Privacy Policy for Fotspor (Website and Creation Tool)

2. What Personal Data We Process

a. Information You Provide

When you use our services, we may receive and store the following information: first name, last name, email address, and chosen login method (e.g., Google login). When purchasing Fotspor Plus or submitting a form, the form contents are stored, including phone number and any organization details. Correspondence with customer support, public information you share (such as on social media), and any personal data you include in routes or descriptions in the creation tool. We also store a record of consents, timestamps, and method. We also store necessary documentation about purchases (transaction data and invoicing information) for as long as required by statutory obligations (e.g. accounting laws).

b. Information We Collect Automatically

When you use our services, we automatically collect certain data such as technical details about browser, device type, operating system, language, and screen size; anonymized usage patterns; IP address and request timestamp; and metadata from uploaded files. This is used for operation, security, and service improvement.

4. Purpose and Legal Basis

a. Account and Communication

Personal data is used to create and manage the user account, fulfill agreements, meet legal obligations, and send operational messages. The legal basis is GDPR Article 6(1)(b).

b. Analytics and Improvement

Anonymized usage data is used to improve the services. Data is not shared with third parties and is not used for profiling or advertising. Consent is the legal basis for analytics (GDPR Article 6(1)(a)).

6. Third-Party Services

To deliver and operate Fotspor we use certain trusted third-party services. These providers process data on our behalf under data processing agreements and applicable privacy legislation.

• Firebase: Used for storage, authentication, and server logic. All databases are in the EU/EEA.
• Vimeo: Used for uploading and handling video files in routes, subject to Vimeo’s privacy policy.
• OpenAI: Used for AI functionality in the Editor. Data is processed only to generate routes and is subject to OpenAI’s privacy policy.
• PostHog: Used for anonymized analytics of usage patterns. Data stored in the EU.
• Webhuset & Hetzner: Webhuset and Hetzner are used for hosting the website and servers. Operations occur in Norway and Germany in line with European standards.