Privacy Policy

Welcome to Autographs 101 ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website (collectively, the "Platform").

When you create an account, we collect your email address, display name, and profile information you choose to provide (such as bio, avatar, and location).

We collect content you post on the Platform, including photos, videos, audio recordings, comments, showcase entries, and messages you send to other users.

Microphone access is requested when you start a voice recording. You can listen to or discard the local draft before sending. Voice audio is uploaded when you choose Send message.

We automatically collect information about how you interact with the Platform, including pages visited, features used, and time spent on the Platform.

If you subscribe to a paid membership, payment processing is handled securely by Stripe. We do not store your full credit card details on our servers.

To provide and maintain our Platform

To process your account registration and membership

To facilitate communication between users

To send you updates, notifications, and marketing communications (with your consent)

To improve our Platform and develop new features

To detect and prevent fraud or abuse

To comply with legal obligations

We do not sell your personal information. We may share your information in the following circumstances:

With other users: Your profile information (except email) and public posts are visible to other Platform users

Service providers: We use third-party services for hosting, analytics, and payment processing

Legal requirements: When required by law or to protect our rights

Business transfers: In connection with a merger, acquisition, or sale of assets

Pre-Screen photos and AI processing

When you consent to run a Pre-Screen, your selected photo and the signer name you provide are sent to Lovable's AI gateway and Google Gemini to generate preliminary pattern observations. A private photo is not published to other collectors, but these processors receive it for analysis. Do not include identity documents, contact details or other sensitive material in your photo. Provider processing and retention terms apply separately from storage in your Vault.

New guest photos are stored privately and use time-limited access for analysis. Unclaimed guest photos are scheduled for removal after seven days. Publishing creates a separate public copy only after your explicit action. Account-claimed photos stay with your collection until removed. An email address or abuse-prevention record can have a separate retention period.

ChatGPT public-content integration

Our optional ChatGPT integration can receive collecting-topic search queries and requests for public article or public showcase links. It returns only published articles and showcase records that their creators chose to make public. The integration does not currently sign users in, access private Vault records, read messages, upload photos, run Pre-Screen scans, process payments or place trades.

ChatGPT handles the conversation in its own service. When you use the integration, relevant search terms and requested public content identifiers are sent to our Supabase-hosted read-only service, and ordinary hosting, security and diagnostic logs may be created under the applicable provider policies. Do not include sensitive personal information in collecting searches. You can use the Autographs 101 public collecting guides without connecting a personal account. Public showcase creators can withdraw public visibility using the platform's applicable publishing controls.

Account deletion and retained records

Request account deletion in Settings after a recent sign-in. The confirmation includes cancellation of linked Stripe subscriptions without an automatic refund. Deletion is processed as a request; queued or failed cleanup is not presented as complete. Keep the receipt to check its status. Stored photos, owned account content and processor cleanup are checked before completion. Transaction, safety and legally required records may be retained with account identifiers removed where possible. Minimal deletion receipts are retained to prevent retries from restoring deleted data. Contact privacy@autographs101.app for a review of retained information or older guest uploads.

We implement industry-standard security measures to protect your data, including encryption in transit and at rest, row-level security policies, and regular security audits. However, no method of transmission over the Internet is 100% secure.

Depending on your location, you may have the following rights:

Access and receive a copy of your personal data

Correct inaccurate personal data

Request deletion of your personal data

Object to or restrict processing of your data

We use cookies and similar technologies to maintain your session, remember your preferences, and analyze Platform usage. You can control cookie settings through your browser.

Our Platform is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

If you have questions about this Privacy Policy or your personal data, please contact us: