Privacy Policy

This Privacy Policy explains how ThatOneMedia (“we,” “us,” or “our”), a real estate and brand media company based in Wilmington, North Carolina, collects, uses, and protects your information when you visit thatonemediacompany.com (the “Site”) or use your client account. By using the Site or creating an account, you agree to this Policy.

Information we collect

Information you provide

• Account details: your name and email address, provided when you sign in with Google or request an email sign-in link.
• Profile information: an optional display name and profile photo you choose to upload.
• Booking & shoot requests: the property, service, dates, notes, and contact details you submit when you book or request work.
• Favorites: the photos you mark as favorites in your delivered galleries.
• Messages: anything you send us through the contact form or our on-site assistant chat.

Information collected automatically

• Approximate location & IP address: derived from your connection when you sign in, used to help us understand and secure account activity.
• Usage & device data: basic technical information (browser, device, pages viewed) from standard server logs.
• Cookies & local storage: see “Cookies and local storage” below.

How we use your information

• Create and manage your account and sign you in securely.
• Schedule shoots, fulfill bookings, and deliver your photos, video, and other media.
• Send you account-related email: booking confirmations, delivery notifications, sign-in links, and referral rewards.
• Respond to your messages and provide support.
• Operate, secure, and improve the Site.
• Comply with legal obligations and enforce our Terms.

We do not sell your personal information. We do advertise our own services through Google Ads, and we use Google Analytics to measure how our ads and website perform. We do not share your personal information with advertisers for their own marketing.

Service providers we share data with

We share information only with the providers that help us run the service, each acting on our behalf:

• Supabase: authentication, database, and secure storage of your account data and delivered media.
• Vercel: website hosting and infrastructure.
• Resend: sending transactional email.
• Google: optional “Sign in with Google” authentication, plus Google Analytics and Google Ads for website and advertising measurement.
• Groq and xAI: powering our on-site assistant chat; messages you send the assistant are processed to generate a reply.

We may also disclose information if required by law or to protect our rights, users, or the public.

Cookies and local storage

We use a small number of cookies and browser storage items:

• Authentication: a secure session cookie keeps you signed in.
• Referral: a cookie remembers a referral link so the right person is credited.
• Preferences: your light/dark theme choice is stored on your device and on your account so it follows you across devices.
• Analytics & advertising: Google Analytics and Google Ads set cookies that tell us how visitors find and use the Site, and whether one of our ads led to a booking. You can opt out with Google’s browser add-on.

We do not sell your information to advertisers, and we do not allow third parties to use it for their own marketing.

Your delivered media

Galleries we deliver to you are stored privately and are accessible only through your authenticated account via secure, time-limited links. We retain delivered media to provide ongoing access to your galleries; you may ask us to remove it at any time.

Data retention

We keep your information for as long as your account is active or as needed to provide our services, meet legal requirements, resolve disputes, and enforce our agreements. When you close your account, we delete or anonymize your personal information unless we are required to retain it.

Your rights and choices

You can access, correct, export, or delete your personal information, and you can ask us to close your account and delete associated data. To make a request, contact us using the details below. We will respond within a reasonable time and as required by applicable law.

Security

We use industry-standard safeguards: encryption in transit, access controls, and authenticated, time-limited media links, to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Children’s privacy

The Site and accounts are intended for adults. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will delete it.

Third-party links

The Site may link to third-party sites (such as our social profiles). We are not responsible for their privacy practices, and we encourage you to review their policies.

Changes to this Policy

We may update this Policy from time to time. We will revise the “Last updated” date above and, where appropriate, notify you. Your continued use of the Site after changes take effect means you accept the updated Policy.