Privacy Policy

Introduction

Welcome to Where is this place's Privacy Policy. Our service is built privacy-first: we do not store your uploaded photos or personal data by default. We process only what is necessary to return a location result, then discard it. If you choose to generate a share link, we store the image and result so the link works.

Information We Collect

We aim to avoid storing user data. The minimal information we handle is:

Uploaded Photos: Images you submit are processed in memory to generate a location result. We do not persist the photo, EXIF data, or derived outputs after the request completes unless you choose to share.
Shared Links: If you generate a share link, we store the shared image and analysis result so the link can be viewed later. Shared images are served publicly via our CDN. We do not store EXIF data or your hint text with the share.
Technical Signals: Transient request data (e.g., IP address, user agent, error logs) needed to deliver the service and protect against abuse. These are minimized, short-lived, and not tied to user profiles.
Support Communications: If you contact us, we keep the message and any attachments only as long as needed to respond.
What We Do Not Collect: We do not run behavioral tracking, ad pixels, or sell any user data.

How We Handle Your Photos

Core principle: We do not store your photos by default. They are processed in volatile memory solely to find the location and then discarded. If you choose to share a result, we store the image and analysis result so the share link works. We do not store EXIF data or hint text with shared results. We do not reuse, sell, or share your imagery or metadata beyond providing the share link you requested.

How We Use Your Information

We use the minimal data above to:

Return a location result for your photo.
Keep the service secure and prevent abuse (e.g., rate limiting, fraud checks).
Respond to your support requests.
Improve detection quality using aggregated, non-identifying diagnostics (never the images themselves).

Data Security

We implement industry-standard safeguards and data minimization:

Encryption in transit (HTTPS/TLS) and at rest for stored assets.
Network isolation, access controls, and least-privilege permissions.
Regular security reviews, logging, and automated threat detection.
Vendor assessments for every integrated service.

Third-Party Services

We rely on trusted vendors to operate Where is this place:

Payments: Stripe for payment processing and subscription billing.
Authentication: Secure identity providers for login and account recovery.
Processing Infrastructure: Cloud platforms that handle encrypted, in-memory processing of your request. Images are only persisted when you explicitly create a share link.
Maps & Geodata: Mapping APIs to render coordinates, tiles, and Street View.
Analytics & Support: Tools that help us understand product health and respond to tickets without storing personal profiles.

These partners only receive the minimal data necessary to provide their services and are bound by contractual privacy obligations.

Your Rights

Depending on your location, you may have the right to:

Access, review, or export your personal data and reports.
Update or correct account information.
Request deletion of any support communications you have sent.
Restrict or object to certain processing activities.
Opt out of marketing communications.
File a complaint with your local data protection authority.

Data Retention

Photos: Not stored by default. Processed in-memory and discarded immediately after generating a result.
Derived Results: Not stored on our servers after the request completes unless you create a share link.
Shared Images & Results: Stored to keep share links available. Shared images are publicly accessible via our CDN. We do not store EXIF data or hint text with shared results.
Logs: Minimal technical logs retained only as long as necessary for security and reliability, without creating user profiles.
Support Messages: Retained while we resolve your request and as required by law, then deleted on request where permissible.
Billing Records: If payment is involved, billing providers may retain records as required by applicable regulations.