Private media. Deliberate approval.

Company-scoped access

The application authenticates requests and checks company access on the server. Workers access their own job workflow; office and company administrator roles provide the relevant review and management functions. Public marketing pages do not have application database or media bindings.

Authentication and request protection

The private application uses secure session cookies and server-side permission checks. State-changing requests use origin and CSRF checks. Password access and supported passkeys belong to the application origin, not this public website.

Review is part of the content workflow

Office can inspect private details, review publication consent for identifiable workers and approve the selected media. A privacy checklist supports human review; it is not automatic face detection or a legal determination of permission.

Deletion and operational records

Authorised administrators can delete selected photos or videos and their dependent generated files. Job and use metadata can remain for audit and reward records. Previously downloaded or published copies and existing backups have separate lifecycles.

Be precise about assurances

We do not claim ISO or SOC 2 certification, a guaranteed uptime percentage or a complete compliance certification. Deployment-specific responsibilities, retention, subprocessors and contractual commitments need to be agreed before commercial use.