Privacy Policy

1. Introduction

lazyfour ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Services.

By using our Services, you consent to the data practices described in this policy. If you do not agree with our policies and practices, please do not use our Services.

2. Information We Collect

2.1 Information You Provide to Us

We collect information that you voluntarily provide to us, including:

• Account Information: Name, email address, username, password, phone number
• Profile Information: Profile picture, bio, preferences, settings
• Payment Information: Billing address, payment method details (processed by PayPal and Razorpay; we do not store complete card numbers)
• Content: Photos, images, event details, invitations, messages, and other content you upload or create
• Communications: Information you provide when contacting customer support or communicating with us
• Feedback: Surveys, reviews, ratings, and other feedback you provide

2.2 Information Automatically Collected

When you access or use our Services, we automatically collect certain information, including:

• Log Data: IP address, browser type and version, operating system, referring/exit pages, date/time stamps, clickstream data
• Device Information: Device type, unique device identifiers, mobile network information
• Usage Data: Pages visited, features used, time spent, navigation paths, search queries
• Location Data: Approximate location derived from IP address (we do not collect precise geolocation without your explicit consent)
• Cookies and Similar Technologies: Information collected through cookies, web beacons, pixels, and similar tracking technologies (see our Cookie Policy)

2.3 Information from Third Parties

We may receive information about you from third parties, including:

• Social media platforms if you connect your account
• Payment processors (PayPal, Razorpay) regarding transaction status
• Analytics providers (Google Analytics, Microsoft Clarity)
• Advertising networks and partners

2.4 Biometric and AI-Processed Data

For services like SnapVerse that utilize facial recognition technology:

• Facial Embeddings: Mathematical representations of faces derived from your uploaded photos
• Similarity Scores: Computed matching scores for facial recognition search
• Image Metadata: EXIF data, timestamps, device information from uploaded photos

This biometric data is processed using AI algorithms and stored securely. You have the right to opt-out of facial recognition features and request deletion of this data.

3. How We Use Your Information

We use the information we collect for various purposes, including to:

• Provide and Maintain Services: Create and manage your account, deliver requested services, process transactions
• Improve and Optimize: Analyze usage patterns, conduct research, develop new features, enhance user experience
• Personalize: Customize content, recommendations, and advertising based on your preferences and behavior
• Communicate: Send service-related announcements, updates, security alerts, and promotional materials (with your consent)
• Security and Fraud Prevention: Detect, prevent, and address technical issues, fraud, illegal activities, and violations of our Terms
• Legal Compliance: Comply with applicable laws, regulations, legal processes, and governmental requests
• AI and Machine Learning: Train and improve our AI models for facial recognition, content moderation, and other features
• Analytics: Measure and analyze the effectiveness of our Services and marketing campaigns

3.1 Legal Basis for Processing (GDPR)

For users in the European Union, our legal basis for processing your personal data includes:

• Consent: You have given explicit consent for processing (e.g., marketing communications, facial recognition)
• Contract: Processing is necessary to perform our contract with you (e.g., providing Services)
• Legitimate Interests: Processing is necessary for our legitimate business interests (e.g., fraud prevention, analytics)
• Legal Obligation: Processing is required by law

4. Data Storage and Security

4.1 Where We Store Your Data

Your data is stored using the following infrastructure providers:

• Supabase: Database for user accounts, metadata, and application data
• Cloudflare R2: Object storage for images, photos, and user-uploaded files
• Vercel: Hosting for web applications
• Hetzner: Cloud infrastructure for backend services

Data may be transferred to and stored in locations outside your home country, including India, the United States, and the European Union.

4.2 Security Measures

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit (SSL/TLS) and at rest
• Access controls and authentication mechanisms
• Regular security audits and vulnerability assessments
• Employee training on data protection and security
• Incident response and data breach notification procedures

However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

4.3 Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Active Accounts: Data is retained while your account is active
• Deleted Accounts: Most data is deleted within 90 days, though backups may persist for up to 180 days
• Legal Obligations: Some data may be retained longer to comply with legal, accounting, or reporting requirements
• Biometric Data: Facial recognition data for SnapVerse is deleted within 30 days of account deletion or upon request

5. How We Share Your Information

We do not sell your personal data. We may share your information in the following circumstances:

5.1 Service Providers

We share data with third-party service providers who perform services on our behalf:

• Cloud Infrastructure: Cloudflare, Vercel, Hetzner, Supabase
• Payment Processing: PayPal, Razorpay
• Analytics: Google Analytics, Microsoft Clarity
• Advertising: Google Ads and other advertising networks
• Email Services: Email delivery and marketing platforms

5.2 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders, subpoenas, government agencies).

5.3 Business Transfers

If lazyfour is involved in a merger, acquisition, asset sale, or bankruptcy, your information may be transferred as part of that transaction.

5.4 With Your Consent

We may share information with third parties when you have given us explicit consent to do so.

5.5 Public Information

Information you choose to make public (e.g., public profiles, shared event invitations) may be visible to other users and the public.

6. Third-Party Services and Links

Our Services integrate with and link to third-party services. Below are links to their privacy policies:

We are not responsible for the privacy practices of these third-party services. We encourage you to review their privacy policies.

7. Your Rights and Choices

7.1 Access and Portability

You have the right to request access to the personal data we hold about you and to receive a copy in a portable format.

7.2 Correction

You can update or correct your account information at any time through your account settings or by contacting us.

7.3 Deletion

You have the right to request deletion of your personal data. You can delete your account through account settings or by contacting us at webmaster@lazyfour.com.

7.4 Opt-Out of Marketing

You can opt-out of receiving promotional communications by following the unsubscribe link in emails or by adjusting your notification settings.

7.5 Cookies and Tracking

You can control cookies through your browser settings. See our Cookie Policy for more information.

7.6 Do Not Track

Some browsers offer a "Do Not Track" (DNT) signal. Our Services currently do not respond to DNT signals, but we comply with applicable privacy regulations.

7.7 Biometric Data Opt-Out

You can opt-out of facial recognition features in SnapVerse through your account settings. This will delete your facial embeddings within 30 days.

7.8 Jurisdiction-Specific Rights

GDPR (EU): Right to object to processing, right to restrict processing, right not to be subject to automated decision-making

CCPA/CPRA (California, USA): Right to know what personal information is collected, right to delete, right to opt-out of sale (we do not sell data)

DPDP Act (India): Right to access, correct, and erase personal data; right to data portability

To exercise any of these rights, contact us at webmaster@lazyfour.com. We will respond within the timeframe required by applicable law (typically 30 days).

8. Children's Privacy

Our Services are not directed to children under the age of 13 (or the applicable age in your jurisdiction). We do not knowingly collect personal information from children under 13.

If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us immediately. We will take steps to delete such information.

Users between 13 and 18 should use our Services only with parental supervision and consent.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including India, the United States, and countries in the European Union.

These countries may have data protection laws that differ from those in your country. We ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions by relevant data protection authorities
• Binding corporate rules and other lawful transfer mechanisms

10. Data Breach Notification

In the event of a data breach that may adversely affect your rights and freedoms, we will notify you and relevant regulatory authorities as required by applicable law, typically within 72 hours of discovering the breach.

Notifications will include information about the nature of the breach, the data affected, and steps you can take to protect yourself.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new Privacy Policy on this page with an updated "Last Updated" date
• Sending an email notification to the address associated with your account
• Displaying a prominent notice on our Services

Your continued use of the Services after changes become effective constitutes acceptance of the revised policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: webmaster@lazyfour.com
Subject Line: "Privacy Inquiry - [Your Name]"
Company: lazyfour

We aim to respond to all inquiries within 30 days.