Privacy Policy

This Privacy Policy describes how Pierre T. Lambert / P.T. Lambert LLC (“we”, “us”, or “our”) collects, uses, and discloses your personal information when you visit, use our services, or make a purchase from pierretlambert.com (the “Platform”), our companion shop at shop.pierretlambert.com, or otherwise communicate with us (collectively, the “Services”). For purposes of this Privacy Policy, “you” and “your” means you as the user of the Services.

Please read this Privacy Policy carefully.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on the Platform, update the “Last updated” date and take any other steps required by applicable law.

How We Collect and Use Your Personal Information

To provide the Services, we collect personal information about you from a variety of sources, as set out below. The information that we collect and use varies depending on how you interact with us. In addition to the specific uses set out below, we may use information we collect about you to communicate with you, provide or improve the Services, comply with any applicable legal obligations, enforce any applicable terms of service, and to protect or defend the Services, our rights, and the rights of our users or others.

What Personal Information We Collect

Information We Collect Directly from You

Information that you directly submit to us through our Services may include:

• Contact details including your name, address, phone number, and email.
• Account information including your email address, display name, and profile picture (when signing in via Google OAuth or Magic Link).
• Order information including your name, billing address, shipping address, payment confirmation, email address, and phone number.
• Customer support information including the information you choose to include in communications with us.
• Chat messages and uploaded images that you submit through the Pierre AI mentor chat, including text messages, photographs, and any other files you upload for critique or coaching.
• Profile facts and preferences such as your photography goals, gear list, favorite subjects, creative struggles, and practice constraints, which Pierre AI records during conversations to personalize your mentorship experience.

Information We Collect via Google OAuth

When you choose to sign in with Google, we receive your email address, display name, and profile picture from Google. We use this information solely to create and maintain your account on the Platform. We do not access your Google contacts, calendar, drive, Gmail, or any other Google services. No additional Google API scopes beyond basic authentication are requested.

Information We Collect about Your Usage

We may automatically collect certain information about your interaction with the Services (“Usage Data”). To do this, we may use cookies, pixels and similar technologies. Usage Data may include information about how you access and use our Platform and your account, including device information, browser information, information about your network connection, your IP address and other information regarding your interaction with the Services.

Information We Obtain from Third Parties

We may obtain information about you from third parties, including from vendors and service providers who may collect information on our behalf, such as companies who support our Platform and Services (e.g., Supabase for authentication and data storage, Shopify for e-commerce), and our payment processors.

How We Use Your Personal Information

• Providing the AI Mentorship Service. We use your personal information to provide you with the Pierre AI mentorship experience, including processing your chat messages, generating personalized photography coaching responses, storing your conversation history, and remembering your preferences and profile facts to tailor future interactions.
• Providing Products and Services. We use your personal information to process your payments, fulfill your orders, to send notifications to you related to your account, purchases, returns, exchanges or other transactions, and to create, maintain and otherwise manage your account.
• Marketing and Advertising. We may use your personal information for marketing and promotional purposes, such as to send marketing, advertising and promotional communications by email, and to show you advertisements for products or services. If you are an EEA resident, the legal basis is our legitimate interest in selling our products (Art. 6 (1) (f) GDPR).
• Security and Fraud Prevention. We use your personal information to detect, investigate or take action regarding possible fraudulent, illegal or malicious activity. If you are an EEA resident, the legal basis is our legitimate interest in keeping our Platform secure (Art. 6 (1) (f) GDPR).
• Communicating with You and Service Improvement. We use your personal information to provide you with customer support and improve our Services (Art. 6 (1) (f) GDPR).

AI Processing & Third-Party AI Providers

To deliver the Pierre AI mentorship experience, your chat messages, uploaded images, and profile facts are stored in our secure database (hosted on Supabase) to provide personalized coaching and maintain conversation continuity.

When you interact with Pierre AI, your messages and any uploaded images are transmitted to third-party AI providers (can be any of OpenAI, Anthropic or Google) strictly for the purpose of generating mentorship responses. This data is processed under our data processing agreements with these providers and is not used to train their base AI models.

We may in the future utilize additional AI providers (such as Anthropic or Google) under the same strict conditions: data is transmitted solely for response generation and is not used for model training.

We retain your chat history and profile facts as long as your account is active so that Pierre AI can provide contextual, personalized mentorship across sessions. You may request deletion of your data at any time (see “Your Rights” below).

Google User Data — Access, Use, Storage, Sharing & Deletion

This section specifically describes how we handle data received from Google APIs, in compliance with the Google API Services User Data Policy, including the Limited Use requirements.

1. Data Accessed

When you sign in with Google, we access the following Google user data through Supabase's OAuth integration:

• Email address — your primary Google account email.
• Display name — your Google profile name.
• Profile picture — your Google profile photo URL.

We do not request access to your Google contacts, calendar, Google Drive, Gmail, YouTube, or any other Google service. No additional Google API scopes beyond basic profile authentication are requested.

2. Data Usage

Google user data is used solely for the following purposes:

• Creating and authenticating your account on the Platform.
• Displaying your name and profile picture within your account interface.
• Sending you account-related communications (e.g., password resets, service notifications).

Google user data is not used for advertising, user profiling, or any purpose unrelated to providing and maintaining your account on the Platform.

3. Data Sharing

We do not sell, rent, or share your Google user data with third parties for their own independent purposes. Google user data is only shared with the following service provider, which acts on our behalf:

• Supabase — our authentication and database infrastructure provider, which processes Google OAuth sign-ins and stores your account profile. Supabase processes this data under a data processing agreement and solely to provide the service to us.

Chat messages and images you submit to Pierre AI are processed by third-party AI providers (OpenAI, Anthropic, or Google) for response generation, but your Google OAuth account data (email, display name, profile picture) is not included in the data sent to these AI providers.

4. Data Storage & Protection

Your Google user data is stored securely in our database hosted on Supabase, which maintains SOC 2 Type II compliance. The following security measures protect your data:

• Encryption at rest — all stored data is encrypted using AES-256.
• Encryption in transit — all data transmissions use TLS 1.2 or higher.
• Row-level security — database policies ensure users can only access their own data.
• No OAuth token storage — our application does not store your Google OAuth access tokens or refresh tokens. Authentication tokens are managed securely by Supabase's infrastructure.

5. Data Retention & Deletion

Your Google user data is retained for as long as your account remains active on the Platform. You may request deletion of your Google user data at any time by:

• Emailing us at pierre@pierretlambert.com with the subject line “Delete My Data.”

Upon receiving a verified deletion request, we will delete your Google user data from our systems within 30 days. When your account is deleted, all associated Google user data (email, display name, profile picture) is permanently removed from our database.

You may also revoke our access to your Google account at any time through your Google Account permissions settings.

Cookies

Like many websites, we use Cookies on our Platform. We use Cookies to power and improve our Platform and our Services (including to remember your actions and preferences), to run analytics and better understand user interaction with the Services. We may also permit third parties and service providers to use Cookies on our Platform to better tailor the services, products and advertising.

Most browsers automatically accept Cookies by default, but you can choose to set your browser to remove or reject Cookies through your browser controls. Please keep in mind that removing or blocking Cookies can negatively impact your user experience and may cause some of the Services to work incorrectly or no longer be available.

How We Disclose Personal Information

In certain circumstances, we may disclose your personal information to third parties, including:

• With vendors or other third parties who perform services on our behalf (e.g., IT management, payment processing, data analytics, customer support, cloud storage, AI response generation, fulfillment and shipping).
• With business and marketing partners to provide services and advertise to you.
• When you direct, request or otherwise consent to our disclosure of certain information to third parties.
• With our affiliates or otherwise within our corporate group, in our legitimate interests to run a successful business.
• In connection with a business transaction such as a merger or bankruptcy, to comply with any applicable legal obligations, to enforce any applicable terms of service, and to protect or defend the Services, our rights, and the rights of our users or others.

Third Party Websites and Links

Our Platform may provide links to websites or online platforms operated by third parties. If you follow links to sites not affiliated or controlled by us, you should review their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy or security of such sites.

Children's Data

The Services are not intended to be used by children, and we do not knowingly collect any personal information about children. If you are the parent or guardian of a child who has provided us with their personal information, you may contact us using the contact details set out below to request that it be deleted.

Security and Retention of Your Information

Please be aware that no security measures are perfect or impenetrable, and we cannot guarantee “perfect security.” In addition, any information you send to us may not be secure while in transit. We recommend that you do not use insecure channels to communicate sensitive or confidential information to us.

How long we retain your personal information depends on different factors, such as whether we need the information to maintain your account, to provide the Services, comply with legal obligations, resolve disputes or enforce other applicable contracts and policies.

Your Rights

Depending on where you live, you may have some or all of the following rights:

• Right to Access / Know: You may request access to personal information that we hold about you.
• Right to Delete: You may request that we delete personal information we maintain about you.
• Right to Correct: You may request that we correct inaccurate personal information.
• Right of Portability: You may request a copy of the personal information we hold about you.
• Right to Opt out of Sale or Sharing or Targeted Advertising: You may direct us not to “sell” or “share” your personal information.
• Restriction of Processing: You may ask us to stop or restrict our processing of personal information.
• Withdrawal of Consent: Where we rely on consent, you may withdraw this consent.
• Appeal: You may appeal our decision if we decline to process your request.
• Managing Communication Preferences: You may opt out of promotional emails at any time using the unsubscribe option.

You may exercise any of these rights by contacting us using the contact details provided below. We will not discriminate against you for exercising any of these rights.

International Users

Please note that we may transfer, store and process your personal information outside the country you live in. If we transfer your personal information out of Europe, we will rely on recognized transfer mechanisms like the European Commission's Standard Contractual Clauses, or any equivalent contracts issued by the relevant competent authority of the UK, unless the data transfer is to a country that has been determined to provide an adequate level of protection.

Contact

Should you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of the rights available to you, please email us at pierre@pierretlambert.com or contact us at 7901 4th St N, Ste 300, St. Petersburg, FL, 33702, US.

For the purpose of applicable data protection laws and if not explicitly stated otherwise, we are the data controller of your personal information.