Privacy Policy

This Privacy Policy explains how Latent Software LLC, a Wyoming limited liability company, 30 N Gould St, Ste N, Sheridan, WY 82801, USA ("we", "us" or "our"), handles personal data in SoupFestivals, including the website at soupfestivals.com, our mobile apps where available, the emails we send and the related services (together, the "Service").

This Privacy Policy is information that we owe you. It is not a contract. When you acknowledge it at signup, you confirm that we showed it to you; we do not treat that acknowledgment as consent to anything. It does not create a warranty, or any obligation or liability beyond those of the Terms of Service and the law.

In short: SoupFestivals is a free guide to soup festivals and related food, places and events. You can browse without an account. If you subscribe to alerts, we keep your email address. If you open an account, we keep your account details and security records, and anything you choose to show on a public profile. We do not use analytics or advertising trackers, we do not enrol you in promotional mailing lists, and we do not sell your personal data or share it for cross-context behavioral advertising.

Your right to object: Where we process personal data on legitimate interests under the GDPR, you may object on grounds relating to your particular situation by writing to [email protected]. We then stop that processing unless we demonstrate compelling legitimate grounds overriding your interests, rights and freedoms, or the processing is needed to establish, exercise or defend legal claims.

---

1. Who we are and how to contact us

Latent Software LLC runs the Service and is the controller of the personal data described here: we decide why and how it is processed.

You can reach us about privacy at [email protected], or by post at Latent Software LLC, 30 N Gould St, Ste N, Sheridan, WY 82801, USA. Anyone can use that address for a privacy question or request, wherever they live, including in the European Economic Area, the United Kingdom, Switzerland and Brazil (Section 14.3).

---

2. Whose data this policy covers

• Visitors, who use the Service without an account.
• Email-alert subscribers, who asked us to email them about new festivals.
• Account holders, including people who sign in with Google.
• Organizers and businesses, meaning people who act for an organization or business that is listed on the Service, claims a listing, or manages a profile or page on it.
• People we receive information about from others, such as people named in public information about a festival, or people invited to join an organization (Section 3.7).

This policy does not cover the websites and services of others that we link to (Section 16).

---

3. What we collect

3.1 Visitors (everyone)

Data	Details
Technical and usage data	Your IP address, browser and device information, the pages you request and the time. We need this to deliver the Service and keep it secure, and we keep it for a limited time.
Session data	Your language and, if you use "near me", the precise location from your device, which we use for up to 24 hours (Section 7). See Cookies and Local Storage.
Security data	Information that our security and network providers process to protect the Service against attacks, abuse and bots.
Map requests	When a map loads in your browser, your browser contacts a map provider directly. It receives your IP address and the map area requested.

We do not use analytics, advertising or cross-site tracking tools.

3.2 Email-alert subscribers

You do not need an account to subscribe to alerts. When you subscribe, we keep your email address, the country you chose, your language and, if you give one, a place; the record that you confirmed your subscription and when; and a record of the alerts we send you.

To subscribe, you tick a required box confirming that you are at least 18, that you agree to the Terms of Service and that you acknowledge this Privacy Policy. Then you select "Confirm my alerts and accept the Terms" in our confirmation email. Confirming is your request for the alerts and establishes that the person who controls the address accepted the Terms. A request and a confirmation are distinct events, and we record each of them: for every request and every confirmation, we keep with the subscription the versions of the Terms, the Acceptable Use and Community Rules and this Policy, the time, and technical data (your IP address and browser). We add each new event to that history and do not overwrite earlier ones. That history is an agreement record (Sections 4 and 11). When you unsubscribe, alerts stop, and the subscription and its history remain as Section 11 explains.

3.3 Account holders

Data	Details
Account details	Email address; password (we never store it in readable form); account kind (person or organization); language preference.
Sign-in and security records	When and from where you signed up and sign in: IP address, browser and device information, and an approximate location (country, region and city); how you signed up; your signed-in sessions; sign-ins, failed sign-ins, sign-outs and ended sessions. A failed sign-in is recorded with the email address that was typed, even if it belongs to no account.
Agreement records	Which versions of the Terms of Service, the Acceptable Use and Community Rules and this Privacy Policy we showed you, the wording you agreed to, when, the account it belongs to, and the IP address, browser information and approximate location of that request; the copy of those documents that we email you after you sign up; and, if you withdraw from the contract, the date and time of your withdrawal and our acknowledgement. You can view your own records in the app.
Profile (only if you set it up)	Username, display name, home town, a one-line bio and a photo. We remove embedded information, such as location, from the versions of photos that we display. We receive the original file you upload and may keep it, with its embedded information, including location. The notice next to the photo upload tells you this: remove anything you don't want us to have before uploading.
Soup passport	The editions you mark "I'm going" or "I was there", and badges associated with your marks or eligible contributions. Attendance marks are self-reported; we do not check them.
Your contributions	What you send or post: festival tips (name, place, dates, a link and your text), requests to claim a listing and what you tell us about your connection to it, and, if you use features such as reviews, ratings, comments, questions, lists or messages, what you write there.
Messages to us	Your email address and what you send.

We use your sign-in and security records to show you "Sessions & devices" in Settings, to email you about a sign-in from a new device or about repeated failed sign-ins, and to protect your account and the Service.

3.4 Sign in with Google

If you choose "Continue with Google", Google shares with us your Google account identifier, your email address, your name, the address of your Google profile photo, and whether Google has verified your email address. We use them to sign you in. We also suggest your name as your display name, and use your Google photo only if you choose to. Nothing from Google is published unless you save it in your profile. We do not keep ongoing access to your Google account.

3.5 Organizers, organizations and businesses

Festivals and events are organized by many kinds of people and bodies: municipalities and parish councils, festival commissions, parishes and religious bodies, associations, charities, clubs, schools, Scouts and Guides groups and other youth organizations, businesses and individuals. Restaurants, venues, producers, shops and other businesses may also be listed.

If you act for one of them, for example through an organization account, by claiming a listing, or by managing a business profile or page if you use such features, we hold your account details, the organization's name, its memberships and invitations, your claim and our decision, and what you send or publish for it. Information about an organization, a business or a public event is generally not personal data, except where it names or identifies a person.

If you add information about other people (for example, staff, volunteers, members or participants), you must have the right to share it and must have told them, and you are responsible for any consent the law requires. If your organization or event involves children or young people, such as a Scouts group, a school or a youth club, your organization alone is responsible for safeguarding and for the consent of parents or guardians. Do not post images or personal data of minors on the Service (see Acceptable Use and Community Rules).

3.6 Tips and claims

When you send a tip or a claim, we review it and may contact you about it. If we publish information from your tip, we keep a record of the tip and who sent it with that listing, so we know where the information came from. If we approve a claim, your public profile, if you have one, shows the festival you organize. Approval is not legal verification of who runs a festival, and we can withdraw it.

3.7 Information we receive about you from others

People named in public festival information. Listings are based on publicly available information and on information people send us. That information may name or show people, such as organizers, contact persons, performers or the people or accounts that announced an event. The categories of data are: names and public account or page names, roles (for example, "organizer"), contact details published for the event, and images that appear in event materials such as posters. The source of this data is publicly available information and information that people send us. Some of it may appear in a published listing. Where Article 14 GDPR applies, we provide the required information within a reasonable period and no later than one month after obtaining the data, or earlier where required at first communication or disclosure. An exception to individual notification applies only where its legal conditions are met. Public availability alone is not an exception. Where individual notification is impossible or would involve disproportionate effort, we apply Article 14(5)(b) only with the safeguards it requires, including making the required information publicly available. If you are named and want us to correct or remove something, or you object, write to [email protected]. See also Copyright, Takedowns and Removals.

Invitations. If a member of an organization invites you to join it, we receive your email address from that member. An invitation expires after 7 days.

Organizers and businesses. If an organizer or business adds information about you to its listing or profile (Section 3.5), we receive it from them.

---

4. How we use data, and our legal bases

Where the GDPR, the UK GDPR or a similar law applies, these are our purposes and legal bases.

Purpose	Data	Legal basis
Provide your account, the soup passport, your profile, tips and claims, and, if you use them, features such as reviews, ratings, comments, questions, lists, messages, and business profiles or pages	Account details, profile, passport, contributions, organizations	Contract (Art. 6(1)(b) GDPR)
Show your public profile and your name on guest lists	Public profile and passport (Section 6)	Contract, insofar as publication is objectively necessary to provide the public-profile and guest-list features you expressly request. Publication is separate from keeping a private profile or passport
Send email alerts about new festivals	Subscriber data	Contract (Art. 6(1)(b)): sending the alerts you asked for under the Terms you accepted for them. You can stop them at any time by unsubscribing
Maintain subscription status and records needed to honour unsubscribe requests and establish what communications were requested	Subscriber details, status and delivery records	Legitimate interests in respecting communication preferences and establishing, exercising or defending legal claims
Show nearby results, distances, directions relative to places and location-related map displays ("near me", Section 7)	The precise location from your device	Consent, given when you choose "near me" and allow your browser to share your location. To stop further location collection, revoke location permission for SoupFestivals in your browser or device settings. Clearing your saved location removes the current saved position but does not revoke that permission. If permission remains enabled, opening "near me" may obtain a new position without another browser prompt
Send account, security and service emails, including the copy of the documents you accepted and the acknowledgement of a withdrawal (Section 8)	Account details, subscriber data, sign-in and security records, agreement records	Contract; legal obligation where consumer law requires confirmation on a durable medium; legitimate interests (Art. 6(1)(f)) in running a secure service
Keep the Service and accounts secure; prevent and investigate fraud, abuse and spam; enforce our rules	Technical and usage data, security data, sign-in and security records	Legitimate interests in security and in preventing fraud and abuse
Keep proof of your acceptance of the Terms and the Acceptable Use and Community Rules and of the version of this Policy shown to you, at sign-up, and of each request and confirmation of an email alert	Agreement records (Sections 3.2 and 3.3)	Legitimate interests in proving what was agreed and in establishing, exercising or defending legal claims; contract, as part of entering into and performing the agreement
Keep records of our dealings with you	Messages and requests	Legitimate interests in keeping records and in establishing, exercising or defending legal claims
Maintain and improve the Service, including fixing errors and developing features	Technical and usage data, account data, contributions	Legitimate interests in running and improving the Service
Publish and keep accurate listings of festivals, restaurants and other businesses and places, and recipes, articles, guides and other editorial content, including names of people that appear in public information	Public information (Section 3.7), tips	Legitimate interests in informing the public about public events, food and places
Keep a record of where a published listing's information came from	Tip and its sender	Legitimate interests in the accuracy and integrity of our listings
Run organization accounts and invitations	Organization data, invitee email	Contract with the organization's members; legitimate interests in letting organizations invite people
Answer your messages and requests	Messages and the data they concern	Contract; legitimate interests; legal obligation where a request is a legal right
Comply with the law and answer lawful requests	The data that the obligation or request concerns	Legal obligation under the data-protection law applicable to the processing: for EU GDPR Article 6(1)(c), an obligation grounded in EU or Member State law; for UK GDPR, a qualifying obligation under UK law; and, for other jurisdictions, the corresponding applicable basis. Other foreign demands require a separate lawful basis and any applicable disclosure or transfer safeguards
Protect our rights and handle disputes	The data the dispute concerns	Legitimate interests in establishing, exercising or defending legal claims

Where we rely on legitimate interests, we have weighed them against your rights and freedoms, and you can object ("Your right to object", above, and Section 14).

Sensitive data. Do not submit sensitive personal data in general-purpose fields, such as information about health, religion or political opinions, about yourself or others in a profile, a tip, a review or a message. We do not infer sensitive characteristics from attendance, profiles or contributions. Where processing nevertheless involves special-category data under the GDPR, both an Article 6 basis and an applicable Article 9 condition are required. Where the LGPD applies, sensitive-data processing requires a basis under Article 11; public availability alone is not such a basis. We restrict or remove sensitive data where no applicable condition permits its processing.

Brazil (LGPD). The equivalent bases under the Lei Geral de Proteção de Dados (Article 7) are: performance of a contract (execução de contrato), legitimate interest (legítimo interesse), consent (consentimento), compliance with a legal or regulatory obligation (cumprimento de obrigação legal ou regulatória), and the regular exercise of rights (exercício regular de direitos).

What you must give us. You can browse without giving us anything beyond what your browser sends. To subscribe to alerts, we need your email address and your acceptance of the Terms. To open an account, we need an email address and a password, or a Google sign-in. Everything else, such as a profile, is optional. If you do not give us what a feature needs, you cannot use that feature.

Automated decisions. We make no decisions about you based solely on automated processing that have legal or similarly significant effects on you. Badges are counters in a game. We may use automated and human means to detect and act on abuse, spam and security threats. Automated protective measures may temporarily restrict access. Content-moderation complaints receive the human supervision required by applicable law.

---

5. What we do not do

• We do not sell personal data, and we do not share it for cross-context behavioral advertising.
• We do not use analytics or advertising trackers, and we do not show ads.
• We send the alerts you request and the account and service communications that are necessary. We do not enrol you in unrelated promotional mailing lists.
• We do not sell or rent email addresses.

---

6. Public profiles and guest lists

6.1 What becomes public

Your profile and attendance become public only through the publication choices described here. Contributions such as reviews or comments are public only where the posting form clearly tells you so before you submit them. When you set up a profile with a username, it is public unless you switch "Show my profile publicly" off before saving (Section 6.2). A public profile is shown at soupfestivals.com/@username, and anyone can see:

• your username, display name, photo (if you add one), home town and one-line bio (if you add them);
• your stamps ("I was there") and badges;
• the festivals you have marked "I'm going";
• the festivals you organize, if we approved a claim of yours;
• if you use features such as reviews, ratings, comments or lists, what you post there.

Festival pages show a guest list ("Who's going" and "Who was there"). It names only people with public profiles: their photo, name, @username and number of stamps, with a link to their profile. Everyone else is only counted, for example "and 3 more with private profiles".

6.2 The switch

When you set up a profile, it is public unless you switch "Show my profile publicly" off before saving; you can switch it off at any time. The switch is shown on the form where you set up your profile. Above the save button, the form tells you that publishing makes your profile details, stamps, badges and future plans visible to anyone, including on guest lists. While the switch is on, the button reads "Save and publish my profile"; while it is off, it reads "Save my private profile". If you turn it off, your profile page is no longer shown to others, and your name is removed from guest lists (you are then only counted). You can turn it back on at any time.

If we restrict or end your account, we may hide your public profile and guest-list entries while the restriction lasts; that does not by itself delete your account or data. To exercise a privacy right when you cannot access your account, write to [email protected].

6.3 Search engines and copies

We ask search engines not to list profile pages. Search engines decide whether to follow that request, and anyone who sees a public page can copy it.

6.4 Think before you share your plans

"I'm going" on a public profile tells anyone where you plan to be, and when. Choose what you mark, and whether your profile is public, with that in mind. You are responsible for what you choose to show, and for anything you put on the Service about other people.

---

7. Your location ("near me")

"Near me" shows festivals and places near you. It works only after you choose it and allow your browser to share your location. Your browser then sends us the precise location from your device, and:

• we use location to show nearby results, distances, directions relative to places and location-related map displays, and for nothing else;
• a saved location is used for up to 24 hours. An expired location is cleared when the Service next processes it; a copy may remain in your browser's stored session until that happens or you clear the site's stored data. We do not add the location to your account;
• we do not sell it or share it for advertising;
• you can clear your saved location at any time with the link in the footer.

To stop further location collection, revoke location permission for SoupFestivals in your browser or device settings. Clearing your saved location removes the current saved position but does not revoke that permission. If permission remains enabled, opening "near me" may obtain a new position without another browser prompt.

If you do not allow location access, nothing is sent and the rest of the Service works as usual.

---

8. Emails we send

We send only:

• alert emails you asked for: the confirmation email, and alerts when new festivals are announced in the country you chose. Every alert has a one-click unsubscribe link, which stops further alerts for that subscription;
• confirmation of your agreement: after you sign up, and after you confirm an email alert, a copy of the documents you accepted (the Terms of Service, the Acceptable Use and Community Rules and this Privacy Policy), with the version of each and the date and time of your acceptance;
• account emails: email confirmation, password reset, account unlock, notices when your email address or password changes or your account is deleted, and the acknowledgement of a withdrawal from the contract, with its date and time;
• security emails: a sign-in from a new device, and repeated failed sign-ins;
• organization invitations and reminders, sent to the address that a member of the organization entered;
• notices about your account or your content, such as a decision about a claim or a suspension, and replies to your messages.

Alerts, and the email that confirms your subscription, include a clear unsubscribe link and the sender information that the law requires, which is our name, Latent Software LLC, and our postal address. When you unsubscribe, we confirm it by email with its date and time. We do not enrol you in unrelated promotional mailing lists. If we ever want to send you other promotional email, we will ask for your consent first where the law requires it.

---

9. Who receives data

We do not sell personal data. We disclose it only to these categories of recipients, and only as far as each needs it:

• Service providers that work for us under contracts that limit their use of the data: hosting, storage and infrastructure providers; security, network and content-delivery providers; email-delivery providers; and providers of other software and technology services that help us run, maintain and improve the Service.
• Sign-in providers you choose. If you use "Continue with Google", Google receives the information needed to sign you in, under Google's own privacy policy.
• Map providers whose maps load in your browser (Section 3.1).
• Other users and the public, who see what you make public (Section 6) and published listings. Members of an organization see its other members and invitations.
• Professional advisers, such as lawyers and accountants, under a duty of confidentiality.
• Authorities and others, where the law requires or allows it: we may disclose data, where it is necessary and proportionate and on a legal basis in Section 4, to comply with a law or legal process, to answer a lawful request of an authority, to establish, exercise or defend legal claims, to prevent or investigate fraud or abuse, or to protect the rights, safety or property of us, our users or others.
• A buyer or successor, if we are involved in a merger, acquisition or sale of assets. We will tell you if that happens.

Where applicable law entitles you to the identities of actual recipients, we provide that information in response to a verified request, subject to lawful exceptions (such as protecting trade secrets and the rights of others).

---

10. International transfers

Latent Software LLC is based in the United States. We and our service providers process personal data in the United States and other countries where our providers operate. These countries may have data protection laws different from yours.

European Economic Area, United Kingdom and Switzerland. Where the law requires safeguards for a disclosure of personal data to a recipient in another country, we use the mechanisms that the law provides, as applicable, such as adequacy decisions or contractual clauses approved for that purpose. Latent Software LLC is based in the United States and is not certified under the EU–US Data Privacy Framework. An adequacy arrangement covering a particular recipient does not establish that every recipient or disclosure is covered. You may obtain information about the safeguard applicable to a particular transfer, and a copy where legally available, at [email protected].

Brazil. Where the LGPD applies to an international transfer, we use the mechanisms that Article 33 of the LGPD provides, as applicable. The paragraph below, and Section 14.3, explain this in Portuguese.

Brasil — tratamento no exterior e transferências internacionais. A Latent Software LLC, 30 N Gould St, Ste N, Sheridan, WY 82801, USA, é a controladora. Recebemos e tratamos dados nos Estados Unidos e outros países onde os nossos prestadores operam, para prestar as funcionalidades solicitadas, proteger o Serviço, enviar comunicações solicitadas e manter os registros descritos nesta Política. Os períodos de conservação constam da Seção 11. Compartilhamos dados com as categorias de destinatários descritas na Seção 9 para essas finalidades. Continuamos responsáveis pelas obrigações que a LGPD nos atribui e exigimos dos operadores as medidas técnicas e organizacionais apropriadas. Você pode exercer os direitos da Seção 14.3, solicitar informações e cópias das cláusulas aplicáveis em [email protected] e apresentar petição à ANPD. A coleta diretamente do titular no exterior distingue-se das transferências posteriores a outros agentes.

---

11. How long we keep data

We keep personal data only as long as we need it for the purposes in Section 4, which include providing the Service, security, record-keeping, improving the Service, and establishing, exercising or defending legal claims; then we delete or anonymize it. Where we do not give a fixed period, we decide how long to keep data by these criteria: how long the feature you use needs it, whether you still have an account, our legal obligations, the time within which legal claims can be brought, and the needs of security and fraud prevention.

Data	How long
Account data	Until you delete your account (Section 12).
Profile and passport	Until you change or delete them, or delete your account.
Your contributions	Until you delete your account, except information you contributed that we published (Section 12).
Sign-in event history (sign-ins, failed sign-ins, sign-outs and ended sessions)	Up to 12 months, and longer where needed for security, fraud prevention or legal claims.
Signed-in sessions	While the session is active, and longer where needed for security, fraud prevention or legal claims.
Account sign-in details and signup information (such as how, when and from where you signed up and last signed in)	Until you delete your account, and longer where needed for security, fraud prevention or legal claims.
Agreement records	Agreement records have no automatic expiry and remain after account deletion or unsubscribing. We retain each part only while reasonably necessary to prove the agreement, comply with a preservation duty, or establish, exercise or defend legal claims. We assess necessity by reference to applicable limitation periods, particular disputes and the evidential value of the information. We erase or anonymize personal information when those grounds no longer justify retaining it.
Email alerts	Alerts stop when you unsubscribe. Subscriber details, subscription status, delivery history and agreement records may remain afterwards for suppression, resolving delivery or consent disputes, security and legal claims, subject to the necessity criteria in this Section. Unconfirmed requests may remain until we clear them.
"Near me" location	A saved location is used for up to 24 hours. An expired location is cleared when the Service next processes it; a copy may remain in your browser's stored session until that happens or you clear the site's stored data. We do not add the location to your account.
Organization invitations	They expire after 7 days; the record stays with the organization.
Public information about people in listings	As long as the listing is on the Service and the information is relevant to it, unless you object or ask us to erase it and the law does not allow us to keep it ("Your right to object", above, and Section 14).
Messages you send us	As long as we need them to deal with your message, and afterwards as long as needed for legal claims.
Technical and usage data (logs)	A limited time, for operations and security.
Backups	A short rolling period, after which they are overwritten or deleted.

Unconfirmed alert requests and other records without a fixed retention period remain subject to the same necessity requirement and to applicable erasure rights.

---

12. Deleting your account

You can delete your account in Settings, under "Delete account". We ask for your password to confirm. If you have only ever signed in with Google, you first set a password through a link we email you.

If you own an organization that other people belong to, you must transfer it or close it first.

During the first 14 days after you create your account, you can also use "Withdraw from contract here" in Settings (Terms of Service, Section 15.1). After you confirm, we close your account with the same effect as deleting it, and we email you an acknowledgement with the date and time of your withdrawal.

What we delete: your account, your profile and photo, your passport, the tips, claims and other contributions tied to your account (except as below), your Google sign-in link, your sessions, your memberships, and any organization that you own alone.

What we keep, and why:

Kept	Why
Records of your agreement to our Terms and this Privacy Policy	To prove what was agreed, and to establish, exercise or defend legal claims.
Information you contributed that we published, and the record of where it came from	It is part of a public listing or other content.
Limited security records	To protect the Service and prevent fraud, for the periods in Section 11.
Email-alert subscriptions with the same email address	Alerts are separate from accounts. Use the unsubscribe link in any alert.
Invitations you sent	They stay with the organization; you are removed as their sender.
Backups and logs	For the short period in Section 11, after which they are overwritten or deleted.

To ask us to delete data that account deletion does not cover, write to [email protected]. Where the law lets us keep particular data, we will tell you which and why.

---

13. Security

We use appropriate technical and organizational measures to protect personal data, such as encrypted connections, access controls, and storing passwords in a form we cannot read. In Settings, under "Sessions & devices", you can see where you are signed in and sign out of other devices, and we email you about sign-ins from new devices and repeated failed sign-ins.

No system is perfectly secure. Use a strong password that you do not use elsewhere, and keep your devices secure. If a personal data breach affects your data, we will notify you and the authorities as the law requires.

---

14. Your rights

14.1 How to use them

You can see and change most of your data yourself in Settings and on your profile, unsubscribe from any alert with its link, and delete your account in Settings. For anything else, or if you cannot access your account (for example because it is restricted), write to [email protected]. We may need to confirm your identity first. We answer within the time that the law sets. We do not discriminate against anyone for using a privacy right.

14.2 European Economic Area, United Kingdom and Switzerland

Under the GDPR, the UK GDPR and the Swiss data protection law you have the right to:

• access your personal data;
• rectify data that is wrong;
• erase your data;
• restrict some processing;
• receive your data in a portable format;
• object to processing based on our legitimate interests, as "Your right to object" at the top of this Policy explains;
• withdraw consent at any time, where we rely on consent, without affecting processing before you withdrew it;
• complain to a data protection supervisory authority, in particular where you live or work, or where an infringement took place. In Portugal, that is the Comissão Nacional de Proteção de Dados (CNPD); in the United Kingdom, the Information Commissioner's Office (ICO); in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC).

14.3 Brazil (LGPD)

Under Article 18 of the LGPD, you have the right to:

• confirmation that we process your data;
• access to your data;
• correction of incomplete, inaccurate or out-of-date data;
• anonymization, blocking or deletion of unnecessary or excessive data, or of data processed in breach of the LGPD;
• portability of your data to another provider;
• deletion of data processed with your consent, except where the law allows us to keep it;
• information about the public and private entities we share data with;
• information about the possibility of not giving consent, and what follows from that;
• revocation of consent;
• petition to the Autoridade Nacional de Proteção de Dados (ANPD).

Você também pode opor-se a tratamento realizado sem consentimento quando houver descumprimento da LGPD e solicitar a revisão de decisões tomadas unicamente com base em tratamento automatizado que afetem seus interesses. Quando aplicável, forneceremos informações claras e adequadas sobre os critérios e procedimentos utilizados, respeitados os segredos comercial e industrial nos limites da lei. Solicitações podem ser enviadas a [email protected].

The purposes, form and duration of the processing are in Sections 4 and 11, and the recipients in Section 9. Canal de comunicação para titulares de dados e para a ANPD: [email protected].

Brasil — informações sobre transferências: Você pode solicitar informações sobre as transferências internacionais dos seus dados e, quando aplicável, uma cópia das cláusulas utilizadas, pelo endereço [email protected]. Fornecemos as cláusulas no prazo legal aplicável, observados os segredos comercial e industrial nos limites permitidos por lei. Você também pode exercer os direitos descritos nesta Política e apresentar petição à ANPD.

14.4 United States (including California)

This section describes our collection practices and the rights available under applicable US privacy laws, for residents of California and of other US states with comprehensive privacy laws, to the extent those laws apply to us. Our collection practices are described below and in the relevant sections of this Policy. Applicable notices are provided at or before collection.

• Categories we collect: identifiers (such as name, email address, username, IP address and account identifiers); internet or network activity (logs, sessions and sign-in records); approximate geolocation; precise geolocation when you use "near me" (Section 7), and any location information contained in files you choose to upload; photos you upload; professional information, only if you act for an organization or business (its name and your connection to it); and the content you give us (profile, passport, contributions and messages). We do not draw inferences to build a profile about you.
• Sources: you; your browser or device; Google, if you sign in with it; organizations that invite you; and publicly available information.
• Purposes: as in Section 4.
• Disclosures: profile information, photos and attendance are disclosed to the public only according to your publication choices (Section 6). We use precise geolocation only to provide "near me", the location feature you request.
• Business-purpose disclosures during the preceding 12 months: identifiers and internet or network activity are disclosed to the service-provider categories in Section 9 as needed to operate and protect the Service. Requested location information is processed for the location functionality described in Section 7. Profile details, photographs, attendance and public contributions are disclosed to the public according to Section 6. Organization-related information is disclosed to relevant organization members and the providers needed to operate those features. Any category may be disclosed to professional advisers, authorities or a successor only in the circumstances described in Section 9. None of these categories is sold or shared for cross-context behavioral advertising.
• Sensitive personal information: sensitive personal information may include account login credentials, precise location supplied for "near me", and sensitive information contained in content or original files you provide. We use credentials for authentication and security, requested location for location features, and supplied content and files for the feature and related purposes described in this Policy. We do not use this information to infer sensitive characteristics. Remove information you do not want us to receive before submitting a file.
• Sale and sharing: we do not sell personal information and do not share it for cross-context behavioral advertising, and have not done so in the past 12 months. We have no actual knowledge of selling or sharing the personal information of consumers under 16.
• Global Privacy Control: we treat a GPC signal as a request to opt out of sale and sharing. Because we do not sell or share, there is nothing further to switch off.
• Retention: account identifiers and credentials follow the account-data retention rule; profile details, photographs and attendance follow the profile-and-passport rule; security and network activity, and the approximate geolocation recorded with it, follow the applicable sign-in, session or log rule; precise requested location follows the location rule; email-alert subscriber data follows the email-alert rule; agreement evidence follows the agreement-record rule; and contribution, organization and correspondence data follow their respective rules in Section 11.
• Your rights: to know and access, to delete, to correct, and not to be discriminated against for using these rights. Where your state's law allows, you may use an authorized agent; we may ask the agent for proof of authority and ask you to verify your identity. If we decline your request, you may appeal by replying to our answer.

---

15. Children and young people

Browsing is open to everyone, but accounts and email-alert subscriptions are only for people who are at least 18 years old (or the age of majority where they live, if higher). A parent or guardian may subscribe to alerts using their own email address. The Service is not directed to children, and we do not knowingly collect personal data from children.

Where an organization that involves children or young people, such as a Scouts or Guides group, a school or a youth club, is listed or manages a profile, the organization is responsible for the personal data and images of any minor and for parental or guardian consent (Section 3.5). If you believe we hold personal data of a child, write to [email protected]. When we learn that personal data was collected contrary to these age rules, we delete it, unless the law requires us to keep it, and we may close the account or end the subscription concerned.

---

16. Other websites and services

The Service links to sites and services we do not control, such as organizers' and businesses' pages, maps and social networks. When you follow a link, the other site's own privacy policy applies; we are not responsible for its practices. Image credits are at Photo credits.

---

17. Changes to this policy

We may update this Privacy Policy, for example when we add features. If we make a material change, we will tell account holders and email-alert subscribers by email or on the Service before it takes effect, and we may ask you to acknowledge the new version. The date at the top shows the current version.

We write these documents in English, and the English text governs. We may provide translations. Where the law that protects you requires a version in your language to prevail, or requires these documents to be interpreted in your favour, that law applies. Mandatory consumer and data-protection law determines any language or interpretation requirement; a language-precedence provision does not restrict those rights. You can read and keep these documents before you accept the Terms or give us personal data.

---

18. Contact

Latent Software LLC 30 N Gould St, Ste N, Sheridan, WY 82801, USA

Privacy questions and requests (including under the LGPD): [email protected] Support: [email protected] Legal and notices: [email protected]