Legal
Privacy Policy
What we collect, why we collect it, and how to get it back or have it deleted.
The short version
- We collect what a shoot needs: who you are, where the property is, and how to reach you on the day.
- We do not sell your personal data, and we never have.
- We do not track you. No analytics, no advertising cookies, nothing that follows you to another site.
- Card numbers never touch our systems. We do not collect or store payment card details.
- Email photos@twincitiestopdown.com to get a copy of your data or ask us to delete it.
Who we are
Twin Cities Top Down Photography ("we", "us") is a real estate media business operating in Minnesota, serving the Minneapolis–St. Paul metro. We are the controller of the personal information described here.
Questions, requests, or complaints: photos@twincitiestopdown.com.
What we collect
Information you give us
- Account details: your name, email address, phone number, brokerage, license number, and website, entered when you create an agent portal account or update your profile.
- Branding images: the headshot and brokerage logo you upload, which we place on your flyers and property websites.
- Order and scheduling details: the property address, the services you select, the date and time you choose, access notes, and the name and phone number of whoever is meeting us at the property. If that person is not you, you are telling us their details on their behalf, and you are responsible for having their permission to do so.
- Messages: anything you send through the contact form or by email.
Information created by the work
- Photographs, video, floor plans, and 3D scans of the property. These are images of a building, but they can incidentally capture people, vehicles, license plates, and personal possessions. We deliver what we shoot and we do not use it to identify anyone.
- Order history and invoices: what was booked, what was delivered, and what was charged. We keep these because Minnesota and federal tax law require us to.
Information collected automatically
- Server logs. Our host records standard request information, such as IP address, timestamp, page requested, and browser type, as every web server does.
- Sign-in session. Staying signed in to the portal requires storing a session token in your browser. It is strictly necessary for the portal to work, it identifies only your account, and it is not used to follow you anywhere.
What we do not collect
- Card numbers. We do not collect, transmit or store payment card details. Invoices are sent to you and settled directly with us.
- Advertising profiles. We do not run advertising pixels, analytics or session recording, we do not build advertising audiences, and we have nothing to retarget you with.
- Sensitive categories. We do not ask for and do not want your race, religion, health, biometric, precise geolocation, immigration status, sexual orientation, or genetic information.
Why we use it
- To schedule, shoot, edit, and deliver the media you ordered.
- To place your name, photo, logo, and contact details on the flyers and property websites we build for you. That is the point of collecting them.
- To take payment and issue invoices.
- To contact you about a booking, a delivery, or a change to an order.
- To meet our tax, accounting, and legal obligations.
- To keep the service secure and working.
We do not use your information for automated decision-making or profiling, and we do not use it to build advertising audiences.
Cookies and similar technologies
A cookie is a small file a site stores in your browser. We also use your browser's local storage, which works the same way for this purpose. There is only one kind here.
Strictly necessary: always on
These make the site work. They cannot be switched off, and asking permission for them would be theatre, since refusing would simply break the thing you came to use.
- Sign-in session. Keeps you signed in to the agent portal as you move between pages. Cleared when you sign out.
- Interface preferences. Small conveniences the portal remembers on your own device, such as which section you last had open.
No analytics, no advertising
There is no Google Analytics here, no advertising pixel, and no third-party tracker of any kind. That is also why there is no cookie banner: the only cookies we set are the ones above, which are necessary for the site to work, so there is nothing to ask you to accept.
Who we share it with
We do not sell personal data, we do not rent it, and we do not trade it. We share it only with the service providers that make the business run, and only to the extent each one needs:
| Provider | What it handles |
|---|---|
| Google (Firebase) | Hosting, sign-in, database, and file storage. Your account details, orders, and media live here. |
| Google Maps Platform | Address autocomplete on the order form. The characters you type into the address box are sent to Google to return suggestions. |
| Email delivery provider | Sending booking confirmations, delivery notices, and invoices to your address. |
We will also disclose information where the law requires it, for example a subpoena, a court order, or a tax audit, and to establish or defend a legal claim. If the business is ever sold or merged, customer records would transfer with it, and you would be told before that happened.
Your property media, and who can see it
Delivered photographs and video are yours to use under the licence in our Terms & Conditions. On our side:
- Files in storage are not publicly readable. The portal serves them through time-limited links generated for your signed-in session.
- A property website or gallery you choose to publish is, by design, reachable by anyone with the link. That is what makes it forwardable to a seller or a buyer. Publishing is your decision, not ours.
- We ask before using images of your listing in our own portfolio or marketing. Consent is recorded per listing and defaults to not granted. If we have not asked you, we have not used them.
How long we keep it
- Account and profile details: while your account is open, and for a short period afterwards.
- Orders and invoices: at least seven years, because tax and accounting rules require it. These survive account deletion; we are not permitted to erase them on request.
- Delivered media: we keep working files for a limited archival period and are not a backup service. Download and store your own copies. See the Terms for the current archival window.
- Contact form messages: until the enquiry is resolved, then periodically cleared.
Your rights
Minnesota's Consumer Data Privacy Act took effect on 31 July 2025. It applies to businesses above thresholds, broadly those handling the data of 100,000 or more Minnesota consumers, and it exempts small businesses as defined by the U.S. Small Business Administration. We are well below those thresholds, so most of the Act does not currently bind us. One part applies to small businesses regardless: sensitive data may not be sold without consent. We do not sell any personal data, sensitive or otherwise.
We would rather honour the rights than argue about whether we have to. On request, and at no charge, we will:
- Confirm whether we hold personal information about you, and tell you what.
- Give you a copy in a portable format.
- Correct anything inaccurate.
- Delete what we are not legally required to keep.
- Tell you which providers above have received it.
Email photos@twincitiestopdown.com. We will respond within 45 days. We may need to verify you are the account holder before acting, which normally means replying from the email address on the account. If we decline a request we will say why, and you may appeal by replying to that decision; you may also contact the Minnesota Attorney General's Office.
Security
Access to accounts is protected by sign-in, media files are not publicly readable, database access is governed by server-side rules rather than trust in the browser, and payment details never reach our systems. No system is perfect, and we cannot promise that nothing will ever go wrong, but if a breach affects your personal information, we will tell you.
Children
This is a business-to-business service for real estate professionals. It is not directed at children, and we do not knowingly collect information from anyone under 13. If you believe a child has given us information, email us and we will delete it.
Where your data is handled
We are a Minnesota business and our providers process data in the United States. If you are contacting us from outside the U.S., your information will be handled in the U.S.
Changes
If this policy changes we will update the date at the top of this page. If a change materially affects how we use information you have already given us, we will email account holders rather than rely on you noticing.
Contact
Twin Cities Top Down Photography
Minneapolis–St. Paul metro, Minnesota
photos@twincitiestopdown.com
This policy describes our actual practices in plain language. It is not legal advice, and it has not been reviewed by an attorney. If your brokerage's compliance team needs specific wording, send it over and we will accommodate it.
