Privacy Policy

Go Fan Cam (“we”, “us”, or “our”) provides a self-serve fan cam capture, moderation, and display platform for sports and live events. Our registered office is in England and Wales.

For the purposes of data protection law:

• Client data: Go Fan Cam acts as the Data Controller for client account data, billing data, and marketing site analytics.
• Fan data: Go Fan Cam acts as the Data Processor on behalf of our clients (who are the Data Controllers) for fan photos, consent records, and session data collected during events.

Our named privacy contact is: Data Protection Officer, Go Fan Cam — privacy@gofancam.com.

We collect and process the following categories of personal data:

• Consent (Article 6(1)(a) GDPR) — Fan photos are processed on the basis of explicit, informed consent obtained before each photo is captured. Consent can be withdrawn at any time.
• Contract (Article 6(1)(b) GDPR) — Client account and billing data is processed as necessary for the performance of our subscription contract.
• Legitimate interest (Article 6(1)(f) GDPR) — Anonymous usage analytics and platform security logging. Our legitimate interest does not override data subject rights.
• Legal obligation (Article 6(1)(c) GDPR) — Billing records retained for tax and accounting compliance.

We share personal data with the following sub-processors, each operating under a data processing agreement:

• Supabase Inc. (San Francisco, USA) — Database storage, file storage, and authentication. Privacy Policy.
• Vercel Inc. (San Francisco, USA) — Application hosting, edge delivery, and serverless functions. Privacy Policy.
• Stripe Inc. (San Francisco, USA) — Payment processing for client billing. Stripe processes billing data only; Stripe does not access fan photos. Privacy Policy.
• Resend Inc. (San Francisco, USA) — Transactional email delivery for account notifications. Privacy Policy.

Our sub-processors are based in the United States. Where personal data is transferred outside the EEA/UK, we rely on:

• Standard Contractual Clauses (SCCs) as adopted by the European Commission
• UK International Data Transfer Agreement (IDTA) where applicable
• Sub-processor certification under relevant frameworks (e.g. SOC 2 Type II)

Copies of the relevant transfer mechanisms are available on request by contacting privacy@gofancam.com.

Under GDPR, you have the following rights in relation to your personal data:

• Right of access — Request a copy of the personal data we hold about you
• Right to rectification — Request correction of inaccurate or incomplete data
• Right to erasure — Request deletion of your personal data (“right to be forgotten”)
• Right to data portability — Request a machine-readable copy of your data
• Right to object — Object to processing based on legitimate interest
• Right to restrict processing — Request that we limit how we use your data
• Right to withdraw consent — Withdraw consent at any time where processing is based on consent

To exercise any of these rights, contact us at privacy@gofancam.com. We will respond within 30 days.

Supervisory authority: If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) in the UK: ico.org.uk/make-a-complaint.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know — What personal information we collect, use, and share
• Right to delete — Request deletion of your personal information
• Right to non-discrimination — We will not discriminate against you for exercising your CCPA rights

We do not sell personal information. Go Fan Cam does not sell, rent, or trade the personal information of any user, fan, or client to third parties for monetary or other valuable consideration.

Go Fan Cam is committed to complying with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). Australian users have the right to access and correct their personal information, and to make a complaint about our handling of personal information to the Office of the Australian Information Commissioner (OAIC): oaic.gov.au.

For full details on how we use cookies, see our Cookie Policy. The fan-facing camera app uses only essential session cookies for authentication and deduplication. No third-party advertising or tracking cookies are used on fan-facing pages.

Go Fan Cam is not directed at children under 13. Our platform includes configurable minimum age controls. Clients running youth events are responsible for obtaining verifiable parental consent for participants under 13 in accordance with COPPA and equivalent regulations. See our Terms of Service for full COPPA provisions.

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. Material changes will be communicated to active clients via email.

• Privacy enquiries: privacy@gofancam.com
• General enquiries: hello@gofancam.com
• Legal / GDPR queries: privacy@gofancam.com