Send gallery delivery emails and opted-in offers

For a frozen sneak peek or full delivered milestone with separate couple, vendor and guest photo selections, use Sneak peek & full delivery. Its approved emails open only the recipient’s scoped selection. The campaigns described below use the existing whole-gallery access route.

Use Delivery & care to send a gallery to expected clients or schedule an offer for visitors who chose to receive it. Gallery delivery, gallery access and checkout are separate: an email does not publish a draft gallery, remove its password or confirm a purchase.

Consent and reviewed messages

Manual delivery accepts a reviewed list of expected client recipients. Marketing messages require explicit gallery opt-in plus verification of that same email in the gallery. Typing an address into the entry form alone does not enroll it for offers. The visitor verifies through the saved-selections panel; it uses a short-lived email code and does not bypass gallery access permissions.

Each queued recipient gets a saved subject, message, destination, reply address, gallery link and unsubscribe link. The sending address is frozen before the first attempt if email configuration was missing when the campaign was queued. Subsequent attempts use the same message and provider idempotency key. Editing a campaign record or changing sender configuration cannot change a retry's content.

Email setup remains part of activation. Without it, queued messages stay local. A campaign created before saved payloads were introduced needs review and a new campaign rather than reconstructing an already attempted message from mutable fields.

Five optional follow-up rules

The Thoughtful follow-ups panel starts with every rule paused. Review and approve the wording, timezone, timing and stop rules before enabling one. The only personalization fields are {{name}} and {{gallery}}; the system appends the gallery and unsubscribe links.

• Unfinished checkout follows an open or expired checkout created after approval. At most one reminder is queued for each recipient and UTC checkout day. A later confirmed purchase can stop it.
• Upcoming gallery expiry is scheduled before the current expiration. Extending access creates a new expiry event. A message that would land after access closes is not scheduled.
• Anniversary uses the date and timezone you explicitly choose. February 29 falls on February 28 in non-leap years.
• Review invitation follows a gallery delivery email sent after the rule was approved. Ask for honest feedback; this workflow does not publish a testimonial automatically.
• Referral invitation follows a gallery delivery email after the approved delay. It sends your reviewed wording; it does not create referral credit, discounts or financial rewards.

All five require verified opt-in. Delivery is scheduled at your selected local hour, between 8:00 and 20:00. The scheduler prepares upcoming events within seven days and catches up events due in the previous day. It does not enroll years of old deliveries when a rule is enabled. Each worker pass examines up to 100 enabled rules and 500 contacts per rule. Saved scan cursors rotate the next pass through the remaining rules and recipients. Large audiences take several worker passes; they do not become one unbounded send request.

Saving another rule revision cancels its existing unsent jobs. Already accepted messages cannot be recalled, and completed events are not re-sent simply because wording changed.

Stops, suppression and recovery

Unsubscribe stops that gallery's delivery reminders and marketing. Bounces, complaints, failed or suppressed delivery receipts suppress further gallery emails to that address in the same business workspace. Re-entering the email or verifying it again does not clear a provider suppression.

A rule can stop when a linked client conversation receives a reply or is paused, and when a purchase is confirmed. Replies in an unconnected or unlinked external mailbox are not visible to the application. The studio reply address remains the email reply destination; connected mailbox campaigns are not silently substituted for the studio email provider.

The worker checks eligibility again at dispatch, uses a lease to prevent overlapping attempts, and preserves the first attempt time. A lost response stays retryable only within the provider's safe idempotency window. After that, the message needs review; the application does not guess whether to send another copy. Signed provider receipts must match the frozen sender and recipient before they update a delivery or suppression.

What the counters mean

Accepted means the provider accepted a send. Delivered requires its delivery receipt. Links opened records a visit to the private gallery link; scanners and link previews can also cause that event. There is no email-open tracking.

A click-assisted paid order requires the same recipient email to be verified in that gallery, a tracked link visit within 30 days and a verified paid order. The displayed value subtracts recorded cash refunds. It does not claim the message caused the purchase, and it is not a substitute for the finance ledger or prepaid-credit accounting.

Local simulator tests cover these jobs and recovery paths. Actual email delivery, bounce receipts and provider activation still require the coordinated launch setup.

Select the audience and connect a real offer

For a marketing campaign, choose all eligible visitors or an explicit selection. Add purchase-history and saved-favorites filters, then Preview matching recipients to inspect the exact addresses before scheduling. Each manual campaign supports up to 500 contacts. Only verified, consented, unsuppressed visitors qualify; choosing a person never overrides their preferences.

Purchase filters use confirmed orders associated with that exact email. Fully refunded purchases do not count; included authorized package orders do. Favorite filters use selections linked to a verified gallery identity, not an unverified name or a typed address. The worker checks the same filters again before sending. A “no purchase” offer can therefore stop when the person buys after you scheduled it.

An optional linked promotional code appends its actual percentage and UTC expiration to the frozen message. The studio must configure the code first under Price lists, offers & storefront. If its percentage or expiration changes, it expires, it is disabled, or it runs out of uses, unsent linked messages stop. A coupon is never automatically applied to a charge; the customer enters the code and sees the final checkout total.

The same storefront page can publish a timed banner inside the authorized gallery. Preview its wording and select an existing code with validity covering the entire window. The banner appears only during that window while the code remains available. It does not bypass gallery access, send an email or change earlier orders.

Activity summaries for your studio account

The gallery's My activity digest and email preferences page is independent of client marketing. Each authorized studio operator chooses their own hourly or daily summary, which activity to include, and whether to retain it only on the private page or also send it to one of their verified account email addresses. It starts paused. A teammate cannot enroll another person's email.

Summaries count gallery entries, authorized download requests, favorite lists last updated during the period, and confirmed purchases. A download request does not prove that a person finished receiving the file. A favorite-list update counts the list once, not every photograph click. Studio-funded gifts are not customer purchases.

Windows close on the UTC hour or midnight UTC. Empty periods remain quiet. After a worker interruption, the next summary combines the missed interval and records its actual start and end. A durable scan receipt prevents a restarted worker from creating overlapping summaries for the same tick.

Changing your preferences supersedes unsent notices from the previous revision. Loss of private workspace access or removal of the selected verified email stops future email. Provider bounce, complaint or suppression receipts pause the matching subscription. Accepted, delivered, failed and superseded outcomes remain distinct in recent summaries. Retry attempts retain the original payload, first attempt and provider key; after the provider's safe retry period, they need review instead of an automatic new send.

Private summaries work independently of external email. Email additionally requires the galleryActivity deployment activation, current workspace feature availability, verified sender/reply configuration, durable workers and signed delivery callbacks. During a workspace pause, pending emails retain their identity and are checked again on a later pass.