Privacy Policy

1. Information We Collect

1.1 Information You Provide

We collect information you provide directly when creating an account or using our services:

• Account credentials (email address and password)
• Profile information (full name, company name for organizers)
• Race photos uploaded by event organizers and photographers
• Bib numbers and search queries when looking for photos
• Payment information when purchasing downloads or services
• Communications when you contact our support team

1.2 Automatically Collected Information

When you access our platform, we automatically collect:

• Device information (browser type, operating system, device type)
• Usage data (pages visited, features used, time spent on platform)
• IP address and approximate geographic location
• Consent preferences for AI modifications
• Download history and photo interactions

2. How We Use Your Information

We use the collected information for the following purposes:

2.1 Service Provision

• Create and manage your account
• Provide photo search and delivery services
• Process AI-powered bib number detection
• Apply AI modifications to photos with your explicit consent
• Process payments and manage transactions
• Facilitate communication between organizers, photographers, and sponsors

2.2 Platform Improvement

• Analyze usage patterns to enhance user experience
• Improve AI detection accuracy and photo quality
• Develop new features and services
• Troubleshoot technical issues and optimize performance

2.3 Legal and Security

• Comply with legal obligations and regulatory requirements
• Protect against fraud, abuse, and security threats
• Enforce our Terms of Service
• Respond to legal requests from authorities

3. AI Processing and Modifications

3.1 What AI Processing Includes

When you consent to AI modifications, we process your photos using third-party AI services to:

• Automatically detect bib numbers in race photos using computer vision
• Apply sponsor branding to clothing items (shirts, shorts, caps)
• Add sponsor logos to appropriate areas of the image
• Enhance background elements with advertising materials
• Maintain photo quality while applying modifications

3.2 Your Control Over AI Processing

• You can decline AI modifications for any photo
• Original unmodified photos are always preserved
• You can request removal of modified photos at any time
• Different pricing applies for modified vs. unmodified downloads

3.3 Third-Party AI Services

We use Replicate for AI image processing. Photos are temporarily transmitted to Replicate's servers for processing and are not retained by Replicate after modification completion.

4. Data Storage and Security

4.1 Security Measures

We implement industry-standard security measures to protect your data:

• Encryption at rest and in transit using TLS/SSL protocols
• Secure authentication using encrypted password hashing
• Regular security audits and vulnerability assessments
• Access controls limiting employee access to personal data
• Automated backup systems to prevent data loss

4.2 Data Storage

Your photos and data are stored using Supabase cloud infrastructure in secure data centers. We retain your data for as long as your account is active or as needed to provide services.

4.3 Data Retention

• Account data: Retained while account is active
• Photos: Retained according to event organizer settings
• Transaction records: 7 years for accounting and tax purposes
• Logs and analytics: 90 days for security and improvement purposes

5. Your Privacy Rights

5.1 GDPR Rights (European Users)

If you are in the European Economic Area, you have these rights under GDPR:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data (right to be forgotten)
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Object to certain processing activities
• Right to Withdraw Consent: Withdraw consent for data processing at any time
• Right to Lodge a Complaint: File a complaint with your local data protection authority

5.2 CCPA Rights (California Users)

California residents have additional rights under CCPA:

• Right to know what personal information is collected
• Right to know whether personal information is sold or disclosed
• Right to say no to the sale of personal information
• Right to access your personal information
• Right to equal service and price

5.3 How to Exercise Your Rights

To exercise any of these rights, contact us at privacy@fotosponsor.com. We will respond within 30 days and may require verification of your identity before processing your request.

6. Data Sharing and Disclosure

6.1 Who We Share Data With

We may share your information with:

• Service Providers: Supabase (hosting), Replicate (AI processing), Stripe (payments)
• Event Organizers: Access to photos they uploaded and download statistics
• Legal Authorities: When required by law or to protect our rights
• Business Transfers: In case of merger, acquisition, or sale of assets

6.2 What We Don't Share

We do not sell your personal information to third parties for marketing purposes. We do not share your photos with anyone other than the event organizer who uploaded them or as required by law.

7. Cookies and Tracking Technologies

7.1 Essential Cookies

We use essential cookies required for platform functionality:

• Authentication cookies to maintain your login session
• Preference cookies to remember your settings (language, etc.)
• Security cookies to prevent fraud and ensure platform security

7.2 What We Don't Use

We do not use tracking cookies for advertising, social media tracking, or third-party analytics beyond basic usage statistics required to operate the service.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable data protection laws.

9. Children's Privacy

Our service is not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us immediately.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last updated" date. Continued use of our services after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about how we handle your data, please contact us: