Click Circle – Privacy Policy

2. How We Use Your Information

We use your information to:

• Provide and maintain the Click Circle service
• Create smart albums using facial recognition
• Enable photo sharing functionality
• Communicate with you about your account
• Ensure security and prevent abuse

We do NOT share your photos, face data, or personal information with third parties for their own purposes.

3. AWS Integration and Data Processing

• AWS S3 Storage:
  • All photos are securely stored in AWS S3 buckets
  • Data is encrypted in transit and at rest
  • Access is restricted to authorized service operations only
• AWS Rekognition:
  • Used solely for face detection and recognition features
  • Processes images to generate face IDs for grouping
  • Does not store biometric templates or raw facial data
  • Face IDs are pseudonymized identifiers only

Important: AWS services operate under their own privacy policies and security standards. We have configured these services to minimize data exposure and maintain your privacy.

4. Data Sharing and Disclosure

We do not sell or rent your personal information. We may share information only in these limited circumstances:

• With your explicit consent: When you share catalogs via links
• Service providers: AWS for hosting and AI processing under strict agreements
• Legal requirements: When required by law or to protect rights and safety
• Business transfers: In the event of a merger or acquisition (with notice)

Shared Catalogs: When you share a catalog link, recipients can view and download those specific photos. This is intentional functionality you control.

5. Your Privacy Rights

You have the right to:

• Access: Request a copy of your personal data
• Correct: Update or correct inaccurate information
• Delete: Request deletion of your account and associated data
• Port: Export your photos and data
• Object: Opt out of certain processing activities
• Restrict: Limit how we process your information

To exercise these rights, contact us at privacy@clickcircle.com. We will respond within 30 days.

6. Data Security

We implement multiple security measures:

• End-to-end encryption for data in transit
• Encryption at rest for stored photos and data
• Regular security audits and updates
• Access controls and authentication requirements
• Secure AWS infrastructure with industry-standard protections

While we strive to protect your information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

7. Data Retention

• Active accounts: Data retained while your account is active
• Inactive accounts: Data may be deleted after 2 years of inactivity
• Account deletion: All data deleted within 30 days of account closure
• Face recognition data: Deleted immediately when photos are removed
• Legal holds: Some data may be retained longer if required by law

8. International Data Transfers

Your information may be processed in countries other than your own. We ensure adequate protection through:

• AWS's global compliance and security standards
• Adherence to international data protection frameworks
• Contractual protections for cross-border data transfers