Privacy Policy

1. Information we collect

• Account: the name you choose to show, your username, your password (stored encrypted, never readable by us), whether you're an athlete or a photographer, and optionally a phone number for text alerts. We don't require an email address.
• Photographer profiles: business name, city and state, headline, bio, years of experience, what you offer, the fields you cover, how far you travel, availability, packages and prices, portfolio photos, and a profile photo. This is public once you publish your profile. We store only your city's approximate location, never a home address.
• Identity verification (photographers, optional): if you ask to be verified, a photo of your government ID. It's stored privately, seen only by CleatCam staff, used only to confirm your name, and deleted after the check.
• Bookings: the player's name, team, position, jersey number and color, the game date, time and field, the package chosen, and group booking details (who joined and who paid).
• Photos: files photographers deliver to a booking, portfolio files, profile pictures, and photos added to a review.
• Payments: amounts, dates, payment and payout status, refunds, and Pro subscription status. Card and bank details are collected and stored by Stripe, our payment processor, not by CleatCam. We see only the last four digits and card brand.
• Messages and activity: the preset messages you send, booking requests and responses, reviews, reports and blocks, notifications, favorites and photo picks, and basic counts such as profile views and search appearances.
• Location (optional): if you tap "Use my location", your browser shares your approximate position with CleatCam once, to sort fields and photographers by distance. It's kept in a small cookie on your device for that purpose, isn't saved to your account, and isn't shared. Clear your cookies to remove it.
• Devices and technical data: if you turn on push alerts, a device token for sending them. Our hosting provider logs the IP address and browser type of requests for security and to keep the site running, and keeps those logs for a short time. We use cookies only to keep you signed in and (if you chose it) for your location. We don't use advertising or tracking cookies. We count page visits anonymously, without cookies. If something breaks, an error report (the page and the technical error, without your name or username) is sent to us so we can fix it.

2. How we use it

• To run bookings, payments, escrow holds, refunds, payouts and Photo Drop deliveries.
• To match athletes with photographers: showing which photographers cover a field, their distance, and their availability.
• To send alerts (booking requests, acceptances, payment reminders, game-day reminders, delivered photos) by push, text or email, based on your settings.
• To keep CleatCam safe: reviewing reports, checking delivered photos, verifying photographer identities, and preventing fraud, abuse and payments outside CleatCam.
• To show photographers' public profiles, reviews, ratings and response times.
• To answer your questions, fix problems and improve CleatCam.
• To comply with the law, for example tax reporting by our payment processor.

We don't use your information for advertising, and we don't build profiles of you for anyone else.

3. Who can see your information

• Your photographer sees the game details you enter (player, team, jersey, field, date and time) and your display name. Athletes see a photographer's public profile, reviews and response time. Phone numbers are never shown to other users; we use them only for alerts and safety. Usernames are used for logging in and may be shown on profiles.
• Delivered photos are private. Only the booking's athlete (and, for group shoots, the teammates who paid, for the team photos and their own) and the photographer can see them, unless you create a share link.
• Service providers process data for us under contract and may only use it to provide their service: Supabase (database and file storage), Cloudflare (file storage), Vercel (hosting and anonymous visit counts), Stripe (payments, payouts and identity checks required by financial rules), and Sentry (error reports). If we add email or text alerts, the providers that send them will be listed here.
• Leagues, venues and law enforcement: we may share information when we believe it's needed to protect the safety of a child or anyone else, to investigate a report, or when the law requires it (for example, a court order).
• A new owner: if CleatCam is sold or merged, your information may transfer to the new owner under this policy. We'll tell you if that happens.

We don't sell or rent personal information, and we don't share it with advertisers or data brokers.

4. Children

CleatCam accounts are for adults: athletes 18 and older, and parents or guardians booking for younger athletes. We don't knowingly let children under 13 create accounts or collect information directly from them. A child's name, team, jersey number and game photos are provided by their parent or guardian as part of a booking, and are shown only to the photographer they booked. Parents and guardians can review, change or delete their child's information at any time (see section 7). If you believe a child under 13 created an account, or that a photographer is misusing a child's photos, contact us and we'll act right away.

5. How long we keep it

• Account and profile information: while your account is open. When you delete your account, your profile, portfolio, messages, favorites and notifications are deleted within 30 days.
• Booking and payment records: as long as needed for accounting, taxes, refunds and disputes, usually up to 7 years, in a form that no longer shows your profile.
• Delivered photos: 90 days after the photographer's last upload to that folder (we remind you a week before), then they're deleted.
• ID photos: deleted after the verification check, usually within 7 days.
• Reports and safety records: kept as long as needed to protect users, including after an account is closed.
• Hosting logs and error reports: a short time, typically under 90 days.

6. Security

Connections to CleatCam are encrypted. Passwords are stored as one-way hashes. Delivered photos and ID photos are stored privately and only shown after a permission check, and database rules limit who can read each record. Payment details never touch our servers. No system is perfectly secure; if we learn of a breach that affects you, we'll notify you as the law requires.

7. Your choices and rights

• Change your display name, alert settings and phone number at any time in Settings.
• Turn push alerts off from Settings or your device, and remove your location cookie by clearing cookies.
• Ask us for a copy of your information, to correct it, or to delete your account (also available in Settings). We'll respond within 30 days. Some records are kept where the law requires it (section 5).
• Block anyone from their profile or booking, so they can't message or book you.
• Photographers can unpublish their profile at any time; it's then hidden from search and from other users.
• If you're in a state with a privacy law that gives you extra rights (for example, Texas, California, Virginia or Colorado), you can use them by contacting us. We don't sell personal information or use it for targeted advertising, and we won't treat you differently for using your rights.

8. Where your information is stored

CleatCam is operated from Texas, and your information is stored on servers in the United States. If you use CleatCam from outside the US, your information is transferred to and processed in the US.

9. Changes and contact

If we change this policy, we'll post the new version here and update the date above, and we'll tell you in the app about important changes. For privacy questions or requests, use the Report button on any profile or booking.