Privacy Policy

1. Information we collect

We collect the following categories of information:

• Account information. When you create an account, we collect your email address and authentication details through our identity provider (Firebase Authentication).
• Activity data. The GPX files you upload and the activity data you import from connected services — including routes, coordinates, timestamps, distance, elevation, heart rate, and similar metrics — used to render your poster.
• Connected accounts. If you connect Strava or another third-party service, we receive the data and access tokens you authorize so we can import your activities.
• Purchase information. When you buy a download, our payment processor (Stripe) handles your payment. We receive confirmation of the transaction but do not store your full payment card number.
• Usage & device data. Basic technical information such as browser type, device, and interactions with the Service, collected to operate, secure, and improve it.

2. How we use information

We use the information we collect to:

• Provide, operate, and maintain the Service;
• Render your routes and generate the posters you create;
• Process payments and deliver your downloads;
• Communicate with you about your account, orders, and support requests;
• Secure the Service and prevent fraud or abuse;
• Comply with legal obligations.

3. How we share information

We do not sell your personal information. We share information only with service providers who help us operate the Service and only as needed, including:

• Firebase (Google) — authentication and data storage;
• Stripe — payment processing;
• Mapbox — rendering map backgrounds for your posters;
• Strava and other services you choose to connect.

We may also disclose information if required by law, to enforce our terms, or to protect the rights, safety, and property of Topo Art, our users, or others. If we are involved in a merger or acquisition, information may be transferred as part of that transaction.

4. Third-party services

When you connect Strava or another third-party service, that service’s own privacy policy governs the data held on their side. We access only the data you authorize and use it solely to provide the Service. You can disconnect a service at any time, and you can also revoke access from within that service’s own settings.

5. Data retention

We retain your account and activity data for as long as your account is active or as needed to provide the Service. You may delete your drafts and activities, and you may request deletion of your account and associated data by contacting us. We may retain limited information where required for legal, accounting, or security purposes.

6. Your rights & choices

Depending on where you live, you may have the right to access, correct, delete, or export your personal information, or to object to or restrict certain processing. To exercise these rights, contact us at the address below. You can also disconnect third-party services and delete your content directly within the Service.

7. Security

We use reasonable technical and organizational measures to protect your information. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. Please keep your account credentials confidential.

8. Children’s privacy

The Service is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

9. International users

We operate from the United States, and your information may be processed and stored there or in other countries where our service providers operate. By using the Service, you understand that your information may be transferred to jurisdictions with different data protection laws than your own.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, provide additional notice. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.

11. Contact us

Questions about this Privacy Policy or your data? Reach us at strootbiz23@gmail.com.