Photography studio software in Baltimore: the photo remembers the camera and forgets the photographer

A photograph leaves the studio twice

Every digital photograph carries a small block of text inside the file that almost nobody who looks at the picture ever sees. Photographers call it metadata, and it comes in three overlapping standards. EXIF is what the camera writes: the make and model, the lens, the shutter speed and aperture, the moment the shutter fired and, on most modern bodies, the camera’s serial number and sometimes a GPS position. IPTC is a standard the news industry built for the human facts — who made the picture, who owns it, how to reach them, what may be done with it. XMP is Adobe’s container, now an ISO standard, which editing software uses to carry both of the others plus a running record of every edit. Open a photo’s info panel in Preview or Photoshop and it is all there.

It was designed as a label, the digital equivalent of the studio stamp on the back of a print. The difference is that a stamp on the back of a print stays put. A digital label has to survive every piece of software the file passes through on its way to the world: the editing program’s export, the online gallery, the website builder, the social network and the client’s phone. Each of those can keep the label, rewrite it or quietly throw it away, and they each decide differently. So a studio’s photos go out into the world wearing whatever the last program in the chain decided to leave on them.

That sounds like a technicality. It turns out to decide three things a photographer cares about a great deal. It decides whether the photographer’s name travels with the picture, which matters more in American law than most photographers realize. It decides whether a client’s location travels with it, which matters to any family that booked an in-home newborn session. And since 2025 it decides, in Europe at least, whether the photographer has legally told an AI company to keep its hands off.

We build custom software for small businesses in Baltimore, so my interest here is practical rather than legal. I am not a lawyer and this is not legal advice. What I want to answer is the question we meet on almost every project that sells something made of files: which of the facts attached to a product survive the trip through the software, and which ones fall off on the way? For a photography studio the answer turns out to be unusually measurable, because the label is inside the product. So we measured it.

What Baltimore’s photography trade actually looks like

Start with who this is for. I pulled the Census Bureau’s County Business Patterns for 2023, its Nonemployer Statistics for the same year and the 2022 Economic Census, all as the Bureau’s own flat files, and counted photography businesses under NAICS 54192, “photographic services”, which splits into portrait studios (541921) and commercial photography (541922).

Establishment counts in County Business Patterns carry no statistical noise, but the Census Bureau deliberately blurs employment and payroll in small cells, and several of these carry its flag for a distortion of 5% or more, so treat the employee column as approximate. “Share working alone” is our own division: businesses without staff as a share of all photography businesses in the jurisdiction.

The first thing the table says is that photography is a trade of people working alone. In Baltimore City 93.7% of photography businesses have no employees, and across Maryland the figure is 94.7%. The average solo photographer in the city took $25,296 in 2023, and that is gross receipts, before the camera bodies, the lenses, the software, the mileage and the lab. Nationally, 47.0% of solo photography businesses took less than $10,000 in the year and only 0.88% took $250,000 or more. Most of the people this article is for are running a serious craft on a very thin margin, which is worth keeping in mind every time someone tries to sell them a subscription.

The second thing is that there is another Baltimore sitting inside the same numbers. The 2022 Economic Census puts the revenue of the city’s fourteen employer portrait studios at $44.3 million that year. That is half (50.2%) of all portrait-studio revenue in Maryland, 70% of the metro area’s, and about $3.2 million per establishment, more than eight times the national figure. The same year, the city’s 339 solo photographers took $8.8 million between them. Across the country, people working alone earn about half of all photography revenue (50.1%). In Baltimore City they earn 16%. Since 22 of the city’s 25 employer businesses have fewer than five employees, that weight sits in two or three large operations, the kind that photograph schools, teams and events by the thousand. The Census does not name them and I will not guess.

The third thing is what the trade says it sells. In the Economic Census product lines for American portrait studios, general portraits are 52.2% of revenue, school portraits 17.8% and wedding photography 12.3%. Licensing of rights to use photographs is 0.35%. There is no federal product line that separates prints from digital files at all. In the government’s accounts, a portrait photographer sells sessions and pictures, not permissions — which is roughly how most studio software sees the business too, and it is not quite right. Every time a client downloads a file, what changes hands is a license.

One last number, because it frames everything that follows. The median photographer in the Baltimore–Columbia–Towson area earns $46,170 a year, according to O*NET’s 2025 wage data. Maryland’s software publishers pay $183,549 per employee in payroll, 5.9 times what Baltimore City’s portrait studios pay per head. (Census payroll per employee counts part-time staff in the headcount, so read the ratio as a matter of scale rather than as a wage comparison.) That ratio is the whole build-versus-buy argument in one line. A developer’s hour costs several of a photographer’s, which is exactly why the right software for most of this trade is rented, and why the few things worth building are the ones no rental covers.

We read the labels on 330 Baltimore photos

On 21 September 2026 we looked for Baltimore-area photographers the way a client would, searching for wedding, newborn, family, headshot, branding, event, senior, maternity, product, commercial, real-estate and pet photographers in the city and the counties around it, and kept 70 independent photographers’ own websites, leaving out directories, marketplaces and national chains. Eight of the 70 either blocked automated requests or timed out, and five more loaded their pictures through scripts our crawler could not follow, which left 57 sites. From each homepage we took the first six photographs of at least 40 KB, in the order the page lists them — the images a visitor, a client or a scraper meets first — and read the metadata inside each file with a small parser of our own, checked against Apple’s ImageIO framework on a sample of seventeen files. That gave 330 photos.

Two ground rules. We never recorded a coordinate: for location we kept only a yes or no and whether the point fell inside Maryland. And we name no photographer here, because every one of them is a small business doing ordinary things, and the findings are about the software far more than about the people using it.

Three-quarters of the photos (73.9%) still carried some metadata, so the label mostly survives the trip to the web. What survives on it is the interesting part.

The single most common identifying fact was the camera’s serial number. In all, 112 photos, a third of the sample, still named the individual body that took them. Only 59 carried a copyright notice and 56 the photographer’s name, and 78 carried at least one of the two. That leaves 58 photos — more than one in six — that tell anyone who opens them exactly which camera made them and say nothing at all about who did. The same pattern holds site by site: 33 of the 57 sites (57.9%) published at least one photo carrying a camera serial number, 21 (36.8%) at least one carrying a copyright notice, and just two sites carried a copyright notice on all six of the photos we read.

The camera signs by default. The photographer has to opt in.

Why would a file remember a machine and forget a person? For the same reason every compliance story in this series has turned out the way it did: a fact travels in software when somebody upstream puts it there by default. Camera makers write the serial number into every frame, because version 2.3 of the EXIF standard gave them a field for it in 2010, and writing it costs them nothing. Lightroom and Photoshop pass it through, because “keep everything” is the safe default for an editing tool. The copyright notice has no sponsor like that. Most professional bodies from Canon, Nikon, Sony and Fujifilm have a menu that writes the photographer’s name and a copyright line into every frame at the moment of capture, and Lightroom can stamp the same fields on import with a metadata preset. Both start out blank, both take about two minutes to fill in once, and nothing in the chain ever reminds anyone to do it.

The census lets us separate the two places a name can go missing. A total of 125 photos kept their metadata more or less intact: the camera details, the serial number or an editing record had survived, so whatever platform sat in front of them had not stripped anything. Of those 125, only 37 (29.6%) carried a copyright notice. In most cases, then, the name was never written in the first place, rather than written and later removed. That is the good news in this article, because it is by far the cheaper problem to fix.

Every platform keeps a different subset, and nobody chose it

The website builder still matters, just less than the export preset. Here is the same census split by the platform each site runs on, identified from the site’s own code.

Two of these platforms showed us their behavior directly, because we could request the same photo in two forms. On Wix, the resized image a visitor’s browser actually displays had been stripped to a bare header in all 45 cases we checked: no name, no copyright line, no serial number, no camera. But the original upload sits at a public address that the page’s own code contains as the first half of every displayed image’s address, and that original kept everything, including 14 serial numbers and 4 copyright notices, at about fourteen times the file size. On Squarespace, the resized versions carried the same identifying fields as the originals — name, copyright notice, serial number, camera — across all 35 photos we compared, and in one we opened in full, the resized copy still held the lens’s own serial number and the Lightroom develop settings. Neither platform documents this behavior, and neither offers a setting to keep some fields and strip others.

Six photos and a set of coordinates

Six photos, all on one site and all served as full-size WordPress originals, still carried GPS coordinates, and all six points fell inside Maryland. We did not look up where. It is one site out of 57, which is a good result, and it would be wrong to make it sound like an epidemic. But it is worth explaining why the one case matters so much in this particular trade. In-home newborn and family sessions are a staple of portrait photography around Baltimore, and a GPS coordinate inside a newborn photo is, to within a few meters, the family’s front door. The fix already exists on most photographers’ computers: Lightroom Classic’s export dialog has a Remove Location Info checkbox, which strips GPS even when everything else is kept. WordPress never alters an original upload, so a full-size file placed on a page carries whatever the camera and the export wrote into it; what happens to the resized copies depends on the server, as we explain below.

Four photos that said no to AI training

In October 2023 the IPTC added a Data Mining field to its photo metadata standard (plus:DataMining), with values running from “Allowed” to “Prohibited for Generative AI/ML training”. Four photos in our sample, all on one site, carried it. Three photos, also on a single site, carried a C2PA “Content Credentials” manifest, the signed provenance record that Adobe, Google, Microsoft, OpenAI, Sony and others back. That is the entire uptake, across 57 working studios, of the two technologies built specifically to tell machines what a photographer wants. The IPTC’s own announcement put its finger on the weakness: the field only works if “the embedded metadata is not stripped out” by the tools in between. In the United States a machine-readable opt-out is a courtesy. In the European Union, as we will see, it is the legal mechanism itself.

The name in the file is a legal object

Here is why the census matters beyond tidiness. Since 1998, the facts a photographer writes into a file have been protected in their own right. Section 1202 of the Copyright Act, added by the Digital Millennium Copyright Act, calls them copyright management information and defines them to include, among other things,

“(2) The name of, and other identifying information about, the author of a work” … “(6) Terms and conditions for use of the work”

as long as they are conveyed in connection with copies of the work, “including in digital form”. Removing or altering that information without authority, knowing or having reasonable grounds to know that it will “induce, enable, facilitate, or conceal an infringement”, is a violation, and §1203(c)(3)(B) lets the photographer elect statutory damages of $2,500 to $25,000 per violation instead of proving a loss. Courts have confirmed that the label inside the file counts. In Stevens v. CoreLogic (9th Cir. 2018), a case brought by real-estate photographers, the court said so directly: “Both EXIF and IPTC metadata can contain ‘copyright management information.’” The Eleventh Circuit said the same of IPTC’s creator, copyright-notice and rights-usage fields in Victor Elias Photography v. Ice Portal (2022).

The law protects a label only if somebody wrote it

Two limits make this much less of a weapon than it sounds, and both point straight back at the census. The first is intent. In Stevens, the software that resized listing photos simply could not read or write EXIF data, and the photographers lost because they could not show that the company knew the stripping would lead to infringement; the court wanted something like a pattern of conduct or a modus operandi. (The company began preserving the metadata after it was sued.) The Eleventh Circuit reached the same result in Elias, where image-optimizing software had stripped the fields. And the District of Maryland got there in 2021, in Brittney Gobble Photography v. Sinclair Broadcast Group: a station reporter had edited a photographer’s credit out of the metadata in a content management system, explained that it was a mistake and changed it back, and the court granted Sinclair summary judgment on the DMCA counts. Automated or accidental stripping, in other words, is usually not a violation at all. That is exactly why a photographer cannot rely on the law to keep the label on, and has to rely on the pipeline instead.

The second limit is more basic: the statute prohibits removing a label, not failing to write one. In August 2026 the Fifth Circuit affirmed the dismissal of an architect’s DMCA claims in Kipp Flores Architects v. AMH Creekside, and Judge Willett’s lead opinion put the question in a sentence, whether the removal ban “also creates an affirmative obligation to add CMI where it was not present to begin with”, and answered no. A copyright notice that was never written into a file cannot be removed from it. In our census, 252 of the 330 photos, about three in four, carried neither a name nor a notice for anyone to remove.

The Ninth Circuit’s decision of 16 September 2026 in Doe v. GitHub, an AI case about code, helps the photographers who do write it. The court called the “identicality” requirement that had sunk several AI-training claims “something of a misnomer”, and its example of how removal can still be proved was a photographic one: if two works are otherwise identical, sharing the same composition, cropping or other distinctive features, but the copy omits the CMI that accompanied the original, a factfinder may infer that it was removed. That inference is only available if the original carried CMI in the first place.

The print release is a license, and it should be a record

Nothing about a paid session changes who owns the pictures. Copyright “vests initially in the author or authors of the work” (§201(a)). A wedding or portrait commissioned from an independent photographer is not a work made for hire, because the statute allows that for commissioned work only in nine categories, none of them a portrait, and only with a signed agreement saying so (§101). A transfer of ownership needs a signed writing (§204(a)), and the Act’s own definition of a transfer excludes a nonexclusive license. The Fourth Circuit, whose rulings bind Maryland’s federal courts, said as much in Nelson-Salabes v. Morningside (2002), a dispute over a Baltimore County development: an implied nonexclusive license “does not transfer the ownership of a copyright”.

So what a family receives with its gallery is a license, whether the studio calls it a print release or not, and its terms are the most important commercial fact about the whole transaction. In most studios they live in a PDF attached to an email. IPTC provides a usage-terms field inside the file for exactly this purpose. It was absent from every one of the 330 photos we read.

Registration is a batch job, and a gallery can start the clock

Statutory damages and attorney’s fees for an infringement are only available if the photo was registered before the infringement began, or within three months of its first publication (§412). Registered, the damages run from $750 to $30,000 per work, and up to $150,000 if the infringement was willful (§504(c)). The Copyright Office makes that affordable through group registration: up to 750 photographs by the same author in one application, for a $55 fee, with each photo then “registered as a separate work” (37 CFR 202.4(h), (i) and (r); 201.3(c)). Published photographs must all have been published in the same calendar year, and the application lists each one with a title, a file name and its month and year of publication.

When is a portrait “published”? The Office’s Compendium treats a work made available online as published when the owner authorizes the viewer to keep a copy, and says that sending a copy to a client is publication where the client may use it without restrictions on showing it to others (Compendium §§1008.3(B) and 1905.1). A downloadable gallery with a print release looks a lot like that, which suggests the three-month clock starts on the day the gallery goes out. That turns registration into a monthly batch job: every photo delivered that month, listed with its file name and month of publication, in one $55 application before the window closes. The gallery already holds every one of those facts. None of the galleries we looked at offers to export them in that shape.

The small-claims court, and what it cannot hear

Since 2022 photographers have had a cheaper forum than federal court. The Copyright Claims Board can award up to $15,000 per work and $30,000 per proceeding, or $7,500 per work where registration was not timely, with a smaller-claims track for claims up to $5,000 (§1504(e)); filing costs $100 in total. Its statistics, updated in March 2026, count 1,920 claims since launch. Pictorial, graphic and sculptural works, the category photographs belong to, are the largest single group at 36%, and 44 claimants were from Maryland. The Copyright Office’s own review found damages awarded in nearly 72% of final determinations, averaging $3,598.58. What the Board cannot hear is a §1202 claim, and in February 2026 the Office declined to recommend adding one. A stripped label still means federal court.

Your client’s face in your portfolio

Maryland has no right-of-publicity statute. The claim is common-law appropriation, and the leading case is a Baltimore one. In Lawrence v. A.S. Abell Co. (1984), a Sunpapers photographer had taken a picture of two infants at the 1979 Afram Festival, with their mother’s consent, for the front page of The Evening Sun, and the paper then reused that front page in its “More News is Good News” advertising. The Court of Appeals held the reuse incidental, because the photograph was reproduced “to show a realistic sample of the product of the publisher and not to boost profits through the use of the children’s photograph”. It also drew the line: had the advertisements “stated or implied that the children were endorsing or representing the newspaper”, the use would not have been incidental.

A studio’s portfolio is arguably a sample of the product too, and a photographer reading Lawrence might feel safe. I would not lean on it. The Afram pictures came from a public event and were published as news; most studio sessions are private, many are of children, and an advertisement implying that a family recommends the studio is precisely what the court carved out. The age of majority in Maryland is 18. The practical answer is the one Lithuania writes into statute, below: a written release, signed by a parent for a minor, stored against the photos it covers.

Being fair to the software photographers already rent

Before anything about building, the honest part. The software sold to photographers is good, cheap and made by people who understand the trade. A solo portrait photographer can run a real business on a gallery with a print store, a CRM with contracts and invoices, and a website builder, for somewhere between nothing and a few hundred dollars a year, and most should. None of what follows is an argument that those tools are bad. It is an argument about what each of them counts, because the thing a vendor counts is the thing your bill grows with.

We checked every pricing page below on 21 September 2026 and confirmed the address returned a live page rather than a 404, because several of the prices aggregators still quote point at pages that no longer exist. SmugMug’s /pricing, WHCC’s /pricing/ and VSCO Workspace’s old pricing page all return 404 now, and Bay Photo’s pricing address quietly lands on its own 404 page while reporting success.

The studio-management side meters different things again. Studio Ninja counts active jobs (its $16 Starter plan allows five at a time; the $27 and $40 plans are unlimited). Sprout Studio counts active shoots and galleries ($24 to $89 a month). 17hats counts documents per month ($60 a month, or $600 a year). Light Blue counts devices (£30 a month for five). Dubsado counts users beyond the first few ($335 or $525 a year). Bloom’s cheapest plan adds a 1.5% platform fee on every card and bank payment, and VSCO’s Workspace, which used to be Táve, is now sold only inside the $499.99-a-year VSCO One bundle. HoneyBook, the other big name, would not load from our network on the day we checked, so I have left its prices out rather than repeat someone else’s.

Put those meters side by side and a pattern appears that we have seen in every trade in this series. The vendors that publish a clean monthly number count storage, photos, jobs or seats; the ones that grow with your success take a percentage. Neither is dishonest. A percentage aligns the vendor with your sales and costs you nothing in a slow month. It is also the one line on the bill that never stops growing.

The e-commerce half: one $400 print order, eight ways

Here is what that means on a real order. Say a family orders two 16×20 lustre prints at $150 each and four 8×10s at $25, a $400 order. At WHCC’s published professional prices the lab cost is $57.80 ($23.00 per 16×20, $2.95 per 8×10) before shipping. Card fees are taken at 2.9% plus 30¢ on the $400 wherever the platform passes them on. For the platforms that charge on markup, I have treated the markup as the $400 minus that same lab cost; their own base prices differ a little, so treat those rows as close rather than exact.

Sixty dollars separates the best and worst rows, 15% of the order, on identical prints from an identical lab. Three pieces of arithmetic fall out of it, and all three are decisions photographers are making by feel.

When should you leave a free plan? Pixieset’s free plan takes 15% of each order, and its $10 Basic plan takes nothing. The upgrade pays for itself at $66.67 of print sales a month — roughly one modest order. One $400 order on the free plan pays for half a year of Basic.

When is a percentage worth a higher subscription? On Pic-Time, moving from Beginner ($8, 15% of markup) to Professional ($25, 8%) pays once your markup passes about $243 a month, and moving on to Advanced ($50, 6%) pays at about $1,250 a month. And on the top two plans, taking payment yourself removes the commission entirely in exchange for paying card fees, which on this order is $11.90 instead of $27.38. Print orders are mostly markup, so on print-heavy months that switch is usually worth it.

Where does a commission start to justify a build? Not at this scale. It does at volume. A school or sports photographer selling $250,000 a year through parent galleries pays GotPhoto’s top plan $17,500 in commission plus $499 in subscription, or PhotoDay $25,000, before card fees either way. That is the one place in this trade where the percentage alone can pay for a fixed-price ordering system within a year. It is also the place where the percentage buys the most — roster imports, lab routing, picture-day logistics and, in PhotoDay’s case, collecting sales tax as the marketplace facilitator — so the comparison has to be done honestly, with the work the platform does included.

What the platforms say they do with your label

We read the help centers of the main galleries and site builders to see whether any of them document what happens to metadata, and the answers are uneven in an instructive way.

The best behaved is Pic-Time, the only platform we found that writes the photographer’s identity into delivered files: if a file’s copyright field is empty, its help center says, your brand name is filled in, and the creator and credit fields get the same treatment. SmugMug says it deliberately keeps IPTC and EXIF data in the JPEGs it sells, to help track misuse, which is good for the name and means any GPS in the file travels with the sale unless the photographer removes it with the map tool SmugMug provides. Squarespace can import a photo’s title, description, tags and GPS position from its metadata if you switch that on, and says it attaches web-statement and licensor details to uploads for Google Images’ “Licensable” badge; in the files we downloaded from Squarespace sites, 5 of 53 carried that web statement inside the image itself. Pixieset’s help center returns no results at all for “EXIF” or for “GPS”, and ShootProof’s none for “GPS”; both document that an original-size download is the exact file uploaded, and neither documents what happens to the label on the resized versions most clients take.

WordPress is the most interesting, because its behavior is written in code. When a host runs the Imagick image library, WordPress strips every embedded profile from resized copies except five: two color profiles, IPTC, XMP and EXIF. A 2016 change kept IPTC and XMP on purpose, for copyright and rights-usage information. EXIF was kept only so photos would stay the right way up, and it is still on the list, so a GPS position can survive into every thumbnail. On hosts running the older GD library, resized copies keep nothing, and originals are never touched either way. That fits the census: just over half the WordPress photos we read (54 of 103) still carried a label.

What none of them documents is the one setting a portrait studio actually wants: remove the location, keep the name. Lightroom has it at export. A couple of WordPress image-compression plugins let you choose which tags to keep. No gallery and no website builder we read offers it. In the Shopify App Store a search for “IPTC” returns three apps; of 185 photography, download and print listings we opened, not one claims to write or preserve a copyright notice in the files it delivers.

“Find my photos” is a biometric feature

One newer feature deserves its own warning. Several galleries now let a guest upload a selfie and see every photo they appear in: Pic-Time on its top plan, Zenfolio’s Face Finder, PhotoDay’s FaceFind, and the merged school-photo platform Captura, which names Amazon Rekognition as its processor. It is a genuinely useful feature at a wedding with 2,000 frames. It is also the processing of face geometry, which is biometric data in most state privacy laws. The platforms know it: Zenfolio bars Illinois residents from its face features entirely, and Pic-Time’s biometric retention policy is written around Illinois’s Biometric Information Privacy Act. In Mayhew v. Candid Color Systems (S.D. Ill., August 2024), a lawsuit over face matching on a graduation-photo platform, the platform was dismissed for lack of jurisdiction but the photography company that shot the ceremonies was not, and the court noted that, on the plaintiffs’ account, the company had chosen the feature despite having a manual option for sorting the photos. The court also said that while photographs themselves are excluded from Illinois’s definition, “faceprints extracted from uploaded photographs may plausibly constitute scans of face geometry”. Maryland’s privacy law draws the same line: a photograph is not biometric data, but data generated from one “to identify a specific consumer” is (Com. Law §14–4701), and biometric data and GPS-level location are both sensitive data that may be processed only when strictly necessary. Most studios are far below that law’s 35,000-consumer threshold. A school or event photographer may not be, and we have written up how Maryland’s Online Data Privacy Act counts consumers separately.

The part no national platform models

Every product above is built for photographers everywhere, which is its strength and the reason it cannot know Maryland. A handful of local rules decide what a Baltimore studio can charge, where it can shoot, how many clients it can see at home and where its drone can fly, and none of them fits in a generic booking form.

Maryland taxes the session when it ends in a print

This is the most surprising rule in the article, and it is worth reading slowly. Maryland taxes photographs, whether they arrive as paper or as files. The regulation is COMAR 03.06.01.16A, last amended in July 2022:

“The sale of a photograph … is subject to tax whether delivered to the buyer electronically or in tangible form. When the product is delivered in tangible form, the tax also applies to separately stated charges for portrait photography”

Read the second sentence again. When a portrait session ends in a print or an album, the session fee is taxable too, even if it sits on its own line of the invoice. When the same session ends only in a download, the Comptroller says something different. Its Business Tax Tip #29 on digital products, revised the same month, treats the work separately:

“The services to produce photography, artwork, clip art, portrait and wedding photography, pictures, videos, and similar digital products, when separately charged from the digital product result of such services, are non-taxable services.”

The tip’s own worked example is a commercial product shoot: a $10,000 fee for the session and proofs, untaxed, and $2,000 for the final digital files, taxed at 6%. So in Maryland the same two-hour family session, at the same price, is taxable if the family leaves with a print and untaxed if they leave with a download link — provided the session is invoiced separately. Put it in a single-price package and the carve-out can disappear, because the same tip taxes the entire charge for a bundle whose dominant purpose is the digital product.

Four more details follow from the same documents, and each is a field or a rule in software rather than a sentence in a policy.

Access is taxable even without a download. The statute counts a “subscription to, access to, receipt of, or streaming of a digital product” as a retail sale (Tax-Gen. §11–101(h)(2)(v)), so a fee for extending an online gallery is taxable, while a free proofing gallery is not. Shipping is not taxable if it is stated separately and disclosed at the time of sale, but freight from the lab to the studio does not qualify for that exclusion. A download code is a taxable digital code, while a studio gift card with a cash value is not (§11–101(c-3)). And there is an exclusion that matters for commercial work: a digital product is not taxable where the buyer holds a copyright or other intellectual-property interest in it and uses it solely for commercial purposes, advertising included (§11–101(c-4)(3)(v)). A family with a print release does not qualify; a business that takes the rights to its campaign images may.

Two honest caveats. The regulations also tax special-order production on its full price even when labor is shown separately (COMAR 03.06.01.30A), and I found no ruling that reconciles that with Tip #29’s carve-out, so a studio relying on the download-only exemption carries some exposure. And no rule I could find says what happens in the case every studio actually has: the session is invoiced in March with a download link, and the client orders prints from the online gallery in May. Does the March fee become a charge for a product “delivered in tangible form”? Nothing from the Comptroller answers it, which is worth a conversation with your accountant, and it is a question a well-built order system can at least answer consistently.

One more tax, on the studio’s own bills. Since 1 July 2025 Maryland has charged a 3% rate on certain data and IT services, and the Comptroller lists cloud storage among them. Its technical bulletin says software sold for individual use is taxed at the ordinary 6% and the same software at 3% when sold for use in an enterprise system, so a solo photographer’s gallery subscription may well carry 6%. We have written up how Maryland’s 3% tech tax works separately.

The location is a line item

Baltimore’s favorite backdrops have landlords, and several of them charge. This is the table I would want in front of me before quoting a spring session:

Three things stand out. The fee depends on the number of people in the session at Sherwood and Cylburn, so a family session and an extended-family session at the same garden are different prices, and the quote has to know the headcount. Lead times run from 48 hours to six weeks, so a booking system should refuse, or at least warn about, a location the calendar can no longer legally reach. And the federal parks moved the other way: since the EXPLORE Act was signed in January 2025, the Park Service says permits and fees are generally not required for still photography involving eight or fewer people, which quietly retired the old rule at Fort McHenry, whose own FAQ page still describes it. What I could not confirm is whether a small handheld session in Patterson Park, on Druid Hill’s lawns or at Mount Vernon Place needs a city permit; Recreation & Parks lists weddings and filming among the uses that do, and says nothing either way about a family of four with one photographer.

No CRM we looked at has a location as an object with a fee schedule, a headcount rule, a lead time and an insurance requirement. They have a free-text address field. That is the whole gap.

A home studio has a visitor limit

Plenty of newborn and headshot photographers in Baltimore work from a studio at home, and the city’s zoning code has a view on that. A home occupation must be conducted entirely inside the dwelling, may have at most one non-resident employee, and under Article 32, §15–507, “Client or customer visits to the site are limited to no more than 3 a day and 10 a week.” We covered that rule for home bakers in our bakery post; for a photographer it is even more concrete, because every session is a visit. It is also easy for software to enforce and easy for a busy person to lose count of: a calendar that counts in-home appointments per day and per week would never let the eleventh one through.

As for licensing, there is less than people fear. Baltimore City’s business-licensing list has no photography category. Selling prints means a Maryland sales and use tax license from the Comptroller (Tax-Gen. §11–702). Whether a studio that resells lab-made prints also needs a state trader’s license, or is exempt as a “maker” of goods under Business Regulation §17–1803(d)(1), is a question I found no guidance on.

For drone work, the map is the permit

Real-estate and event photographers who fly drones around Baltimore work under the FAA’s Part 107, and the rule that matters most here is 14 CFR 107.41: no flight in Class B, C or D airspace without prior authorization from air traffic control, which in practice means a LAANC request through an app. BWI is the primary airport of the Washington Tri-Area Class B, and Martin State has its own Class D from the surface to 2,500 feet within 5.2 miles. Then there is the Washington Special Flight Rules Area, which reaches 30 nautical miles from Reagan National. By our measurement BWI, Glen Burnie, Catonsville, Ellicott City and Columbia all sit inside it, while the Inner Harbor, about 32 nautical miles out, and Towson sit outside. The FAA allows Part 107 flights in that outer ring if they follow the rule, and prohibits them without specific authorization inside the 15-nautical-mile core. What Baltimore City cannot do is add a layer of its own. Maryland’s Economic Development Article §14–301(b) says “Only the State may enact a law or take any other action to prohibit, restrict, or regulate the testing or operation of unmanned aircraft systems in the State.” For a studio quoting a listing shoot, the address decides the paperwork, which is one more thing a quote form could look up instead of a person remembering it.

The same photo, sold to a client in Lithuania

A Baltimore studio does not have to open an office abroad to meet European law. It only has to photograph a destination wedding, sell a download to a client who has moved back to Europe, or put its portfolio in front of a European crawler. Lithuania is a useful place to look, partly because its rules are written down unusually plainly and partly because they differ from Maryland’s in exactly the places this article cares about: consent, the machine-readable label and the tax on a download.

Consent comes in layers, and the Supreme Court keeps them apart

Where Maryland has only case law, Lithuania has a statute. Article 2.22 of the Civil Code says that a person’s photograph, portrait or other image may be reproduced, sold, displayed or printed, and the person may be photographed at all, only with their consent:

„Fizinio asmens nuotrauka (jos dalis), portretas ar kitoks atvaizdas gali būti atgaminami, parduodami, demonstruojami, spausdinami, taip pat pats asmuo gali būti fotografuojamas tik jo sutikimu.“

The exceptions cover public activity, official position, law enforcement and photographs taken in a public place, and even then a picture may not be shown if it would damage the person’s honor, dignity or professional reputation. What makes this bite for a studio is how the Supreme Court of Lithuania reads it. In its order of 28 October 2020 in case No. e3K-3-278-403/2020, the court held that consent may be given orally, in writing or by conduct, but that consent to be photographed does not in itself mean consent to reproduce, sell, display or print the photograph. It added that a person does not lose their individuality and privacy just because they are standing in a public place. Lithuanian photographers and lawyers write about this often, and the practical upshot is a studio contract with three separate permissions in it: to take the pictures, to deliver them, and to use them in the studio’s own portfolio and advertising. A discount does not buy the third one.

Schools have taken this further than anyone. Lithuanian public broadcaster LRT reported in August 2024 that schools need separate consent forms for photographing children and for publishing the photographs, and that some mark the children whose parents opted out with a sticker or a ribbon so that event photographers can leave them out of frame. The data-protection law adds a number: under Article 6 of the Law on the Legal Protection of Personal Data, a child can consent to an online service from the age of 14. And the State Data Protection Inspectorate’s own advice for young people says, in as many words, to switch off geolocation in apps and cameras: „Išjunkite geografinę padėtį jų naudojamų programų nustatymuose, pvz., socialinėje terpėje, žemėlapiuose ir fotoaparatuose“. The six photos in our census that carried GPS coordinates are that sentence, in reverse.

For software, this is a data model. A consent is not one checkbox but a small table — which person, which photos, which uses, given how, given when, withdrawn when — and every portfolio upload and every social post ought to be checked against it. No gallery we looked at stores consent at that grain.

An opt-out only counts if a machine can read it

This is the part of European law that turns the metadata census from a curiosity into a legal question. The EU’s 2019 copyright directive lets anyone mine lawfully accessible works for text and data — the kind of copying AI training depends on — unless the rightholder has reserved that use. Lithuania wrote the rule into Article 22² of its Law on Copyright and Related Rights, by Law No. XIV-970, in force since 1 May 2022. The exception applies only where rightholders have not expressly reserved their rights

„atitinkamomis priemonėmis (kompiuterio skaitomomis priemonėmis viešai internete prieinamo turinio atveju)“

— by appropriate means, and for content made publicly available online, by machine-readable means. A sentence in a studio’s terms of service is not machine-readable. A robots.txt rule is. So is a metadata field inside the file.

Since 2 August 2025 the other half of that bargain has applied to the AI companies. Article 53(1)(c) of the EU AI Act requires every provider of a general-purpose AI model to have a policy “to identify and comply with, including through state-of-the-art technologies, a reservation of rights expressed pursuant to Article 4(3) of Directive (EU) 2019/790”. The Commission’s Code of Practice for those providers goes further, and commits signatories to honor robots.txt and “other appropriate machine-readable protocols”, naming “asset-based or location-based metadata” as examples. The IPTC Data Mining field is exactly that kind of asset-based metadata. It was on 4 of our 330 photos. For a photographer who cares about this, the reservation has to be written into the file at export and then survive the website builder, and as the census shows, the second step is not in the photographer’s hands unless the pipeline is.

A download is taxed where the buyer lives, from the first euro

The e-commerce half changes too. In Lithuania, photography services and digital photos are taxed at the standard 21% VAT rate (Articles 2(32) and 19(1) of the VAT law). There is one surprising exception: since 1 January 2026, published photo and reproduction albums, printed or electronic, sit in the new 5% band alongside books, under Article 19(4)(4) as amended by Law No. XV-287. I found no answer from the tax authority on whether a bespoke wedding album counts as a published album, so do not price on it.

The rule that actually reaches a Baltimore studio is the one for downloads. The EU classifies “accessing or downloading photographic or pictorial images” as an electronically supplied service (Council Implementing Regulation 282/2011, Annex I, point 3(b)), taxable in the country where the consumer lives. The €10,000 threshold that spares small sellers is available only to a business established in one EU member state, so a US studio that sells a single €30 download to a client in Vilnius owes Lithuanian VAT on it, usually through the EU’s non-Union One-Stop Shop. Prints are goods and follow the import rules instead, and a bespoke commission delivered as files is arguably a photography service rather than an automated download, which is another reason the store needs to know what each line on the order actually is.

What custom actually costs, and when it pays

Take a representative small Baltimore studio: one or two photographers, a mix of family sessions, weddings and headshots, prints sold through an online gallery. At published prices its whole software stack costs very little. Pixieset’s Suite bundle, which puts the gallery, the website and the studio manager under one bill, runs from $336 to $660 a year on annual billing. A mix-and-match stack of ShootProof’s unlimited plan ($600 a year) and Dubsado’s Premier plan ($525) comes to $1,125 before the website. Those are good prices for a great deal of working software.

Against that, our Online Store package starts at $6,000, a Custom App or Operations System at $12,000, and a one-week Prototype Sprint at $3,500, all fixed price. On subscription savings alone, a solo or two-person studio never earns that back, and if that is the only argument, keep renting. I would tell you that on the call.

The arithmetic changes in three kinds of studio, and they are exactly the ones the Census numbers point at. The first is volume work — schools, leagues, dance recitals, graduations — where the gallery takes a percentage of every parent’s order and the percentage is measured in five figures a year. The second is the multi-photographer studio with corporate accounts, the headshot day at a hospital or a law firm, where one client means two hundred employees, two hundred small galleries, one invoice to HR and a usage license per person. The third is the studio whose real product is licensing, commercial and product photographers selling rights to businesses for a term, for whom “which client may use which image, where and until when” is the business itself. In those three, a fixed-price build is ordinary operations spending, and in the first of them the commission alone can pay for it within a year.

What we would build for a Baltimore studio

Not a replacement for the gallery. Most of this sits beside whatever you already run, reads from it, and does the handful of jobs nothing on the market does. Everything on this list came out of the research above:

• A file pipeline that writes the label on the way out. Every delivered file and every web-size copy gets the studio’s name, a copyright notice, a rights URL and, if you want it, an IPTC data-mining reservation; GPS positions, camera and lens serial numbers and personal fields are stripped by default. Strip the location, keep the name — the setting nobody sells.
• A rights ledger. Every license granted, with the client, the images, the permitted uses, the term and the price, generating both the print release and the usage-terms field inside the file, so the paper and the pixels say the same thing.
• A consent table that records who agreed to be photographed, delivered, shown in the portfolio or posted, and that the portfolio uploader checks before anything goes public.
• A registration batch that exports each month’s delivered images, with their dates, in the shape the Copyright Office’s group registration asks for.
• A location book and a visit counter: fee schedules by headcount, lead times and insurance flags for every garden and park you use, feeding the quote, plus a calendar that will not book an eleventh home-studio visit in a week.
• A tax-aware store that knows a session from a print from a download from a gallery extension, notices when a package has become a bundle, and charges EU VAT on a download sold to a buyer in Vilnius.

The first item is small enough to be a one-week prototype and would be the right first project for most studios, because it fixes the census problem at the only point where it can be fixed for good: before the file leaves. The last is the Online Store package in its photography form, a storefront that sells prints and downloads with the rules above built in and the files delivered through the pipeline. If you would rather see the shape of it than read about it, there is a working e-commerce demo on our demos page, and we have written up what a custom app really costs and how we think about custom versus SaaS versus no-code elsewhere on the blog.

Build, buy, or leave it alone

If you work alone, buy. Pick the gallery whose meter suits your business — storage if you shoot a lot and sell little, a flat plan with no commission if you sell prints, Pic-Time if you want the brand name written into delivered files for you — and a CRM whose meter you will not outgrow. Then spend an afternoon on the things that cost nothing. Enter your name and copyright line in your camera’s copyright menu. Make a Lightroom metadata preset with your name, copyright notice and website, apply it on import, and export with Remove Location Info ticked. Download one photo from your own website, open it and read the label. Invoice sessions separately from prints and downloads, and ask your accountant about the print-in-May question. Keep a one-page sheet of location fees and lead times. None of that needs a developer.

If you run volume, a team or a licensing business, do the other arithmetic: add up what the percentage and the seats cost you this year, list the records you keep in spreadsheets because no product has a place for them, and price a fixed build against the total. And if you are somewhere in the middle, the honest answer may be a single small tool beside the stack you already like. That is often the project we would recommend.

Questions photographers ask us

What software do photography studios use to run the business?

Most studios combine three kinds of tool: a client gallery with a print and download store (Pixieset, ShootProof, Pic-Time, SmugMug, Zenfolio or CloudSpot), a studio CRM for inquiries, contracts, invoices and scheduling (HoneyBook, Dubsado, Studio Ninja, Sprout Studio, 17hats, Iris Works or Pixieset’s own Studio Manager), and a website builder. In our September 2026 sample of 62 Baltimore-area photographers’ websites, the builders were WordPress (19), Showit (14), Wix (11) and Squarespace (9), in that order. Pixieset’s Suite bundles the gallery, website, store and studio manager for $336 to $660 a year on annual billing.

How much does photography studio software cost in 2026?

Galleries run from free to about $60 a month: Pixieset $0 to $50, ShootProof $0 to $60 (priced by the number of photos stored), Pic-Time $0 to $50, Zenfolio $9 to $40, and SmugMug $20 to $37 a month billed annually. Studio CRMs run from $16 a month for Studio Ninja’s Starter plan to $89 for Sprout Studio’s Unlimited, or $335 to $525 a year for Dubsado. For photographers who sell prints, the bigger cost is often the commission: 15% of the order on Pixieset’s free plan, 6% to 15% of your markup on Pic-Time and SmugMug, 7% on Zenfolio, and 7% to 12% of gross sales on school-photo platforms such as GotPhoto.

Do photographers have to charge sales tax in Maryland?

On the photographs, yes. Maryland taxes the sale of a photograph at 6% whether it is delivered as a print or as a file (COMAR 03.06.01.16A). When prints or an album are delivered, the tax also applies to a separately stated portrait-session fee. When only digital files are delivered, the Comptroller’s Business Tax Tip #29 treats a separately charged session or creative fee as a non-taxable service, while a single-price package whose dominant purpose is the digital product is taxable in full. Shipping that is stated separately at the time of sale is not taxed.

Do I need a permit to photograph a session at Sherwood Gardens or Cylburn Arboretum?

Yes at both. Sherwood Gardens requires a permit for every professional session, paid at least 14 days ahead through the Guilford Association, at $75 an hour for up to 10 people, $125 for 11 to 20 and $175 for 21 or more. Cylburn Arboretum, run by Baltimore City Recreation and Parks, wants requests 21 days ahead; outdoor sessions of up to 10 people get the first hour free, then pay $75 an hour on weekdays and $100 at weekends. Fort McHenry, by contrast, generally needs no permit for still photography involving eight or fewer people under the National Park Service’s rules since the EXPLORE Act of 2025.

Does Squarespace, Wix or WordPress strip EXIF data from my photos?

It depends on which copy of the photo you mean. In our September 2026 census, Wix’s resized display images carried no name, copyright notice or serial number in all 45 cases we checked, but the original uploads, reachable from the page’s own code, kept everything. Squarespace’s resized images kept the same identifying fields as the originals across 35 photos. WordPress never alters originals, and on hosts using the Imagick library it keeps EXIF, IPTC and XMP in resized copies too; on hosts using GD, resized copies keep nothing. The reliable test is to download one photo from your own site and read its metadata.

Should I remove GPS location data from photos before I deliver them?

For anything shot at a client’s home, yes. A GPS coordinate in a newborn or family photo points to the family’s address. Lightroom Classic’s export dialog has a Remove Location Info option that strips location even when all other metadata is kept. In our census of 330 photos on 57 Baltimore-area photographers’ websites, six photos on one site still carried GPS coordinates. Under Maryland’s Online Data Privacy Act, GPS-level coordinates count as precise geolocation data, a category of sensitive data, for businesses large enough to be covered by it.

Who owns the copyright to photos a client paid for?

The photographer, unless there is a signed written transfer. Copyright vests in the author (17 U.S.C. §201(a)); a portrait or wedding commissioned from an independent photographer is not a work made for hire under §101; and a transfer of ownership requires a signed writing (§204(a)). What the client receives is a license, often called a print release, together with ownership of any physical prints.

What is copyright management information, and why does photo metadata matter?

It is the legal term, in 17 U.S.C. §1202, for identifying information conveyed with a work, including the author’s name, the copyright owner and the terms of use, in digital form as well as on paper. Courts have held that EXIF and IPTC metadata can contain it. Knowingly removing it to enable or conceal an infringement carries statutory damages of $2,500 to $25,000 per violation under §1203. But the protection only reaches information that was there: the law bans removing a label, not failing to write one, and accidental stripping by software is usually not a violation.

Can I stop AI companies from training on my photos?

In the European Union the reservation itself is the legal mechanism. Text and data mining of content published online is permitted unless the rightholder has reserved it by machine-readable means (in Lithuania, Article 22² of the Law on Copyright and Related Rights), and since 2 August 2025 the EU AI Act has required general-purpose AI providers to identify and comply with such reservations. The IPTC Data Mining field (plus:DataMining) is one way to write that reservation into the file itself. No US statute gives it the same effect. In our census, 4 of 330 photos carried the field.

Should I register my photos with the Copyright Office?

If you want statutory damages and attorney’s fees to be available, registration has to happen before an infringement begins or within three months of first publication (17 U.S.C. §412). Group registration covers up to 750 photographs in one application for a $55 fee, and each photo is then registered as a separate work. The Copyright Office’s Compendium treats making a work available online for users to keep copies, or sending a client a copy they may use without restriction, as publication, so a downloadable client gallery may start that three-month clock.

Is it worth building custom software for a photography studio?

For a solo or two-person studio, on subscription savings alone, usually not: a complete rented stack costs roughly $336 to $1,500 a year, against $6,000 for a fixed-price online store. The case is stronger for volume photographers, whose commission on $250,000 of parent orders runs $17,500 to $25,000 a year; for studios with corporate headshot accounts; and for anyone who needs what no platform sells, such as a file pipeline that writes the photographer’s name and strips the client’s location, a license ledger, and registration exports.