Privacy Policy

1. Who We Are

Legal Entity: tonywithasony LLC

Product: CoFoDo

Address: 261 7th Ave, San Francisco, CA 94118, USA

Contact: support@cofodo.com

2. Scope

This Policy applies to photographers, invited clients, and public gallery visitors worldwide.

3. Data We Collect

• Account data, such as email, name, username, role, and profile details.
• Gallery and photo data, including uploaded photos, metadata, favorites, and ratings.
• Usage and technical data, such as IP address, device/browser data, cookies, and logs.
• Billing data needed to manage subscriptions and payment status.
• Email delivery and authentication event data.

4. How We Use Data

• Provide and operate the platform, including gallery hosting and sharing.
• Authenticate users and secure accounts.
• Process subscriptions, billing, and account management.
• Analyze product performance and improve service quality.
• Detect, investigate, and prevent fraud, abuse, and illegal activity.
• Comply with legal obligations.

5. Content Safety and Legal Compliance

You must have all rights needed to upload and share content. We may review, process, monitor, and remove content where needed to enforce our policies and comply with law, including reporting suspected child sexual abuse material and other illegal content to appropriate authorities.

6. Legal Bases (GDPR)

When GDPR applies, we process personal data based on one or more of:

• Performance of a contract.
• Legitimate interests (for security, operations, and service improvement).
• Consent (where required).
• Legal obligations.

7. Third-Party Processors

We use service providers to run CoFoDo, including:

• Supabase (database and authentication)
• Resend (transactional email)
• Backblaze B2 (file storage)
• ImageKit (image delivery/transformation)
• Stripe (payments and subscriptions)
• PostHog (analytics and product telemetry)

8. International Transfers

Because users may be located globally, data may be transferred to and processed in countries other than your own, including the United States.

9. Data Retention

• We keep personal data while your account is active and as needed to provide services.
• We retain logs and operational records for security, auditing, and legal compliance.
• We may retain limited data after deletion where required by law or to resolve disputes.

10. Your Privacy Rights

Depending on your location (including GDPR/CCPA regions), you may have rights to:

• Access, correct, or delete your personal data.
• Request data portability.
• Restrict or object to certain processing.
• Withdraw consent where processing is based on consent.
• Appeal or complain to a data protection authority.

To make a request, contact support@cofodo.com.

11. Children

CoFoDo is not intended for children under 13. We do not knowingly collect personal data from children under 13.

12. Security

We use reasonable technical and organizational safeguards, but no system is perfectly secure and we cannot guarantee absolute security.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes by email and update the Effective Date above.