Privacy Policy

1. Introduction

At CapturedInLife ("we," "our," or "us"), we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

By using CapturedInLife, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.

2. Information We Collect

2.1 Personal Information

We may collect the following types of personal information:

• Account Information: Name, email address, and password when you create an account
• Payment Information: Billing details processed securely through Stripe (we do not store full credit card numbers)
• Gallery Content: Photos and images you upload to our platform
• Profile Information: Any additional information you choose to provide

2.2 Automatically Collected Information

When you visit our website, we automatically collect:

• Usage Data: Pages visited, time spent, clicks, and navigation patterns
• Device Information: IP address, browser type, operating system, device type
• Location Data: General geographic location based on IP address
• Cookies and Similar Technologies: Information stored on your device (see our Cookie Policy)

2.3 AI Processing Data

When you upload photos, our AI services (AWS Rekognition) analyze images to detect faces and objects. This processing is automated and used solely to provide search functionality within your galleries.

3. How We Use Your Information

We use your information for the following purposes:

• Service Provision: To create and manage your account, process uploads, and provide gallery services
• AI Features: To enable face recognition and keyword search within your photos
• Payment Processing: To handle subscriptions and billing through Stripe
• Communication: To send service updates, security alerts, and support responses
• Analytics: To improve our services and user experience
• Security: To detect and prevent fraud, abuse, and unauthorized access
• Legal Compliance: To comply with applicable laws and regulations

4. Data Storage and Security

4.1 Storage Locations

Your data is stored securely using industry-standard cloud providers:

• Photos: Stored on AWS S3 in the Asia Pacific region
• Database: Hosted on Supabase with encryption at rest
• Authentication: Managed by Supabase Auth with industry-standard security

4.2 Security Measures

We implement appropriate technical and organizational measures:

• SSL/TLS encryption for all data transmission
• Encrypted storage for all user data
• Regular security assessments and updates
• Access controls and authentication requirements
• Secure payment processing through PCI-compliant Stripe

5. Data Sharing and Disclosure

We do not sell your personal information. We may share data with:

5.1 Service Providers

• AWS: For photo storage and AI processing (Rekognition)
• Stripe: For payment processing
• Supabase: For database and authentication services
• Vercel: For website hosting and analytics

5.2 Legal Requirements

We may disclose information if required by law, court order, or government request.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, user information may be transferred to the acquiring entity, subject to the same privacy protections.

6. Your Rights and Choices

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and data
• Portability: Export your data in a usable format
• Objection: Object to certain data processing activities
• Withdraw Consent: Withdraw consent for optional data processing

To exercise these rights, contact us at privacy@capturedinlife.com.

7. Data Retention

We retain your data for the following periods:

• Account Information: Retained while your account is active
• Photos: Retained until you delete them or your account
• Payment Records: Retained for 7 years for tax and legal compliance
• Usage Logs: Retained for 90 days, then anonymized

Upon account deletion, we initiate a 30-day grace period, after which data is permanently removed from active systems. Backup copies may persist for up to 90 days.

8. Children's Privacy

Our services are not intended for children under 13. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

9. International Data Transfers

Your data may be transferred to and processed in countries other than your own, including the United States and Singapore. We ensure appropriate safeguards are in place for such transfers.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or through our website. Your continued use of our services after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

• Email: privacy@capturedinlife.com
• Address: CapturedInLife, 123 Gallery Street, Creative District, CD 12345