Owner and contacts
The data controller is INNAMORATI DI MORRIS MORATTI. Headquarters: Via Oscar Romero 27, Calino (BS), Italy. Phone: 3289169787. VAT number: IT04008310981. Recipient code: M5UXCR1. For questions about personal data or to exercise your rights write to info@innamoratiweddingstudio.com.
Navigation and language preference
The showcase does not use advertising cookies or behavioral analysis tools. Fonts and scripts are served by the site. The chosen language is saved in the browser with localStorage and remains until the site data is deleted: you can change it from the drop-down menu at any time. The server can record IP addresses and requests in the technical registers necessary for security.
Account technical session
The Account area uses a technical session cookie, PHPSESSID, to maintain access, remember the session language and protect the forms with a token against unauthorized requests. The cookie contains an identifier, not your password or photographs. It is limited to the licensing area, has a session duration and is not used for profiling or advertising. Disabling it prevents access and use of the modules. The session is closed with Exit; the browser deletes the session cookie according to its settings.
Account and license data
We keep your name or studio name, email, a cryptographic fingerprint of your password, the address confirmation status, licence keys, activated workstations, the workstation fingerprint, the subscription status and the technical information needed to prevent abuse. The workstation fingerprint is a technical identifier linked to the licence: it is not used for advertising. We do not store your password in clear text.
Purposes and bases of processing
The Account data is used for registration, access, activation, assistance and management of the subscription, to perform the requested service and pre-contractual measures. The billing data are also processed for legal obligations. The logs and controls against abuse serve the security of the service, based on the legitimate interest in the protection of users and systems.
Service emails and payments
Confirmation messages, password recovery and license keys are service communications. When used, Stripe manages the payments and billing portal; the complete card data does not pass through the Account forms. Hosting and mail providers process the data necessary for the provision of their respective services. For payment services, also consult the supplier's information.
Conservation
Account and license data are retained for relationship management and applicable legal obligations. Confirmation links expire after two days and password recovery links after two hours. Technical logs and controls against abuse are maintained for security purposes. You can ask for information on the times applied or cancellation; data subject to retention obligations cannot be deleted before the established deadline.
Photographs and shared content
Composer runs on your computer. Photographs are not sent to the developer for the management of the Account or the licence. If you choose to publish a viewing room, a gallery or a Client choice for the couple, the selected content is uploaded to the server specified by your studio; if you upload or publish to Google Drive, Instagram or Facebook, it is uploaded to the service you use. You are responsible for checking the content and for having the right to share it.
What the program sends
The full privacy notice is inside Composer, on the License page, at the end of the Agreement. Your photographs, projects and clients' data stay on your computer: Composer doesn't send them to anyone on its own. The only things sent automatically are requests with no photos and no client data: the licence check, at least once every 30 days; the list of new spreads once a day; NVIDIA Acceleration if there is a suitable NVIDIA card; with the light installer, the AI models; new attempts for Proof proposals left pending; and, only if you turn it on (it is off by default), the AI Selection taste, that is what the program has learned from your choices, with no names or folder paths. Spreads, Acceleration and advance model downloads can be turned off in Settings → Performance; updates are off by default.
Everything else is sent only when you ask. The Proof room, the gallery and Client choice go to your studio's server, the one you connect in Settings → Your studio, not to the developer. For Client choice, what is sent is reduced copies of the photos (480 px thumbnails and 1280 px photos), the couple's names, the studio's name and logo, the language of the page, the cover, the photos you propose and the hearts already given and, if you entered them, the date and location; only if you let the couple download the photos are the studio's Instagram profile and the Instagram profiles of the couple and of the suppliers also sent, for the caption. After 60 days the link expires and the photos and data are deleted from the server on the first visit after that. From the couple come back their hearts, the photos they removed, the time the link was first and last opened and, if they fill in the form, the colours they prefer, a note and the suppliers of their day (see below). The three Proof proposals send the developer's server only numbers and image fingerprints, the licence key and the computer's identifier, never photographs or names. Google Drive, Instagram and Facebook receive what you upload or publish with your own account; Translate sends the text to be translated to Google Translate and, if Google refuses, to MyMemory; support receives the request you send from the Support page.
Your server
With “Connect your server…” Composer places the files for the couple's page, the Proof room and the gallery on your studio's web space: your clients' photos stay there, on hosting that is yours, never on our servers. The connection is made only over FTPS, that is FTP encrypted with TLS: if the server does not support it, Composer stops before sending the username and password. The hosting password is not saved unless you choose “Remember it on this computer”: it then stays only on your PC, encrypted with the Windows protection tied to your user account, and is never sent to us.
Shoot, couple and supplier data
In the “What kind of shoot is it?” record you can enter the date, the location, the couple's Instagram profiles and the suppliers. This data, like the supplier address book that Composer reuses from one job to the next, stays on your computer; clients' phone numbers and emails stay only in the client record. Only names, date, location, Instagram profiles and the credits you confirm go out to the couple's page and the gallery, never phone numbers, emails or GPS location. In the Client choice form the couple can indicate the colours they prefer, an optional note and the suppliers of their day (role and name or Instagram @profile): this is data, including about third parties, that they provide voluntarily; emails and phone numbers are removed automatically. It reaches only your studio's server and Composer: when you import it, the note and the suppliers are deleted from the server, while the colour preferences remain until the link expires. No supplier indicated by the couple is published without your confirmation. Your studio is the controller of this data: Innamorati does not receive it. The couple's page does not use cookies: in the browser's storage (localStorage) it keeps the hearts, including those already sent, the removed photos waiting to be sent and a few display preferences.
Your rights
You can request access, rectification, cancellation, limitation and portability of data, when applicable, and oppose processing based on legitimate interest. You can lodge a complaint with the competent supervisory authority. To send a request write to info@innamoratiweddingstudio.com; we may ask for information necessary to verify your identity.