PRIVACY

Last updated: 9 September 2026

SurfSnap helps surfers find and buy photographs of themselves. This policy explains the information we handle when you search, create an account, upload photographs or make a purchase.

Information we handle

We handle your search photograph, the beach and session details you select, and the photographs and information supplied by photographers. If you create an account or buy a photograph, we also collect the contact, account and transaction details needed to provide that service.

How photo matching works

When you submit a search photograph, we send it to Amazon Web Services (AWS) Rekognition to compare your face with faces in photographers’ uploads. Your selected beach, date and time help narrow the results.

For your initial search, SurfSnap processes your photograph in memory. We save a reference copy only if you subsequently ask us to keep looking, as described below. Photographers’ uploads are stored separately. Face information extracted from those uploads may be stored in AWS Rekognition for future searches. This is biometric information.

Only submit a photograph of yourself or someone who has given you permission to search for them. Matching is an estimate, not proof of identity: please check the previews before buying.

Asking us to keep looking

If you choose “Keep looking for my photos”, we save a smaller reference copy and your beach, date and time for up to 30 days. We use that reference with AWS Rekognition to check later uploads. Photographers who upload that session can also view the reference while reviewing your request, including after further photographs are added. This happens only when you confirm the request.

We email you when new photos are found, whether automatically or by a photographer. We do not send request-confirmation emails, waiting updates or unsuccessful-review emails. You can stop looking from your private gallery; this removes the reference and stops further checks and notifications. An email already being sent may still arrive.

The request expires after 30 days. Expired request records and reference copies are removed during routine cleanup; access expires at the stated time even if cleanup runs later. Backup copies may remain until those backups are replaced.

Your private gallery contains the initial results and photographs found later. Anyone with that link can view the previews, buy photographs or stop the request, so keep it private. Stopping the request does not remove existing purchases.

Accounts, purchases and payments

We use account information to manage sign-in and provide account features. Photo, session and purchase records support searches, downloads, customer enquiries and photographer sales reporting.

Stripe processes card payments and photographer payments. Card details are entered into Stripe’s checkout. SurfSnap receives payment confirmations and transaction references, not your full card number.

Photographers can access their own uploads and the sales information needed to manage their work. We use your contact details to send account and purchase emails and respond to your enquiries.

Service providers

We use AWS for photograph storage, face matching and email delivery; Vercel for website hosting; and database services for account, photograph and purchase records. Stripe handles payments. These providers process information as part of delivering their services to SurfSnap.

Information may be processed or accessed outside Australia, including by service providers and their support teams. For questions about where your information is handled, contact us at the address below.

Cookies and information on your device

Cookies support sign-in and security. Your browser also stores search results and selected photographs so you can return to them after checkout. On a shared device, sign out when you finish and clear saved browsing data if you do not want another user to see your selections.

Download links provide access to purchased original photographs. Keep them private: anyone you share a working link with may be able to download the file.

Storage and removal

Uploaded photographs, stored face information and account records do not currently expire automatically. A download link’s expiry limits use of that link; it does not delete the photograph or the purchase record.

You can request account closure or removal of a photograph of you and its associated face information by contacting us. We may need to verify your identity and retain certain records for purchases, disputes or legal obligations. We will explain any limits that apply to your request, including retained records or backup copies.

Access, corrections and privacy concerns

To request access to your personal information, correct a record or raise a privacy concern, email support@surfsnap.com.au. Include enough detail for us to identify the account, photograph or purchase concerned. Please do not send passwords or card details.

We will review your request and contact you about the next steps. If you are not satisfied with our response, you can seek guidance or make a complaint through the Office of the Australian Information Commissioner.

Changes to this policy

We may update this policy as the service changes. The date above identifies the latest version. Our Terms and Conditions explain the use of SurfSnap and purchased photographs.