Privacy Policy

Fotarama LLC ("Fotarama," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use the Fotarama mobile application, website, and related services (collectively, the "Service").

By using our Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

We collect the following types of personal information when you use Fotarama:

Account Information

• Email address -- used for account creation, login authentication, and important account notifications.
• Phone number -- used for SMS-based verification, order confirmations, and account security.
• Name -- used to personalize your experience within the app.

Location Data

• Device location -- used to help you find nearby Fotarama machines and provide location-based services. Location data is collected only when you grant permission and is used solely for machine discovery and order fulfillment.

Transaction Data

• Purchase history -- records of items purchased, amounts, and timestamps for order processing and rewards tracking.
• Payment information -- processed securely through third-party payment processors. We do not store your full credit card number on our servers.

Device and Usage Data

• Device information -- device type, operating system version, and unique device identifiers for app functionality and troubleshooting.
• Usage data -- how you interact with the app, including features used and pages visited, to improve our Service.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Account creation and authentication -- to create and secure your Fotarama account.
• Order processing -- to process your purchases, facilitate pickups, and send order confirmations.
• Rewards tracking -- to track your points, purchases, and reward redemptions within our loyalty program.
• Machine discovery -- to show you nearby Fotarama machines and their available inventory.
• Service improvement -- to analyze usage patterns and improve our app, machines, and overall experience.
• Communications -- to send you order updates, account alerts, and (with your consent) promotional offers.
• Security -- to detect and prevent fraud, abuse, and unauthorized access.

3. Information Sharing and Disclosure

We do not sell your personal information to third parties.

We may share your information only in the following limited circumstances:

• Payment processors -- we share necessary transaction data with our payment processing partners (such as Stripe) to complete your purchases. These processors are bound by their own privacy policies and PCI compliance standards.
• Service providers -- we may share data with trusted service providers who assist with app hosting, analytics, and customer support, strictly under confidentiality agreements.
• Legal requirements -- we may disclose information if required by law, regulation, legal process, or enforceable government request.
• Business transfers -- in the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction, subject to the same privacy protections.

4. Data Security

We implement industry-standard security measures to protect your personal information, including:

• Encryption of data in transit (TLS/SSL) and at rest.
• Secure authentication mechanisms including multi-factor verification.
• Regular security assessments and updates.
• Access controls limiting employee access to personal data on a need-to-know basis.
• Automated monitoring for unauthorized access attempts.

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our Service. If you request account deletion, we will remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes (such as resolving disputes or enforcing agreements).

Transaction records may be retained for up to seven years to comply with financial and tax regulations.

6. Your Rights and Choices

You have the following rights regarding your personal information:

• Access -- you can request a copy of the personal data we hold about you.
• Correction -- you can update or correct your account information at any time through the app.
• Deletion -- you can request that we delete your account and personal data.
• Portability -- you can request your data in a structured, machine-readable format.
• Location permissions -- you can enable or disable location services through your device settings at any time.
• Marketing opt-out -- you can opt out of promotional communications by following the unsubscribe link in any marketing email or adjusting your notification settings in the app.

To exercise any of these rights, please contact us using the information provided below. We will respond to all legitimate requests within 30 days.

7. Children's Privacy

Our Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child under 18 has provided us with personal data, we will take steps to delete such information promptly.

8. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the "Last Updated" date at the top of this page and, where appropriate, through in-app notifications or email. We encourage you to review this policy periodically.

9. California Privacy Rights (CCPA)

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), including:

• The right to know what personal information is collected about you.
• The right to request deletion of your personal information.
• The right to opt out of the sale of personal information.
• The right to non-discrimination for exercising your privacy rights.

As stated above, we do not sell personal information. To submit a CCPA request, contact us at support@fotarama.com.

10. New Jersey Privacy Rights

If you are a New Jersey resident, you may have additional rights under applicable state privacy laws. Fotarama is headquartered in New Jersey and complies with all applicable state data protection requirements. New Jersey residents may exercise rights similar to those described in Section 6 above by contacting us directly.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: support@fotarama.com
• Company: Fotarama LLC
• Location: New Jersey, United States