Privacy notice.

Who to contact

Unfabled Art is an Austin, Texas photography business founded by Tatiana Ilina. For questions about your information, email hi@unfabledart.com. The final public notice requires confirmation of the responsible business’s legal identity and contact details.

What you choose to share

When online inquiries are enabled, forms request your name and email, with an optional phone number. Depending on the inquiry, you may share a photography category, date or flexible timing, location preferences, venue, business name, project brief, and notes. Emailing us also shares your email address and the contents of your message.

While the private preview is non-submitting, preview preferences are not submitted or saved as inquiries. Ordinary site requests can still create server logs. Please do not send IDs, payment details, health information, children’s contact details, or precise device location.

Why the information is used

Inquiry information is used to understand your request, respond, discuss scope and availability, and prevent duplicate or abusive submissions. Sending an inquiry is not a booking or a payment. Inquiry information is not collected for a mailing list; any marketing use requires a separate approved basis.

Storage, delivery, and service providers

Enabled inquiries are saved in a private database before an email notification is queued. The hosting and encrypted backup infrastructure uses DigitalOcean. Resend delivers business notifications. Business email and forwarded copies use the configured mailbox/group service (Google Workspace); the final notice must confirm the recipient and forwarding arrangements.

Cloudflare Turnstile provides the spam check when enabled and receives browser/network information under its own privacy practices. Session cookies support form security; hashed network identifiers support rate limiting. The application does not store raw IP addresses in its rate-limit records, but hosting and proxy logs are separate.

Provider information: DigitalOcean privacy policy, Resend privacy policy, Cloudflare privacy policy, and Google privacy policy.

Retention and backups

The adopted policy is to expire live inquiry and notification-queue records 180 days after submission, with daily cleanup. Encrypted backup snapshots have a 30-day retention window with daily pruning. Deleted data can remain in recovery backups for up to that window plus the daily cleanup interval; job failures can extend it.

The notification mailbox, forwarded copies, and group archives require separate cleanup. Their intended policy is also 180 days, but operational verification remains open. Resend’s documented retention is separate from our database; the operations record notes 30 days for provider email data. We cannot promise application-controlled deletion of provider records.

Server and security logs have separate rotation settings. A verified time-based retention period has not yet been established across all logging systems, so this preview does not promise one. Contract or accounting records and legal preservation obligations are separate from the inquiry store.

Ask about access or deletion

Email hi@unfabledart.com to ask about your information or request deletion. Include an inquiry reference if available, but do not send identity documents. We may need to verify that the request concerns your information. Mailbox copies, service-provider records, and recovery backups need separate handling; we do not promise instant removal from every system.

Before public launch

This notice must be approved against the actual business identity, processor settings, deletion procedure, and retention operations before public inquiry intake opens. These policy periods are business choices, not a claim that Texas law mandates these durations.