Privacy Policy

Your privacy is our priority. Learn how we handle your data.

Effective Date: January 1, 2025

Last Updated: January 1, 2025

1. Introduction

Glosaro ("we", "our", "the Service") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, share and protect your personal information when you use our location sharing services.

Glosaro operates under the laws of the Commonwealth of Puerto Rico and the United States of America, and complies with the standards of the European Union's General Data Protection Regulation (GDPR) as a minimum standard of protection.

2. Information We Collect

2.1 Location Information

  • GPS coordinates: Latitude and longitude for location code generation
  • Location accuracy: Precision level of your device's GPS
  • Timestamp: When location was captured
  • Device location permissions: Browser or device location access status

2.2 Account Information (Optional)

  • Email address: For account creation and authentication
  • Username: Public identifier within the platform
  • Password: Securely hashed and encrypted
  • Profile settings: Preferences and customizations

2.3 Technical Information

  • Device information: Browser type, operating system, device model
  • IP address: For security and fraud prevention
  • Cookies and session data: For authentication and preferences
  • Usage analytics: Pages visited, features used, interaction patterns

2.4 Payment Information (Pro & Gen)

  • Billing information: Name, address, payment method
  • Transaction data: Purchase history and invoices
  • Note: Credit card data is processed by certified third-party payment processors (Stripe, PayPal)

3. How We Use Your Information

3.1 Core Service Provision

  • Generate and manage location codes
  • Display shared locations on maps
  • Provide navigation integration
  • Manage code expiration (30 minutes)
  • Maintain your account and preferences

3.2 Service Improvement

  • Analyze usage patterns to improve features
  • Develop new functionalities
  • Fix bugs and optimize performance
  • Generate anonymized statistics

3.3 Security and Compliance

  • Prevent fraud and abuse
  • Verify user identity
  • Enforce terms of service
  • Comply with legal obligations

4. Data Sharing and Disclosure

4.1 Who Can See Your Location

Only people with your location code can see your location. We do not share your location publicly or with third parties for marketing purposes.

  • Location codes are randomly generated and virtually impossible to guess
  • Codes expire after 30 minutes automatically
  • You control who receives your code

4.2 Service Providers

We may share data with trusted third-party service providers who help us operate:

  • Hosting providers: For infrastructure and storage
  • Payment processors: Stripe, PayPal for Pro/Gen subscriptions
  • Analytics services: For usage statistics and improvements
  • Email services: For transactional emails and notifications

4.3 Legal Requirements

We may disclose information when required by law, legal process, or government request, or when necessary to protect our rights, property, or safety.

5. Data Retention

  • Location codes: Deleted automatically after 30 minutes
  • Account data: Retained while your account is active
  • Inactive accounts: Deleted after 3 years of inactivity
  • Transaction records: Retained for 7 years for accounting/legal purposes
  • Analytics data: Aggregated and anonymized, retained indefinitely

6. Your Rights and Choices

6.1 Under GDPR (EU Residents)

  • Access: Request copies of your personal data
  • Rectification: Correct inaccurate data
  • Erasure: Request deletion ("right to be forgotten")
  • Restriction: Limit processing of your data
  • Portability: Receive your data in structured format
  • Objection: Object to certain processing activities

6.2 General Privacy Controls

  • Account settings: Update or delete your account anytime
  • Cookie preferences: Manage cookies in browser settings
  • Marketing communications: Opt out of promotional emails
  • Location permissions: Revoke browser/device location access

7. Security

We implement industry-standard security measures to protect your data:

  • 256-bit SSL/TLS encryption: All data encrypted in transit
  • Password hashing: Passwords stored with bcrypt
  • Secure servers: Regular security audits and updates
  • Access controls: Limited employee access to personal data
  • Monitoring: 24/7 security monitoring and threat detection

While we strive to protect your data, no Internet transmission is 100% secure. We cannot guarantee absolute security.

8. Cookies and Tracking

We use cookies and similar technologies for:

  • Essential cookies: Authentication, security, preferences
  • Analytics cookies: Understanding usage patterns
  • Performance cookies: Optimizing load times and functionality

You can manage cookie preferences in your browser settings. Disabling cookies may affect service functionality.

9. Children's Privacy

Glosaro is not intended for users under 13 years of age.

We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us immediately and we will delete it.

10. International Data Transfers

Glosaro operates from Puerto Rico, United States. If you access our service from outside the U.S., your data may be transferred to and processed in the United States.

For EU users, we implement Standard Contractual Clauses (SCCs) and maintain GDPR compliance for international transfers.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

  • Posting a notice on our website
  • Sending an email to registered users
  • Updating the "Last Updated" date at the top

Your continued use of Glosaro after changes take effect constitutes acceptance of the updated policy.

12. Contact Us

For questions about this Privacy Policy or to exercise your privacy rights, contact us:

Email: privacy@glosaro.com

Support: Visit Support Center

Response time: Within 30 days (GDPR compliance)