Privacy Policy

Photaf Panorama

1. Introduction

Bengigi Studio ("we", "our", or "us") operates the Photaf Panorama mobile application and website (collectively, the "Service"). This Privacy Policy explains what data we collect, why we collect it, and your rights regarding that data.

By using the Service, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Service.

2. Data We Collect

Data Type	What	Purpose
Google Profile	Name, email address, profile picture, Google user ID	Authenticate you, display your name on uploads
Panorama Images	Photos you upload	Gallery display, 360° viewing
GPS Coordinates	Latitude/longitude (optional, from app)	Geo-tag panoramas if you choose
Votes	Your upvotes/downvotes on panoramas	Community rating system
Device Info	App package name, version (from Android app)	Debugging, compatibility
IP Address	Your IP when using the website	Rate limiting, security

What we do NOT collect: We do not use analytics trackers, advertising SDKs, or third-party cookies on the Photaf website or gallery. We do not sell or share your data with third parties for advertising purposes.

3. Legal Basis for Processing (GDPR)

Consent: You explicitly consent to our Privacy Policy and Terms of Service before uploading panoramas.
Legitimate Interest: We process data necessary to operate and secure the Service (e.g., IP-based rate limiting).
Contract: Processing your uploads is necessary to provide the Service you requested.

4. How We Use Your Data

Authenticate you via Google Sign-In
Display your panoramas in the public gallery (if you choose to make them public)
Allow the community to vote on panoramas
Generate thumbnails of uploaded images
Enable admin moderation and DMCA takedowns
Enforce rate limits and prevent abuse

5. Image Metadata

When you upload an image, we automatically strip all EXIF metadata (including embedded GPS coordinates, camera information, and timestamps) from the stored file. GPS coordinates are only stored if explicitly provided by you through the app's upload form.

6. Data Sharing

We do not sell, rent, or share your personal data with third parties, except:

Public panoramas: Your name and panorama images are visible to all visitors when you set a panorama to "Public".
Google: Authentication uses Google Sign-In. Google's privacy policy applies to their authentication service.
Legal requirements: We may disclose data if required by law or to respond to valid legal processes.

7. Data Retention

Panoramas and account data are retained until you delete them or delete your account.
Server logs (including IP addresses) are retained for up to 30 days.
DMCA reports are retained for the duration required by applicable law.

8. Your Rights

All Users

Access: View all your data from your Account page.
Export: Download a copy of all your data as JSON from the Account page.
Delete: Delete individual panoramas or your entire account and all associated data from the Account page.
Visibility: Toggle any panorama between public and private at any time.

EU/UK Residents (GDPR)

Under the General Data Protection Regulation, you have additional rights including: the right to rectification, the right to restrict processing, the right to data portability, and the right to lodge a complaint with your local data protection authority.

California Residents (CCPA/CPRA)

Under the California Consumer Privacy Act and California Privacy Rights Act:

Right to Know: You may request details about the personal information we collect. See Section 2 above.
Right to Delete: You may request deletion of your personal information via the Account page.
Do Not Sell: We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising.
Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

9. Children's Privacy (COPPA)

The Service is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. Google Sign-In requires users to be at least 13 years old to create an account. If you believe a child under 13 has provided us with personal information, please contact us and we will promptly delete it.

10. Security

All data is transmitted over HTTPS/TLS encryption.
Authentication uses industry-standard Google OAuth 2.0 tokens.
Upload rate limiting prevents abuse.
EXIF metadata is stripped from all uploaded images.

While we take reasonable measures to protect your data, no method of electronic storage or transmission is 100% secure.

11. DMCA / Copyright

We respond to valid DMCA takedown notices. If you believe content on our Service infringes your copyright, please see our DMCA page for instructions on submitting a notice.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the Service. Your continued use after changes constitutes acceptance of the updated policy.

13. Contact Us

For privacy-related inquiries, data requests, or questions about this policy:

Email: support@bengigi.com
Website: www.bengigi.com

Last updated: March 30, 2026