Privacy Policy

Last Updated: December 2024

This Privacy Policy describes how FootLove ("Company", "we", "us", or "our") collects, uses, stores, and shares your personal information when you use our platform and services. This policy complies with the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other applicable privacy laws.

1. Information We Collect

Personal Information You Provide

Account Information: Email address, username, display name, password, date of birth
Profile Information: Bio, gender, country, foot size, interests, profile and banner images
Identity Verification: Government-issued ID, age verification documents (processed by SumSub)
Payment Information: Payment method details, billing address, transaction history (processed by secure payment processors)
Communications: Messages, support requests, email communications
Content: Photos, videos, and other media you upload to the platform

Information We Collect Automatically

Usage Data: Pages visited, features used, time spent on platform, interaction patterns
Device Information: IP address, browser type, operating system, device identifiers
Location Data: General geographic location based on IP address (with consent for precise location)
Cookies and Tracking: Essential cookies for functionality, analytics cookies (with consent)

Information from Third Parties

Age Verification: Verification results from SumSub (age confirmation, verification status)
Payment Processors: Transaction confirmations, payment status updates
Content Moderation: Content analysis results from Hive AI for safety purposes

2. How We Use Your Information

Legal Bases for Processing (GDPR)

We process your personal data based on the following legal grounds:

Contract Performance: To provide platform services, process payments, facilitate transactions
Legal Compliance: Age verification, anti-money laundering, tax compliance, content moderation
Legitimate Interests: Platform security, fraud prevention, service improvement, analytics
Consent: Marketing communications, non-essential cookies, location tracking

Specific Uses

Providing and maintaining platform functionality
Processing payments and managing virtual currency transactions
Verifying user identity and ensuring age compliance (18+)
Moderating content for safety and legal compliance
Communicating about account, services, and platform updates
Preventing fraud, abuse, and unauthorized access
Analyzing usage patterns to improve services
Complying with legal obligations and law enforcement requests

3. Information Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

Service Providers

SumSub: Age and identity verification services
Stripe/Payment Processors: Payment processing and transaction management
Hive AI: Content moderation and safety analysis
Cloud Storage Providers: Secure data storage and backup services
Analytics Providers: Usage analytics and platform performance monitoring

Legal Requirements

Compliance with court orders, subpoenas, or legal processes
Cooperation with law enforcement investigations
Protection of our rights, property, or safety
Prevention of fraud or illegal activities
Enforcement of our Terms of Service

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction, subject to applicable privacy laws.

4. International Data Transfers

Your information may be processed in countries outside your residence, including the United States. For EU users, we ensure adequate protection through:

Standard Contractual Clauses approved by the European Commission
Adequacy decisions for certain countries
Other appropriate safeguards as required by GDPR

5. Data Security

We implement comprehensive security measures to protect your information:

Encryption of data in transit and at rest
Regular security assessments and penetration testing
Access controls and authentication measures
PCI-compliant payment processing systems
Automated content moderation for safety
Regular backup and disaster recovery procedures
Employee training on data protection practices

6. Your Privacy Rights

Rights for All Users

Access and update your account information
Delete your account and associated data
Opt-out of marketing communications
Contact us with privacy concerns

Additional Rights (GDPR - EU/UK Users)

Right of Access: Request copies of your personal data
Right to Rectification: Correct inaccurate or incomplete data
Right to Erasure: Request deletion of your personal data
Right to Data Portability: Receive your data in a structured, machine-readable format
Right to Object: Object to certain processing activities
Right to Restrict Processing: Request limitation of data processing
Right to Withdraw Consent: Withdraw consent for processing based on consent
Right to Lodge a Complaint: File a complaint with a supervisory authority

Additional Rights (CCPA - California Users)

Right to Know: Information about collection, use, and sharing of personal information
Right to Delete: Request deletion of personal information
Right to Opt-Out: Opt-out of sale of personal information (we do not sell data)
Right to Non-Discrimination: Equal service regardless of privacy rights exercise

7. Cookie Policy

Types of Cookies We Use

Essential Cookies: Required for platform functionality (login, security, payment processing)
Analytics Cookies: Help us understand usage patterns and improve services (with consent)
Preference Cookies: Remember your settings and preferences

Managing Cookies

You can control cookies through your browser settings. Disabling essential cookies may affect platform functionality.

8. Data Retention

We retain your personal information for different periods based on the type of data and legal requirements:

Account Data: As long as your account is active
Transaction Records: 7 years for tax and financial compliance
Identity Verification: As required by anti-money laundering laws
Content Moderation Logs: 3 years for safety and legal compliance
Marketing Data: Until you opt-out or withdraw consent
Backup Data: Up to 90 days in secure backup systems

9. Account Deletion and Data Removal

When you delete your account through the settings page:

Your profile is immediately anonymized
Personal information is removed from active databases within 30 days
Some data may be retained for legal compliance (transaction records, moderation logs)
Backup systems are purged according to our retention schedule
Active subscriptions are cancelled
You will receive confirmation of deletion via email

10. Children's Privacy

Our platform is strictly for users 18 years and older. We do not knowingly collect information from minors. All users must complete age verification before accessing platform features. If we discover that a minor has provided information, we will immediately delete the account and associated data.

11. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. Material changes will be communicated through:

Email notification to registered users
Prominent notice on the platform
Updated "Last Modified" date

Continued use of the platform after changes constitutes acceptance of the updated policy.

12. Contact Information

For privacy-related questions, to exercise your rights, or to report privacy concerns:

General Privacy Inquiries

Email: anna@joinfootlove.com
Subject Line: "Privacy Request"

Data Protection Officer (EU/UK)

Email: anna@joinfootlove.com
Response Time: 30 days maximum

California Privacy Rights

Email: anna@joinfootlove.com
Subject Line: "CCPA Request"

13. Legal Compliance

This Privacy Policy complies with:

General Data Protection Regulation (GDPR) - EU/UK
California Consumer Privacy Act (CCPA) - California
Personal Information Protection and Electronic Documents Act (PIPEDA) - Canada
Other applicable local data protection laws

14. Supervisory Authority Contact (EU/UK Users)

If you have concerns about our data processing practices, you may contact your local supervisory authority. For UK users, this is the Information Commissioner's Office (ICO).