Privacy Policy
1. Introduction
This Privacy Policy describes how Polotrip collects, uses, shares, and protects your personal information when you use our service. By using Polotrip, you agree to the practices described in this policy.
2. Information We Collect
We collect the following types of information:
- Account information: Name, email, and profile when you register or log in via Google.
- User content: Photos you upload, including associated metadata (EXIF) such as date, time, geographic location, width, and height when available.
- Payment information: Transaction data processed through Stripe (we do not directly store credit card data).
- Usage data: Information about how you interact with our service, including access logs and activities performed.
3. Collection of Photo Metadata
When you upload photos, Polotrip collects and processes EXIF metadata to provide features like the timeline and interactive map. This includes:
- Date and time the photo was taken
- Geographic coordinates (if available)
- Technical camera information
We will always inform you about the collection of this data during the upload process, and you will have the option to remove this metadata before completing the upload.
4. How We Use Your Information
We use your information to:
- Provide, maintain, and improve our services
- Process transactions and manage your account
- Allow the creation and sharing of digital albums
- Organize your photos into timelines and maps based on metadata
- Ensure the security and integrity of our service
- Communicate with you about updates or issues related to your account
5. Data Storage
Your data is stored as follows:
- Album covers: Stored in a public bucket on Supabase
- Album photos: Stored in a private bucket on R2 Cloudflare
- Metadata and account information: Stored in a secure database
We implement technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction.
6. Information Sharing
We share your information in the following circumstances:
- With people you authorize: Your albums are visible only to people with whom you share the unique link. The images in the albums are stored in a public bucket, which technically means that anyone with the exact image address can access it. However, the image addresses are difficult to guess and are not publicly disclosed by the platform.
- With service providers: We share data with service providers that help us operate Polotrip, such as Stripe (payments), Supabase, and Cloudflare (storage).
- When required by law: We may disclose your information when required by law or to protect our legal rights.
We do not sell or rent your personal information to third parties. We recommend that you share your albums only with people you trust.
7. Third-Party Integrations
Polotrip uses third-party services, including:
- Social login via Google
- Payment processing via Stripe
- Leaflet for interactive maps
- PostHog for product analytics and web analytics
Each of these services has its own privacy policies, and we recommend that you consult them to understand how they handle your data.
8. Cookies and Analytics
Polotrip uses cookies and analytics tools to improve your experience and understand how you use our service.
Cookie Usage
We use cookies to:
- Remember your language preferences and settings
- Store your consent for cookie and analytics usage
- Maintain your authenticated user session
PostHog Analytics
We use PostHog, a product analytics platform, to collect information about how you interact with our service. This helps us to:
- Improve user experience
- Understand how users navigate and use our features
- Identify and fix technical errors
- Optimize features and workflows
PostHog collects information such as:
- Page views and navigation
- Interactions with buttons, forms, and features
- Device type, browser, and operating system
- Technical error logs for diagnostics
- Application performance metrics
All collected information is anonymized whenever possible and does not include sensitive personal data such as passwords or payment information.
Analytics Opt-Out
You can opt out of PostHog tracking at any time through the cookie banner that appears on your first visit or by changing your preferences. When you opt out, we do not collect analytics data, although some cookies essential for the service to function are still necessary.
Consent Management
Your consent for cookie and analytics usage is stored locally in your browser and can be changed at any time. You can review your preferences through the cookie banner or contact us for more information.
9. Your Rights
You have the following rights regarding your personal data:
- Access and receive a copy of your personal data
- Correct inaccurate or incomplete data
- Request the deletion of your data
- Withdraw your consent at any time
- Object to the processing of your data in certain circumstances
To exercise any of these rights, please contact us at help@polotrip.com.
10. Data Retention
We retain your personal data only for as long as necessary to provide the requested services or to comply with legal obligations. When you delete your account, your albums and photos will be removed from our servers within 30 days.
11. Changes to this Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes through a notice on our website or by email.
12. Contact
If you have questions or concerns about this Privacy Policy or how we handle your data, please contact us at privacy@polotrip.com.
Last updated: April 28, 2025