DATA PRIVACY RESOURCES

No matter what tools you use, protecting families’ information is a key part of running a modern volume photography business.

No matter what tools you use, protecting families’ information is a key part of running a modern volume photography business.

But data privacy can get complicated fast.
 
So we’ve collected practical information in one place to help you understand:
  • what imago does to protect its part of the process;
  • what you can do inside your own studio;
  • questions worth asking the other vendors you use; and
  • common privacy and security terms you’ll hear when working with schools.
 
You don’t need to become a privacy expert.
 
You just need to know the right questions to ask and have a dependable process for the information entrusted to your business.

How imago approaches security

When you use imago, images and information move through our platform. We take our responsibility for protecting that information seriously.
 
Imago maintains security controls designed to protect the security and confidentiality of information processed through our platform.
 
Our security practices have undergone an independent SOC 2 Type II examination, and applicable controls have been mapped to the NIST Cybersecurity Framework (CSF) 2.0.
soc2 type2 badge

SOC 2 Type II
Independent examination of imago’s security practices.

nist csf 2.0 badge

NIST Cybersecurity Framework 2.0
Applicable controls mapped to NIST CSF 2.0.

Want to take a closer look?
Visit the imago Trust Center.

IMAGO TRUST CENTER

Your studio has a role, too.

Good data practices don’t stop with your software.
 
Think about how information moves through your own business:
  • Who has access to rosters and customer information?
  • Where are files stored?
  • How are files shared?
  • How long do you keep information?
  • What happens when seasonal staff no longer needs access?
  • Which vendors and systems touch that information?
 
You don’t need to fix everything at once.
 
Pick one workflow. Follow the information from beginning to end. Then tighten anything that doesn’t need to be there.
SIMPLE DATA PRIVACY HABITS FOR PHOTOGRAPHERS

Imago’s Privacy & Terms of Service Documents

These links explain how imago treats data, images, and account information in simple, transparent language.

Imago Privacy Policy
Learn what information we collect, how it’s used, and how it’s protected.

IMAGO PRIVACY POLICY

Imago Terms of Service
Understand the rules of using Imago, including account responsibilities and key legal details.

IMAGO TERMS OF SERVICE

Practical Cybersecurity & AI Resources

Here are some trusted resources that apply really well to volume photography studios and small businesses:

Cyber Security
There’s no business too small to be targeted by cyberattacks or fraud. The information we share here reflects good general practices designed to strengthen your awareness and reduce risk.

CYBER SECURITY

Responsible Use of AI & Customer Data
General guidelines on using AI tools with personal data and images.

AI INDUSTRY GUIDELINES

Additional Data Privacy Resources

Here are some additional resources and common terms you’ll hear when working with schools and families around data privacy.

SOC 2 (System and Organization Controls 2)
SOC 2 is a compliance framework created by the American Institute of Certified Public Accountants (AICPA) to evaluate and validate an organization’s information security practices.

SOC 2

NIST CSF 2.0 (National Institute of Standards and Technology Cyber Security Framework 2.0)
The NIST Cyber Security Framework 2.0 is a flexible set of guidelines and best practices designed to help any organization understand, manage, and reduce its cybersecurity risks.

NIST CSF 2.0

FERPA (Family Educational Rights and Privacy Act)
FERPA is a U.S. law that protects the privacy of student education records.

FERPA

SOPPA (Student Online Personal Protection Act)
An Illinois law about how student data is collected, stored and secured for schools and education technology vendors.

SOPPA

BIPA (Biometric Information Protection Act)
An Illinois law regulating how biometric information (facial geometry, finger prints, etc.) is collected, stored and used.

BIPA

SOPIPA (Student Online Personal Information Protection Act)
A California law that prohibits k-12 edtech operators from selling student data or building student profiles for non-educational purposes.

SOPIPA

COPPA (Children’s Online Privacy Protection Act)
The Children’s Online Privacy Protection Act (COPPA) is a U.S. federal law that controls how online services and websites directed towards children under the age of 13 collect and use personal data.

COPPA

CCPA (California Consumer Privacy Act)
A California law that gives California residents the legal right to know what personal data companies collect about them.

CCPA