Privacy Policy

This notice explains the categories of personal information FotoFlow may collect, the purposes for collection, and the choices available to people in places with privacy laws such as California and other US states.

FotoFlow is in public beta. Some advertising, catalog, analytics, and personalization features may be expanded over time. When new data uses become active, this policy should be updated before those features are used at scale.

• Identifiers: name, email address, username, profile photo, account IDs, session identifiers, and authentication data.
• Content and profile data: pins, boards, comments, saves, likes, follows, messages, reports, business profile information, catalog items, and uploaded media metadata.
• Internet and device activity: IP address, browser, device, pages viewed, searches, clicks, impressions, upload events, sign-in events, and security logs.
• Approximate location: region inferred from IP address. Precise location is not required by the current FotoFlow web app.
• Commercial and ads data: product listings, campaign settings, ad impressions, clicks, conversion events, billing profile information, and invoices when business tools are used.
• Inferences: interest categories and recommendation signals based on pins, boards, searches, saves, likes, follows, and ad interactions.

This Privacy Policy applies to FotoFlow websites, accounts, visual discovery features, uploads, boards, business tools, advertising tools, messaging, notifications, and related APIs operated for fotoflow.xyz.

This policy does not cover third-party websites, merchants, advertisers, payment processors, identity providers, hosting providers, or other services that FotoFlow does not control.

We collect information you provide, information created when you use FotoFlow, and limited information from service providers such as Google sign-in, Cloudinary media storage, Neon database hosting, and Upstash Redis infrastructure.

• Account information you provide through Google sign-in or your FotoFlow profile.
• Content you create, upload, save, like, comment on, report, or send through messages.
• Board, profile, business, catalog, campaign, billing, and moderation data.
• Technical data such as IP address, browser, timestamps, request path, device signals, cookies, and security logs.
• Search, recommendation, click, save, view, and ad interaction events.

We use information to run FotoFlow, personalize discovery, secure the service, provide business tools, measure platform performance, and support future advertising and shopping features.

• Authenticate users, maintain sessions, and protect accounts.
• Show pins, boards, profiles, search results, recommendations, and notifications.
• Store, transform, optimize, and deliver uploaded images and media.
• Rank content and infer interests from saves, likes, boards, follows, search terms, and clicks.
• Operate business accounts, product catalogs, campaign drafts, sponsored pins, conversion measurement, and billing records.
• Detect abuse, spam, fraud, unsafe content, copyright issues, and security incidents.
• Analyze usage, test features, debug errors, and improve product quality.

FotoFlow is designed to support visual recommendations, shopping discovery, and sponsored content. Sponsored content should be marked clearly when active.

Recommendation systems may use pins, boards, searches, tags, categories, saves, likes, follows, and ad interactions. If generative AI or model-training features are enabled later, FotoFlow should disclose what content and signals are used and provide controls where required by law.

Where GDPR or similar laws apply, FotoFlow may rely on different legal bases depending on the activity. This section should be reviewed by counsel once the operating company and target countries are final.

• Contract: to provide accounts, boards, uploads, search, messaging, business tools, and related service features.
• Legitimate interests: to secure the service, prevent abuse, measure performance, improve recommendations, and understand how users interact with FotoFlow.
• Consent: for optional cookies, precise location, certain marketing, and certain advertising uses where consent is required.
• Legal obligation: to comply with lawful requests, tax, accounting, safety, and regulatory obligations.

Depending on where you live, you may have rights to access, correct, delete, export, restrict, object to, appeal, or opt out of certain uses of your personal information.

Because FotoFlow is still being built, some controls may require a support request until self-service settings are complete.

• Manage profile, boards, pins, saves, notifications, and public visibility from account features when available.
• Request access, correction, deletion, export, or appeal by contacting admin@fotoflow.xyz.
• Opt out of targeted advertising, sale, or sharing where legally required by contacting admin@fotoflow.xyz until an automated control is added.
• Clear cookies and local storage in your browser. Essential authentication cookies may be required for login.

Public pins, public boards, public profiles, comments, creator names, and visible engagement counts may be seen by other people. Private boards should not be shown publicly except to people you invite or authorize.

We also share information with service providers that help operate FotoFlow, and we may disclose information when required for safety, legal compliance, fraud prevention, or business transfers.

• Infrastructure providers such as hosting, database, cache, image storage, email, analytics, security, and authentication vendors.
• Business and advertising partners when you use business tools, catalogs, campaign features, or conversion measurement.
• Law enforcement, regulators, courts, or other parties when disclosure is reasonably necessary and lawful.
• Successors or parties involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of FotoFlow assets.

FotoFlow uses cloud providers that may process information in countries other than where you live, including the United States or provider regions selected for database, cache, and media infrastructure.

For EEA, Swiss, and UK transfers, appropriate transfer mechanisms such as standard contractual clauses should be put in place where required.

We keep information for as long as needed to provide FotoFlow, maintain accounts, resolve disputes, enforce terms, comply with legal obligations, prevent abuse, and improve the service.

If an account is deleted, public content and backups should be removed or de-identified according to a documented retention schedule, except where retention is legally required or needed for safety, fraud, billing, or dispute records.

FotoFlow is not intended for children under 13. If a higher minimum age applies where you live, you may use FotoFlow only if you meet that age requirement.

If FotoFlow learns that it has collected personal information from a child in a way that requires parental consent, the information should be deleted or handled according to applicable child privacy law.

FotoFlow may update this policy as features, vendors, laws, and business practices change. Material changes should be posted on this page and, where appropriate, communicated by email or in-app notice.

For privacy, data, safety, copyright, or account requests, contact admin@fotoflow.xyz. This policy is a product-ready draft and should be reviewed by qualified counsel before a full commercial launch.