Privacy Policy

We're committed to protecting your data. Here's exactly how we handle your information on our race photography platform.

Last updated: October 10, 2026

Introduction

At PacePics, protecting your privacy isn't just policy—it's a promise. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform where photographers share and athletes find race photos for the endurance community.

Information We Collect

Personal Information

We collect information you provide directly:

  • Name and email address
  • Profile info (username, bio, photo)
  • Bib numbers & race data
  • Billing name and address, for organizers who pay

Photos and AI Processing

Photographer uploads are processed by OpenAI's Vision API to detect bib numbers—helping athletes find themselves in seconds, not hours.

Published Photos Are Public

A published gallery is public, and photos of you may appear in one whether or not you hold a PacePics account. Anyone who reaches it can view and download them. The full rules, including the licence photographers grant us, are in the Terms of Service. Contact us to have a photo of you removed.

Usage Data

We automatically collect interaction data: pages visited, photos viewed, searches performed, and download history to improve your experience.

Third-Party Services

We partner with industry leaders to power our platform:

Supabase
Database & auth
OpenAI
Bib detection AI
Vercel
Global hosting
Resend
Email delivery
Stripe
Payment processing
Cloudflare & AWS
Photo storage & delivery

Payments

Organizers who publish an event over the free photo limit pay through Stripe, our payment processor and a sub-processor of your data. Card details are entered on Stripe's checkout page and never reach PacePics.

What we receive from Stripe

  • Your name, email and billing address
  • The amount, currency and tax charged
  • Card brand and last four digits, for receipts
  • A Stripe customer and payment reference

How long we keep it

Payment records are kept for seven years after the transaction to meet Canadian tax and accounting requirements, even if you delete your account. Stripe keeps its own records under Stripe's privacy policy.

Marketing Communications

Opt-in only. We only send marketing to users who explicitly consent. Unsubscribe anytime via email link or account settings. Transactional emails (sign-in links, payment receipts, gallery expiry warnings) are separate from marketing preferences.

How We Use Your Information

  • Provide and improve our services
  • Facilitate photo access and downloads
  • Power AI bib number detection
  • Process organizer payments and send receipts
  • Send technical notices & updates
  • Respond to your questions
  • Detect and prevent fraud

Information Sharing

We never sell your personal information

We may share information only in these cases:

  • With photographers: Your email for download notification when you request photos
  • With Stripe: Billing details needed to process an organizer payment
  • With service providers: Third-party vendors performing services for us
  • For legal reasons: When required by law or to protect rights and safety
  • With your consent: When you explicitly agree to share

Data Retention

Active
Personal data while account is active
6 months
Photos on free events from publishing (3 years on paid events), then deleted
7 Years
Activity logs for platform safety
On Request
Account deletion available anytime

When a gallery expires, we keep up to three small preview images on each photographer's public profile. Ask us to remove any of them.

Data Security

Data is encrypted in transit with TLS. Access to stored data is restricted by per-user permissions enforced at the database.

Published photos are the deliberate exception, and are not access-controlled. A gallery that is live is public, and the photos in it are served to anyone who reaches them. See the Terms of Service.

No method of Internet transmission is 100% secure. We implement industry best practices but cannot guarantee absolute security.

Your Rights

  • Access, update, or delete your data
  • Opt out of marketing emails
  • Request a data export
  • Request account deletion

Two limits apply to photos

Deleting your account does not remove photos you uploaded, or photos you appear in. They belong to the event gallery and stay there until its hosting period ends. Marketing material we had already published before a deletion request cannot be recalled. Contact us to have a specific photo taken down.

To exercise these rights, contact us via our contact page.

Cookies

Essential Cookies
Required for authentication and checkout
Analytics Cookies
Help us improve our services

You can control cookies through browser settings. Disabling essential cookies may limit certain features.

Children's Privacy

Our services are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy periodically. When we do, we update the "Last updated" date at the top of this page and show a notice to signed-in users in the app. Continued use after changes constitutes acceptance.

Contact Us

Questions about this Privacy Policy? We're here to help.

Contact Us

Also see our Terms of Service and FAQ