Privacy Policy
Last updated: January 2025
1. Introduction
INSIDR ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile applications, and services (collectively, the "Service").
2. Information We Collect
2.1 Information You Provide
- Account Information: Email address, name, and profile information when you create an account
- Vault Submissions: Venue names, descriptions, addresses, photos, and other details you submit
- Communications: Messages you send to us or other users through the Service
- Ratings and Reviews: Ratings you provide for revealed Vault content
2.2 Information Collected Automatically
- Device Information: Device type, operating system, browser type, and unique device identifiers
- Usage Information: Pages visited, features used, time spent, and interaction patterns
- Location Information: Approximate location based on IP address; precise location only with your consent for map features
- Log Data: IP addresses, access times, and referring URLs
2.3 Cookies and Similar Technologies
We use cookies and similar tracking technologies to maintain your session, remember your preferences, and analyze usage patterns. You can control cookies through your browser settings, but disabling them may affect Service functionality.
3. How We Use Your Information
We use your information to:
- Provide, maintain, and improve the Service
- Manage your account and profile
- Process Vault Submissions and reveals
- Send transactional communications (updates, notifications)
- Detect and prevent fraud, abuse, and policy violations
- Enforce our Terms of Service
- Respond to your requests and provide customer support
- Analyze usage trends and improve user experience
- Send marketing communications (with your consent, where required)
4. How We Share Your Information
We do not sell your personal information. We may share your information with:
4.1 Service Providers
- Supabase: Authentication and database hosting
- Mapbox: Map rendering and location services
- Vercel: Website hosting and analytics
4.2 Other Users
Your Vault Submissions become visible to users who reveal them. Your display name may be shown with your submissions. Ratings you provide may be aggregated and displayed publicly.
4.3 Legal Requirements
We may disclose information if required by law, legal process, or government request, or to protect the rights, property, or safety of INSIDR, our users, or others.
4.4 Business Transfers
If INSIDR is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
5. Data Retention
We retain your information for as long as your account is active or as needed to provide services. After account deletion, we may retain certain information as required by law or for legitimate business purposes (e.g., fraud prevention, financial records). Vault Submissions may remain visible even after account deletion but will be anonymized.
6. Data Security
We implement appropriate technical and organizational measures to protect your personal information, including encryption in transit and at rest, secure authentication, and access controls. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.
7. Your Rights and Choices
Depending on your location, you may have the following rights:
- Access: Request a copy of your personal data
- Correction: Request correction of inaccurate data
- Deletion: Request deletion of your data (subject to legal requirements)
- Portability: Request your data in a portable format
- Opt-out: Unsubscribe from marketing communications
- Withdraw Consent: Where processing is based on consent
To exercise these rights, contact us at hi.insidr@gmail.com
8. International Users
If you are located outside of the country where our servers are located, your information may be transferred to and processed in other countries. By using the Service, you consent to this transfer.
8.1 European Economic Area (EEA) Users
If you are in the EEA, UK, or Switzerland, we process your data based on: (a) your consent, (b) performance of our contract with you, (c) compliance with legal obligations, or (d) our legitimate interests. You have additional rights under the GDPR, including the right to lodge a complaint with your local data protection authority.
9. California Privacy Rights
California residents have additional rights under the CCPA, including the right to know what personal information we collect and how it is used, the right to delete personal information, and the right to opt-out of the sale of personal information. We do not sell personal information. To exercise your rights, contact us at hi.insidr@gmail.com
10. Children's Privacy
The Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we learn that we have collected information from a child, we will delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Service with a new "Last updated" date. Your continued use after changes become effective constitutes acceptance.
12. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us at:
Email: hi.insidr@gmail.com