Last updated: June 2025
This Privacy Policy describes how HotSpot ("we," "us," or "our") collects, uses, and shares information when you use hotspotphoto.com and our related services (the "Service").
1. Information We Collect
Account & Profile
Your name, email address, password (hashed), avatar, and authentication provider data (e.g. Google sign-in).
Location Data
Approximate or precise location when you opt in to discover nearby spots, plan trips, or share live conditions. You can revoke location access at any time in your device or browser settings.
Payment Information
Payment card details are collected and processed by Stripe. We never see or store full card numbers. We receive transaction metadata (amount, status, last 4 digits, billing zip) to operate bookings and licenses.
Content You Submit
Spots, photos, reviews, conditions reports, trips, shot plans, messages, and booking details.
Usage & Device Data
IP address, browser type, device identifiers, pages viewed, referring URLs, and analytics events.
2. How We Use Your Information
- Create and manage your account and creator profile.
- Process bookings, escrow deposits, and license purchases.
- Send transactional emails and push notifications (booking confirmations, magic links, payouts).
- Personalize recommendations based on your location, saved spots, and history.
- Detect, prevent, and investigate fraud, abuse, and policy violations.
- Improve the Service through analytics and product research.
- Comply with legal obligations and enforce our Terms of Service.
3. Third-Party Services
We share information with trusted processors who help us run the Service:
- Stripe — payment processing, payouts, and fraud prevention.
- Supabase — database, authentication, storage, and backend infrastructure.
- Firebase — push notifications and real-time messaging.
- Google Maps — map rendering, geocoding, and directions.
- Twilio — SMS verification and transactional text messages.
- Mixpanel — product analytics and usage measurement.
Each provider processes data under its own privacy policy. We do not sell personal information.
4. Cookie Policy
We use cookies and similar storage technologies for essential session management, preferences, security, and analytics. For details on each cookie we set and how to opt out, see our Cookie Policy.
5. Your Rights
Depending on your jurisdiction (GDPR, UK GDPR, CCPA/CPRA, and similar laws), you may have the right to:
- Access — request a copy of the personal data we hold about you.
- Correction — ask us to fix inaccurate or incomplete data.
- Deletion — request that we erase your account and personal data.
- Portability — receive your data in a structured, machine-readable format.
- Restriction & Objection — limit certain processing or opt out of marketing.
To exercise any of these rights, email hello@hotspotphoto.com. We respond within 30 days.
6. Data Retention & Security
We retain account data while your account is active and for a reasonable period afterward to satisfy legal, tax, and operational obligations. Data is encrypted in transit (TLS) and at rest. No system is perfectly secure; please report suspected vulnerabilities to hello@hotspotphoto.com.
7. Children
The Service is not directed at children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect data from children.
8. Changes to This Policy
We will post updates here and adjust the "Last updated" date. Material changes will be highlighted in-product or by email.
9. Contact Us
Questions or requests? Email hello@hotspotphoto.com.
See also our Terms of Service and Cookie Policy.