Privacy Policy

The short version

I collect the minimum needed to run this site and deliver my products and services: your email if you join a waitlist, your inquiry if you ask about a photography session, your order details if you buy something, and the license checks needed to activate and renew Latent. No advertising trackers, and your data is never sold.

What I collect

• Waitlist signups. Your email address and the role you select (colorist, filmmaker, and so on), so launch emails are relevant to you.
• Purchases. Checkout is handled by Paddle, my merchant of record. Paddle collects your name, email, country, and payment details under its own privacy policy. I receive your order details — name, email, product, and order reference — so I can issue your license. I never see your card number. For Latent Studio, the order record also includes the organization, business contact, and the names and email addresses of the artists assigned to its paid seats.
• License activation.When you activate, the software contacts my licensing server with your license key, Latent version, the name of your Mac, a public key generated for that installation, and a one-way hash derived from that Mac's hardware identifier. A quiet daily check sends the same details when internet is available. The private key and raw hardware identifier are not sent. These details let me validate the license, enforce its two-Mac limit, and issue a signed 30-day machine certificate. Latent allows seven additional offline days if that certificate cannot be renewed in time.
• Session inquiries. If you inquire about a portrait session, I keep what the form asks for: your name, email, what you want to create, how you plan to use the photographs, and — only if you offer them — a contact handle, rough timing, and an inspiration link. I also note which channel the inquiry came from (this site, Instagram, TikTok, email, or a referral). Inquiries are stored as booking records in private storage and are never added to any marketing list.
• Support. If you email me, I keep the correspondence so I can help you and remember the context next time.
• Founders community access. If you connect Discord through the private link in your Latent license email, I store your Discord account ID and whether the Founder role was granted. I do not receive your Discord password or keep the temporary authorization token.
• Server logs. Like nearly every website, my hosting provider keeps standard technical logs (IP address, pages requested) for security and reliability.
• Anonymous site analytics. I use privacy-friendly, cookie-free pageview data to understand which pages and referring sites are useful. It does not create profiles of individual visitors.

How I use it

• delivering purchases, license keys, and product updates
• sending the launch and product emails you signed up for — every email has an unsubscribe link, and unsubscribing always works
• answering support requests
• replying to session inquiries and planning the session you asked about — I may use AI assistants I authorize to help organize and follow up on an inquiry, which can require the assistant's provider to process the relevant inquiry details
• granting verified customers access to the private Founders community
• preventing fraud and license abuse

Who it's shared with

Only the services that make the site work, and only what each one needs:

• Paddle — checkout, payment, receipts, and tax, as merchant of record
• Vercel — hosts the site and its anonymous site analytics
• Cloudflare — hosts site media, and holds session inquiry records in private storage
• Keygen — validates license keys and keeps the two-Mac activation record
• Resend — stores the email list and delivers the launch, license, and service emails you ask for, so it processes the recipient address, email metadata, and message content; it also delivers the internal note that tells me a new session inquiry arrived
• Kit (formerly ConvertKit) — this old provider temporarily retains earlier Latent waitlist records collected before the July 2026 move to Resend. It no longer receives new signups, and I will remove its copy after the migration is reconciled.
• AI service providers — process only the inquiry context I choose to share when I use an authorized assistant to organize or follow up on that inquiry
• Discord — hosts the optional private Founders community and confirms the account you choose to connect

I don't sell your data, share it with advertisers, or use third-party ad tracking. Some of these providers operate in the United States, so your data may be processed there.

Cookies

The site doesn't use advertising or cross-site tracking cookies. Any cookies that appear are strictly functional ones set by the services above to do their job, like completing a checkout.

Retention

Waitlist emails are kept until you unsubscribe. Earlier waitlist records may temporarily exist in both Kit and Resend while I verify the migration, after which I remove the Kit copy. Session inquiries are kept while we're talking and while any booking that came from them is active — email me and I'll delete yours. Order records are kept as long as your license is active, plus whatever tax law requires. Support emails are kept so I can help you across conversations.

Your rights

Email me at hi@ohqay.com to see the data I hold about you, correct it, or have it deleted. Depending on where you live (Canada, the EU/UK, California, and elsewhere), you may have specific legal rights to this — but I honor these requests for everyone, wherever you are.

Children

This site and my products aren't directed at children under 13, and I don't knowingly collect their data.

Changes

If this policy changes, the date at the top will reflect it. Material changes will be noted plainly on this page.