State Privacy Law Disclosure

This notice is for residents of US states with state privacy laws. It describes the categories of personal information FotoFlow may collect and the purposes for using that information.

FotoFlow Technologies operates FotoFlow from New York, USA.

• Identifiers and account data are used for sign-in, profile, security, support, and communications.
• Content and interaction data are used for pins, boards, search, recommendations, messaging, reporting, and moderation.
• Device, log, and network data are used for security, debugging, rate limiting, analytics, fraud prevention, and service operation.
• Commercial, catalog, campaign, billing, and conversion data are used for business tools, ads, invoices, reporting, and fraud checks.
• Inferences from saves, likes, searches, boards, and clicks are used to personalize recommendations and, when active, ads.

Depending on where you live, you may have rights to know, access, correct, delete, export, restrict, appeal, or opt out of certain processing.

• To submit a request, contact privacy@fotoflow.xyz with the email used for your FotoFlow account.
• Only FotoFlow activity is used for ad personalization. FotoFlow does not use off-site tracking for ad targeting. To request an opt-out where applicable, contact privacy@fotoflow.xyz until a self-service control is added.
• FotoFlow will not discriminate against you for exercising privacy rights, but some features may need certain data to work.

FotoFlow does not intentionally require sensitive personal information for ordinary user accounts. Users should not upload private documents, government IDs, payment card images, health records, or other sensitive content into public pins or messages.

Users can request account deletion at any time. Deleted account data is removed within 30 days, except where retention is required by law. Some records may be retained longer for safety, fraud, billing, dispute, backup, or legal reasons.

Send privacy requests or appeals to privacy@fotoflow.xyz. FotoFlow should verify requests before disclosing, correcting, or deleting account data.