Privacy Policy

1. Introduction

Welcome to Valecrypt. We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you about how we look after your personal data when you visit our website and tell you about your privacy rights and how the law protects you.

2. Information We Collect

We collect and process the following types of personal information:

• Account Information: Name, email address, username, and password (encrypted)
• Profile Information: Profile picture, bio, driver number, and social media links
• Vehicle Data: Information about your vehicles, parts, services, and modifications
• Track Day Data: Track session information, lap times, telemetry data from CSV/GPX files
• Social Data: Friend connections, friend requests, and social interactions
• Usage Data: Pages visited, features used, time spent on the platform, and device information
• Technical Data: IP address, browser type, operating system, and cookies
• Authentication Data: OAuth tokens from Google Sign-In (if applicable)

3. How We Collect Your Data

We collect information through:

• Direct Interactions: When you register, update your profile, or use our services
• File Uploads: When you upload telemetry files (CSV/GPX), photos, or other content
• Automated Technologies: Cookies and similar tracking technologies
• Third-Party Authentication: Google OAuth for sign-in (we receive your name, email, and profile picture)
• Analytics: Google Analytics to understand how users interact with our site

4. How We Use Your Data

We use your personal data for the following purposes:

• Service Delivery: To provide and maintain our platform features
• Account Management: To create and manage your account
• Analytics: To analyze your telemetry data and provide performance insights
• Social Features: To enable friend connections and sharing of track day activity
• Communication: To send you service-related emails (email verification, password resets)
• Improvement: To understand usage patterns and improve our services
• Security: To detect and prevent fraud, abuse, and security issues
• Legal Compliance: To comply with legal obligations
• Achievements: To track progress and award achievements and XP

5. Data Sharing and Disclosure

We may share your information in the following circumstances:

• Public Profile: Information you choose to make public (username, bio, driver number, public track days, social links, highlight video) is visible to other users
• Friends: Track day activity marked as public is visible to your friends
• Service Providers: With trusted third parties who help us operate our platform (Supabase for database, Vercel for hosting, Resend for emails)
• Analytics: Anonymized usage data with Google Analytics
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger, sale, or acquisition

We do not sell your personal data to third parties.

6. Data Storage and Security

We implement appropriate technical and organizational measures to protect your data:

• Encryption: Passwords are hashed using bcrypt. Data in transit is encrypted using HTTPS/TLS
• Database Security: Row-Level Security (RLS) policies ensure users can only access their own data
• Access Control: Strict authentication and authorization controls
• Data Centers: Your data is stored in secure data centers managed by Supabase
• Backups: Regular automated backups to prevent data loss

While we strive to protect your personal data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

7. Your Privacy Rights

You have the following rights regarding your personal data:

• Access: Request access to your personal data
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your account and personal data (via Account page)
• Portability: Request a copy of your data in a structured format
• Objection: Object to processing of your personal data
• Restriction: Request restriction of processing your personal data
• Withdrawal: Withdraw consent at any time (where processing is based on consent)

To exercise these rights, please contact us at privacy@valecrypt.com

8. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy or as required by law. When you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal, regulatory, or security purposes.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies for:

• Essential Cookies: Required for authentication and security (NextAuth session cookies)
• Analytics Cookies: Google Analytics to understand usage patterns
• Preference Cookies: To remember your settings and preferences

You can control cookies through your browser settings. However, disabling certain cookies may limit functionality of our service.

10. Third-Party Services

Our platform integrates with the following third-party services:

• Google OAuth: For authentication (see Google's Privacy Policy)
• Google Analytics: For usage analytics (see Google's Privacy Policy)
• Supabase: For database and authentication (see Supabase's Privacy Policy)
• Resend: For transactional emails (see Resend's Privacy Policy)
• YouTube: For embedded highlight videos (see YouTube's Privacy Policy)

These third parties have their own privacy policies. We encourage you to review them.

11. Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately, and we will delete such information.

12. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. We ensure appropriate safeguards are in place to protect your data in accordance with this privacy policy.

13. Changes to This Privacy Policy

We may update this privacy policy from time to time. We will notify you of any significant changes by posting the new privacy policy on this page and updating the "Last updated" date. We encourage you to review this privacy policy periodically for any changes.

14. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information
• Right to opt-out of the sale of personal information (we do not sell your data)
• Right to non-discrimination for exercising your privacy rights

15. GDPR Rights (European Users)

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR), including:

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to lodge a complaint with a supervisory authority

16. Contact Us

If you have any questions, concerns, or requests regarding this privacy policy or our data practices, please contact us:

17. Consent

By using our service, you consent to the collection and use of information in accordance with this privacy policy. If you do not agree with this policy, please do not use our service.