not use sensitive personal information to infer characteristics about you, and we do not collect consumer health data.
- Appeal: if we turn down your request, you can appeal by replying to our decision with “Appeal”. We answer appeals within 60 days. If you are not satisfied, you can contact your state’s attorney general.
- No discrimination: we will not deny you the service, charge you a different price or give you a different level of service because you used these rights.
How to make a request
Write to us at support@brackitphoto.com from the email address of your BrackIt account and say what you’d like us to do. To protect your account, we verify requests by replying to that address, and we may ask you to confirm the request while signed in. Someone you authorize (an authorized agent) can make a request for you with your signed permission; we may still ask you to confirm your identity with us directly. We confirm we received your request within 10 business days and answer within 45 days. If we need more time, we will tell you why, and we may take up to 45 more days.
13.Security
Passwords are hashed, sessions can be revoked, connections are encrypted, and photo links are signed and expire quickly. No online service can promise perfect security, so please use a strong, unique password.
14.Children
BrackIt is a professional tool and is not intended for anyone under 18. We do not knowingly collect personal information from children under 13, or from anyone under 16. If you believe a child has given us information, tell us at support@brackitphoto.com and we will delete it.
15.Changes to this policy
If we make material changes, we will update the date at the top of this page and let account holders know by email before the changes take effect.
16.Contact
Questions about privacy or your data: support@brackitphoto.com. Han Property Group LLC, Han Property Group LLC, 6012 S Cedar St Unit A, Tacoma, WA 98409.