Last updated: March 2, 2026
We collect only what we need to run fstop for you. We don't sell your data. We don't show you ads. We don't track you across the web. Your business data is yours, and we treat it that way.
Fstop CRM ("fstop", "we", "us", "our") is a client relationship management platform built for photographers and videographers. Our website is fstopcrm.com and our support email is hello@fstopcrm.com.
When you sign up for fstop, we collect:
We use Google OAuth for authentication. We do not store your Google password. Google provides us with your name, email, and profile picture when you authorize sign-in.
Everything you create inside fstop is your data. This includes:
When someone fills out your fstop-connected contact form or embedded form, we receive the data they submit (typically name, email, event date, event type, and message). This data is stored in your fstop account so you can manage your inquiries. We process this data on your behalf — you are the data controller for your clients' information.
Subscription billing is handled by Stripe. When you subscribe, your payment details (credit card number, billing address) are collected and processed directly by Stripe. We do not see or store your full credit card number. We receive from Stripe: your subscription status, billing period, and the last 4 digits of your card for display purposes.
If you connect Google Calendar, we access your calendar events to display them in your fstop dashboard. We request the minimum permissions needed to read and display your calendar. We do not modify your Google Calendar data unless you explicitly create events through fstop.
If you connect Gmail for sending emails through fstop, we request permission to send emails on your behalf. Emails are sent from your Gmail account directly. We do not read your inbox, access your email history, or store your Gmail credentials. The OAuth token is stored securely and used only to send emails you initiate through fstop.
We collect basic usage data to keep the service running and improve it:
We do not use third-party analytics trackers on the marketing site or inside the app. We do not run Facebook Pixel, Google Analytics, or any advertising trackers.
We use your data to:
We do not use your data to:
Your data is stored on Supabase, which runs on Amazon Web Services (AWS) infrastructure. Supabase provides database hosting, authentication services, file storage, and edge functions. Data is stored in secure, encrypted databases. Supabase's infrastructure is SOC 2 Type II compliant.
Media files you upload (logos, photos) are stored in Supabase Storage with access controls so only you and your authorized team members can access them.
Fstop uses the following third-party services to operate. Each processes data only as needed for their specific function:
We do not share your data with any service not listed above. We do not use data brokers, advertising networks, or analytics platforms.
We take the security of your data seriously:
You have the right to:
Your data is retained as long as your account is active. If you cancel your subscription:
If you request immediate deletion, we will process it within 7 business days.
Fstop uses only essential cookies required for the platform to function:
We do not use advertising cookies, tracking cookies, or third-party cookies. There is no cookie banner because there are no optional cookies to consent to.
Fstop is a business tool designed for professional photographers and videographers. It is not intended for use by anyone under the age of 18. We do not knowingly collect data from minors.
If we make significant changes to this privacy policy, we will notify you by email and update the "Last updated" date at the top of this page. Minor clarifications or formatting changes may be made without notification.
If you have questions about this privacy policy or how we handle your data, email us at hello@fstopcrm.com.