Your details, kept to the job.

Attara Pty Ltd trading as Denarii Studio (ABN 74 685 002 902) ("we", "us") is a real estate and commercial photography studio in Brisbane. This policy explains what personal information we collect, why, where it goes and how long we keep it. We handle it under the Privacy Act 1988 (Cth) and the Australian Privacy Principles. It applies to agents, property managers, commercial clients, vendors and tenants whose properties we photograph, and visitors to our website.

When you book or ask for a quote: your name, email, mobile, agency or company and office, the property address, access notes, who will be at the property, anything you tell us about the site or the brief, and any notes you leave for the photographer. If you upload a logo, we keep it to apply to your media. If you give us the owner's or tenant's email, we hold it to tell them what to expect on the day.

When you sign in: your email, and if you set one up, a passkey (we store only its public key). Our own team signs in with a password and a second step.

As the job runs: the photographs and video we take, which proofs you approved or sent back and what you asked to change, your rating of the shoot and any note with it, every email and text we send you, and the invoice.

When you talk to us: calls, emails and messages, including replies to our emails and anything you type into the website assistant, the contact form or the commercial enquiry form.

When you visit the website: the address you type into the booking form, and the cookies below. We do not run advertising trackers or analytics scripts.

We do not collect card details. If you pay by card, Stripe collects them on their own page.

To run the shoot: confirming and scheduling it, pricing it (the address decides the travel zone), sending run sheets to the photographer, telling the owner or tenant what to expect, delivering the gallery, invoicing, and following up on how it went.

To count your shoots, so the referral credit and the every-10th-shoot discount are applied without you having to ask.

To keep track of our relationship with you: which agents and clients we have spoken to, what we sent them and what they said, so two directors and a sales representative do not each ring you about the same thing.

To improve the work: we review our own photographs, with no personal details attached, to keep the standard consistent.

To send marketing only if you tick the box when booking. Every marketing email has an unsubscribe link, and we send no marketing by text.

The media we make is of a property, for the client who booked it. We avoid capturing people, number plates, personal documents and anything on screens, and where one appears we have it removed in editing. We may show a property in our own portfolio and marketing unless you ask us not to for a particular listing; the owner of a property can ask us to take it down from our own marketing at any time.

Everyone below acts on our instructions and may not use your information for their own purposes. We do not sell personal information.

• Our photographers, who see the bookings they are working on: address, access notes, who is at the property, and your name and number in case they need to call.
• Our editing partner, a specialist photo-editing company outside Australia that finishes our photographs to our brief. They receive the original camera files for a shoot, the property address and the brief, and send the finished photographs back through a private link. They never receive your name or contact details. The final finish is applied here, by us.
• CubiCasa, if a floor plan is ordered. They receive a scan of the property's interior, taken on the day, and return the drawn plan. They operate outside Australia.
• Supabase, which holds our database and files, in Sydney, Australia.
• Vercel, which hosts the website and the systems behind it. Our application runs in their Sydney region; pages may be served to you from the nearest point of their worldwide network, and nothing is stored there.
• Resend, which sends our email and receives your replies to it.
• ClickSend, an Australian service, which sends our text messages.
• Photon, an address search run by komoot on OpenStreetMap data, which fills in the address you type when booking. The text you type is sent to it to find the match. It runs in Germany.
• Microsoft 365, our own email and calendar. A booking is put in our calendar with the address and your name.
• Stripe, if you pay an invoice by card. Stripe handles the card on its own page.
• HubSpot, our customer relationship system. It holds the name, contact details, agency or company and office of the agents and clients we work with and talk to, where our relationship with them stands, which of our services they have asked about, what we have sent them, notes of our conversations and the next thing we have agreed to do. It does not hold shoot dates, galleries or invoices; those stay in our own system. HubSpot stores this in its Asia-Pacific data centre.
• Anthropic, whose AI models we use for the tasks in the next section.
• ProductReview, if you choose to leave a public review after a shoot. Their own policy applies once you are on their site.

Some of our work is done with Anthropic's Claude models. What is sent, and for what:

• The photographs from a shoot, so the model can help us choose the best frames and name the rooms. No name, address or booking detail goes with them.
• A hand sketch of a floor plan, to draw it up.
• The question you type into the website assistant, with the conversation so far, so it can answer from our own published information. Do not put anything confidential in it.
• When we write to you after a shoot, the model may draft the email from your first name, the property address and what happened; one of us reads and sends it.

Anthropic processes these in the United States and, under our agreement with them, does not use them to train its models. No AI decides anything about you; a person approves every gallery, every invoice and every email.

Some of the companies above are outside Australia: our editing partner and CubiCasa (editing and floor plans), komoot (Germany), and Anthropic, Resend and Stripe (the United States). Each receives only what its task needs, under terms that limit it to that task. Your booking records, your media and our relationship records stay in Australia or in the Asia-Pacific region.

Access to our systems is limited to the team and protected by a password and a second step — a passkey or a code. Agents sign in with a single-use link that expires in 30 minutes, or a passkey. The database and file storage are not reachable from the public internet. Galleries, invoices and editing jobs are opened through links that expire and can be revoked. Every change made in our Studio is logged against the person who made it.

Booking, approval and invoice records: seven years, to meet Australian tax law.

Delivered media and the original camera files: at least twelve months after the shoot so you can re-download it, and until you ask us to delete it.

Contact and relationship records in HubSpot: while we are in contact with you, and until you ask us to remove them.

Sign-in links expire within 30 minutes; gallery and editing links within days. Website assistant conversations are not kept beyond the session.

The website sets only the cookies it needs to work, and no advertising or analytics cookies:

• lvl_agent keeps you signed in to the agent portal; lvl_staff and lvl_mfa do the same for the Studio and its second step.
• lvl_ref remembers a referral code you arrived with, for 60 days, so the discount is applied when you book.
• lvl_preview is set only while the site is behind a preview code.

You can clear them in your browser at any time; you will be signed out and a referral code will need to be entered again.

You can ask to see, correct or delete the personal information we hold about you by emailing contact@denariistudio.com.au. We will reply within 30 days. You can unsubscribe from marketing from any marketing email, and you can ask us to stop using a property's media in our marketing at any time.

If you have a complaint about how we have handled your information, email us and we will respond within 30 days. If you are not satisfied with our answer, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

We update this policy when the systems we use change, and every agent is emailed a notice when we do. The date at the top is the date of the current version. Questions: contact@denariistudio.com.au or 07 3522 3303.