Privacy Policy

1. Information We Collect

1.1 Information You Provide

1.2 Information Collected Automatically

1.3 Information from Third Parties

We may receive information from:

• Authentication providers (Google, Microsoft) when you sign in with SSO
• Payment processors (Stripe) for billing verification
• Business partners who integrate with our Services
• Public sources for business contact information

2. How We Use Your Information

We use your information for the following purposes:

2.1 Providing Services

• Creating and managing your account
• Processing your inputs and generating AI outputs
• Processing payments and managing subscriptions
• Providing customer support

2.2 Improving Services

• Training and improving our AI models (unless you opt out)
• Analyzing usage patterns to enhance features
• Conducting research and development
• Debugging and fixing issues

2.3 Safety and Security

• Detecting and preventing fraud, abuse, and security threats
• Enforcing our Terms of Service and policies
• Complying with legal obligations
• Protecting rights of users and third parties

2.4 Communications

• Sending service-related notifications
• Responding to your inquiries
• Marketing communications (with your consent, where required)

3. How We Share Your Information

We do not sell your personal information. We may share information with:

3.1 Service Providers

Third parties who help us operate our Services, including:

• Cloud hosting providers (infrastructure)
• Payment processors (Stripe)
• Analytics providers
• Customer support tools
• Email service providers

3.2 Business Transfers

In connection with any merger, acquisition, reorganization, or sale of assets, your information may be transferred to the acquiring entity.

3.3 Legal Requirements

We may disclose information when required by law, legal process, or government request, or to protect rights, safety, or property.

3.4 With Your Consent

We may share information with your consent or at your direction.

4. Data Retention

We retain your information for as long as necessary to:

• Provide our Services to you
• Comply with legal obligations
• Resolve disputes and enforce agreements
• Meet legitimate business purposes

When you delete your account, we will delete or anonymize your personal information within 90 days, except where retention is required by law or for legitimate business purposes.

5. Your Rights and Choices

Depending on your location, you may have the following rights:

To exercise these rights, contact us at privacy@gymspotter.ai.

5.1 Opt-Out of AI Training

You can opt out of having your content used for AI model training through your account settings. Note that we may still use content flagged for safety review.

5.2 Marketing Communications

You can unsubscribe from marketing emails using the link in any email or through your account settings.

6. Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption in transit (TLS) and at rest
• Access controls and authentication
• Regular security assessments
• Employee security training
• Incident response procedures

However, no system is completely secure. We cannot guarantee absolute security of your information.

7. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, such as Standard Contractual Clauses, to protect your information in accordance with this Privacy Policy.

8. Children's Privacy

Our Services are not intended for children under 18 years of age. We do not knowingly collect personal information from children. If we learn we have collected information from a child, we will delete it promptly.

9. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Categories and specific pieces of personal information collected
• Right to Delete: Request deletion of personal information
• Right to Opt-Out: Opt out of sale of personal information (we do not sell personal information)
• Non-Discrimination: We will not discriminate against you for exercising your rights

To make a request, contact privacy@gymspotter.ai or call us at our toll-free number.

10. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), UK, or Switzerland:

• Legal Basis: We process your data based on consent, contract performance, legal obligations, and legitimate interests
• Data Controller: Gym Spotter Inc. is the data controller
• DPO: Contact our Data Protection Officer at dpo@gymspotter.ai
• Supervisory Authority: You have the right to lodge a complaint with your local data protection authority

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through our Services. The "Last Updated" date at the top indicates when the Policy was last revised.

12. Contact Us