Privacy Policy

Kova Photo Studio is the trade name of to be confirmed, a photography studio located at to be confirmed, Miami, Florida, USA. We are responsible for the personal information described in this policy.

This policy covers our website kovaphoto.com, our forms, our conversations by text message (SMS/MMS), WhatsApp, Facebook Messenger, Instagram Direct, email and phone, our private galleries, and the services we provide at the studio and on location.

Privacy contact: to be confirmed · to be confirmed

Website forms

When you use the quote builder, request a consultation, contact us, apply to Founding Families, leave feedback or apply for a job, we collect your name, email, phone, preferred language, session type, dates, budget, preferences and anything you write. If the session is for someone else (for example, a quinceañera or a baby), we also collect the name and approximate age you give us.

If you check a consent box (for example, to receive text or WhatsApp messages), we keep a record of that consent: date and time, page and form, the exact text you accepted and its version, language, your number, your IP address and your browser.

Bookings, contracts and payments

To book, we keep your contract details, electronic signature, billing and shipping address, session details, products and payment history.

Card payments are processed by our payment processor (Stripe). We don't see or store your full card number; we only receive details such as the name, last four digits, amount and payment status. We will never ask for card details by chat or text message.

Messages by SMS, WhatsApp, Messenger, Instagram and email

When you message us or we message you, we keep your number or email address, the content of the conversation, any files you send (photos, voice notes, documents), the date and time, and the delivery status of messages.

If you message us on WhatsApp, Facebook Messenger or Instagram Direct, Meta gives us your profile name and, in some cases, your profile photo and username, plus an identifier Meta assigns to your account for our page. If you arrive from a Meta ad, we also receive ad details (for example, which ad you opened). We use this only to reply to you, follow up on your request and understand which ads work.

Calls and virtual assistant

When you call Kova or we call you, we collect your number and the date, time and length of the call. Some calls may be recorded and transcribed, and some may be answered by Kova's virtual assistant, which uses artificial intelligence. We always tell you at the start of the call, and you can ask to speak with a person at any time. More details in the messages and calls section.

Photos and galleries

The photos from your session, the ones you choose for products and, if you send them, reference or inspiration photos. Your private gallery logs access and downloads to keep it secure.

Dresses, hair and makeup

Sizes and measurements, if you try on, wear or buy a dress.

Notes about allergies or skin sensitivities, only for the hair and makeup service and only if you choose to share them with your consent. We don't ask for them in website forms, we don't use them for any other purpose, we never send them to advertising platforms, and we delete them after your session unless you ask us to keep them for a future appointment.

Job applications

Your experience, portfolio, résumé and the contact details you send us.

Device information, cookies and pixels

When you visit the site, our hosting and content delivery provider, and the tools you allow, collect technical data: IP address, browser, device, language, pages visited, how you arrived (including campaign tags and ad click identifiers from Google, Meta or TikTok) and actions such as submitting a form. We explain this in the advertising and measurement section and in our Cookie Notice.

The quote builder stores your answers only in your browser until you send them, so you don't lose them.

Information we receive from others

A family member may give us your details when booking a session that includes you. If you complete an ad form on Meta, Google or TikTok, that platform sends us the details you entered. Our experience-session partners may tell us whether you signed their waiver.

• To answer your questions, send quotes and schedule consultations.
• To prepare, deliver and complete your session, photos and products, including coordination with experience-session partners.
• To send confirmations, reminders, payment and gallery-ready notices, and support you on the channel you choose.
• To process payments, prevent fraud and meet legal, accounting and tax obligations.
• To send news and offers, only if you separately agreed. You can opt out at any time.
• To measure and improve the site and our ads, according to your cookie preferences.
• To improve service quality, for example by reviewing recorded calls or conversations.
• To show your photos in our portfolio or in ads, only with the matching written authorization.
• To review job applications.
• To protect the site, our systems and our clients against spam, fraud and abuse, and to enforce our terms.

We don't use your information to make automated decisions with legal or similarly significant effects on you.

• To provide the service you requested or perform your contract: quoting, booking, photographing, delivering and billing.
• With your consent: text and WhatsApp messages Kova initiates, marketing messages, analytics and advertising cookies where required, allergy notes for makeup, use of photos in our portfolio or ads and, if offered, face search in galleries. You can withdraw consent at any time, without affecting what was done before.
• To comply with the law: tax and accounting records, responses to authorities and required notices.
• For the legitimate interests of a small business, balanced with your privacy: security, fraud prevention, service improvement and replying to messages you start.

Giving consent to receive text, WhatsApp or marketing messages is never a condition of purchase or booking.

Text messages (SMS/MMS)

If you agree to receive text messages from Kova Photo Studio, we collect your mobile number and your consent record to send the messages you requested: appointment confirmations and reminders, quotes, payment and gallery-ready notices, and customer care replies. Marketing messages are sent only if you separately agreed to them.

Message frequency varies. Msg & data rates may apply. Reply STOP to cancel, HELP for help. Consent is not a condition of purchase.

(Twilio/CTIA) No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties.

All sharing categories described in this policy exclude text messaging originator opt-in data and consent. We only share your number with the providers that deliver messages on our behalf (such as our SMS platform, Twilio, and mobile carriers), which are not third parties for marketing purposes and may not use it for anything else.

WhatsApp

We use Meta's WhatsApp Business Platform. We only message you on WhatsApp if you wrote to us first or agreed to receive messages from Kova Photo Studio on WhatsApp. Notices Kova initiates (such as confirmations, reminders and gallery-ready updates) use WhatsApp-approved templates. You can stop them by replying STOP or BAJA, or by asking in the chat.

WhatsApp, Messenger and Instagram are Meta services and are also governed by Meta's privacy policies. Meta processes your messages to deliver them.

Facebook Messenger and Instagram Direct

We reply to messages you send to our Facebook Page or Instagram account. Only our team sees these conversations, in our support inbox. We don't use this data to build advertising profiles and we don't sell it. We only message you on these channels when Meta's rules allow, usually in reply to your message.

AI virtual assistant

Some conversations and calls may be handled by Kova's virtual assistant, which uses artificial intelligence to answer common questions, take details and suggest appointments. It always introduces itself as a virtual assistant, and you can ask for a person at any time by typing or saying "person" or "representative." To work, the conversation content is processed by artificial intelligence providers acting on our behalf which, under our contracts with them, may not use your information to train their general models.

Calls and recordings

Florida requires the consent of all parties to record a call. That's why at the start of every recorded call you'll hear: "This call may be recorded and may be answered by an AI assistant." If you continue the call, you agree to the recording; if you don't want it recorded, say so and a person will help you without recording, or contact us on another channel.

We use recordings and transcripts only to serve you, schedule, confirm what was agreed and improve quality, and we keep them for to be confirmed.

We don't make marketing calls using an artificial or prerecorded voice without your prior written consent.

Email

We email you about your quote, booking, payments and gallery. News or promotional emails are sent only if you agreed, include our postal address and an unsubscribe link, and we honor your request within 10 business days at most.

How to stop messages

Reply STOP to any text (we also accept PARAR, BAJA or CANCELAR), reply STOP or BAJA on WhatsApp, use the unsubscribe link in emails, or ask us by phone, email or in person. When you opt out on one channel, we stop sending you automated messages on all our channels, unless you ask us to keep one. We may send you a single confirmation, with no advertising.

We use third-party tools to understand how the site is used, measure whether our ads work, and show Kova ads to people who visited the site. These tools use cookies, pixels and similar technologies, and may collect information from your browser and your activity on the site.

• Meta Pixel and Meta Conversions API: send Meta events such as page views, form submissions or bookings. When we use the Conversions API, your email and phone are turned into an encrypted code (SHA-256 hash) before they are sent, so Meta can match the event to an ad without receiving that data in readable form.
• TikTok Pixel and TikTok Events API: send TikTok similar events, with the same hashed data, to measure and show our ads on TikTok.
• Google Ads and Google Analytics 4: measure visits, conversions and the performance of our Google ads. If we use enhanced conversions, email or phone are also sent hashed.
• Click-to-WhatsApp or Messenger ads and ad lead forms: the platform tells us which ad you came from and, if you filled out a form, the details you entered.

We never send these platforms data about minors, health or allergy notes, dates of birth, or sensitive information. These tools are not used in your private gallery or on pages or forms directed to minors. We only build advertising audiences from adults' data.

Meta, TikTok and Google may use the information they receive under their own privacy policies, for example to improve their ads.

How to opt out of ad tracking

• Open "Cookie preferences" in the footer and turn off analytics or advertising. We'll remember it in this browser.
• If your browser sends the Global Privacy Control (GPC) signal, we honor it as a request not to use advertising cookies or pixels, and we don't send your data to the Meta Conversions API or the TikTok Events API from that browser.
• You can also adjust your preferences directly with Meta, Google and TikTok, or block cookies in your browser. You'll find the official links in our Cookie Notice.

This section applies only if you connect a Google account to a Kova service, or if Kova uses Google APIs to access Google user data (for example, to schedule in Google Calendar or share files through Google Drive).

In that case, we only access the data needed for the feature you authorize (to be confirmed), use it only to provide that feature, don't use it for advertising, don't sell it, don't let people read it except with your permission, for security or as required by law, and don't use it to train general artificial intelligence models. You can remove access at any time in your Google account settings.

Kova Photo Studio's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We share information only with providers that help us operate, only what they need, and under agreements that require them to protect it and use it only on our instructions:

• Payments: Stripe.
• Email delivery: Resend.
• Text messages, calls and WhatsApp: Twilio and Meta (WhatsApp Business Platform, Messenger and Instagram).
• Hosting, content delivery and site security: Cloudflare, Hetzner.
• Online galleries and photo storage, album and acrylic printing, and 3D figurine production: only the photos and shipping details needed for your order.
• Virtual assistant and artificial intelligence, analytics and advertising (see sections 5 and 6).
• Complete, current list of providers: to be confirmed.

Experience-session partners: if you book an experience (for example, yacht or helicopter), we share with the licensed operator your name, contact details, date and the details it needs for its waiver and safety. The operator handles them under its own policy.

We may also share information when required by law, to protect rights or people's safety or prevent fraud, or if the business is sold or changes ownership; in that case, the new owner must respect this policy and we'll let you know.

None of these categories include text messaging consent data or your mobile number for third-party marketing purposes (see section 5).

We don't sell, rent or trade your personal information, your session photos, your conversations or the data we receive from Meta, Google or TikTok. We don't share minors' data or sensitive data for advertising purposes.

Some state laws treat the use of advertising pixels as "sharing." You can turn them off at any time, as explained in section 6, and we honor the GPC signal.

Our website and services are directed to adults. We don't knowingly collect personal information directly from children under 13, we don't create accounts for minors, and we don't have forms directed to children.

Information about minors (name, age, photos, sizes) is provided by their parent or legal guardian, who is our contact, signs the contract and authorizations, and decides how the photos are used.

If someone under 18 messages us on WhatsApp, Messenger, Instagram or the website, we ask their parent or guardian to continue the conversation. We only send session-logistics messages to a minor's number if their parent or guardian authorizes it, and we never send marketing messages to minors.

If we learn that we received information directly from a child under 13 without a parent's or guardian's authorization, we delete it. If you believe this happened, email us at to be confirmed.

The photos from your session are personal information. We store them on secure systems and deliver them through a private, password-protected online gallery at to be confirmed. You decide who you share the link and password with; anyone who has them can view and download the photos.

By default, your photos are private. We only use them in our portfolio, website or social media if you sign a portfolio release.

Using your likeness in paid ads requires an additional, separate advertising release, as Florida law requires (Fla. Stat. 540.08). If you don't sign it, your photos will never appear in ads.

If minors appear in the photos, only their parent or legal guardian can sign these releases.

You can withdraw any release at any time by emailing to be confirmed. We'll stop using those photos in new posts and ads and remove them from our website and profiles within to be confirmed. Material already printed or shared by others may not be fully removable.

To produce albums, acrylics and 3D figurines, we share the selected photos only with the printing or manufacturing partners that need them, and only for that purpose.

We don't use your photos to train third-party artificial intelligence systems or to build facial recognition, except the optional face search described in section 12, if offered and only with your consent.

We don't currently offer face search. If we enable a feature in the future to find your photos in a gallery using a selfie, this section will apply and we'll tell you before you use it.

The feature will be optional and will only work with your express consent. For minors, only with the consent of their parent or legal guardian.

The face template created from the selfie will be used only to find photos in that gallery, will not be shared or sold, will not be used for other purposes, and will be deleted to be confirmed.

• Inquiries and quotes that don't become a booking: to be confirmed.
• Contracts, invoices, payments and tax records: as long as the law requires (to be confirmed).
• Conversations by text, WhatsApp, Messenger, Instagram and email: to be confirmed.
• Call recordings and transcripts: to be confirmed.
• Messaging consent and opt-out records: to be confirmed, so we can prove your choice.
• Online gallery: available for to be confirmed after delivery. We recommend downloading your photos.
• Backup archive of your photos: to be confirmed.
• Allergy or sensitivity notes for makeup: deleted after your session, unless you ask us to keep them.
• Job applications: to be confirmed.
• Cookie and analytics data: according to your preferences and each tool's periods, described in the Cookie Notice.

After these periods, we securely delete or anonymize the information.

We protect your information with reasonable measures: encrypted connections (HTTPS), password-protected galleries, access limited to the team members who need it, two-step verification on our accounts, backups and secure disposal of what we no longer need.

No system is 100% secure. If a security incident affects your personal information, we'll notify you without unreasonable delay and, as Florida law requires (Fla. Stat. 501.171), no later than 30 days, unless the law allows a different period. Where required, we'll also notify the authorities.

If you find a vulnerability on our website, report it to to be confirmed.

Wherever you live, you can ask us to:

• Tell you what information we hold about you and give you a copy.
• Correct inaccurate or incomplete information.
• Delete your information, except what we must keep by law (see section 16).
• Withdraw your permission to use your photos in our portfolio or in ads.
• Stop receiving text messages, WhatsApp messages or promotional emails (reply STOP, BAJA or use the unsubscribe link).
• Turn off analytics and personalized advertising from "Cookie preferences." We honor the Global Privacy Control (GPC) signal as a request to opt out of ad tracking.

To use your rights, email us at to be confirmed or use the Delete my data form. To protect your information, we'll verify your identity by matching the details you give us with the ones we hold. An authorized person may make the request for you with your written permission.

We'll respond within to be confirmed. If you disagree with our answer, you can ask us to review it by replying to the same email; we'll respond in writing. We won't treat you differently for using your rights.

You can ask us to delete your information, including data we received through Facebook, Instagram or WhatsApp, in any of these ways:

• Using the Delete my data form.
• By email to to be confirmed with the subject "Delete my data."
• On WhatsApp, Messenger or Instagram, by writing "Delete my data" in our conversation.

We confirm receipt of your request within to be confirmed and complete it within to be confirmed. We keep only what the law requires us to keep, such as contracts, invoices and tax records, and the record of your messaging opt-out so we can keep honoring it. We'll tell you what we keep and why.

We update this policy when our tools or the way we use your information change. We'll post the new version here with its date and, if the changes are significant, we'll let you know by email or message before they take effect.

18. Contact

to be confirmed d/b/a Kova Photo Studio · to be confirmed, Miami, Florida · to be confirmed · to be confirmed