Website Privacy Policy
Transparency is central to everything we build. This policy outlines how information is gathered, protected, and managed on the gemapix.com website.
1. Scope & Overview
This Privacy Policy applies specifically to information collected through the website located at gemapix.com (including subdomains, landing pages, and web-based contact forms).
This policy covers your interaction with our public marketing website, including:
- Early access waitlist subscription and beta platform selection (iOS TestFlight / Android Google Play Beta)
- Voluntary post-signup creator intent surveys
- Local Ambassador program applications
- Aggregated, privacy-respecting website analytics and performance monitoring
2. Information We Collect
We practice strict data minimization. On the website, we collect only the personal information you explicitly provide or that is technically required to serve and secure our web pages.
Waitlist & Beta Access
- • Email address: To notify you when access is ready.
- • Beta platform preference: iOS (TestFlight) or Android (Google Play).
- • Referral source & campaign: To measure marketing channel efficacy.
- • Locale & language: To provide region-appropriate communication.
Creator Intent Survey
- • Explorer persona: Self-reported interests (e.g. explorer, local guide, content creator).
- • Storytelling goals: The types of walking routes or gems you wish to build.
- • Qualitative feedback: Optional suggestions or early feedback.
Ambassador Application
- • Full name & email: For communication and credential verification.
- • City & country: To assign geographical focus and local curation.
- • Social handles & bio: Instagram, TikTok, X, or portfolio links.
- • Motivation & output: Why you want to represent Gemapix and estimated gems/month.
Technical & Security Data
- • IP address (Transient): Inspected in-memory by Cloudflare Turnstile for anti-bot validation; never stored permanently.
- • User agent string: Browser family, operating system, and language header.
- • Screen parameters: Viewport width/height to serve responsive styles.
3. What We Do NOT Collect
To eliminate ambiguity, the following types of data are never collected or processed on gemapix.com:
No Accounts or Passwords
There are no user logins, accounts, or password databases on the marketing website.
No Photo or Camera Uploads
The website does not request camera permissions or accept photo uploads.
No GPS Location Tracking
We never request browser geolocation APIs or track real-time physical movement on the website.
No Payments or Billing Data
The website contains no checkout or subscription payment processing. No credit cards or bank details are collected here.
No Face or Plate Blurring
Facial blurring and license plate redaction algorithms run only on native mobile hardware during app narrative creation.
No Data Broker Selling
We never sell, license, or rent visitor data to third-party data brokers or advertisers.
4. Legal Basis for Processing (GDPR)
Under Regulation (EU) 2016/679 (General Data Protection Regulation - GDPR) and UK GDPR, our processing of your personal data on the website is grounded on the following legal bases:
Consent
We process your data based on your freely given, specific, informed, and unambiguous affirmative action when you:
- Submit your email to join the early access waitlist
- Select beta testing options (TestFlight or Google Play)
- Fill out the creator intent survey
- Submit an ambassador application form
- Accept optional Google Analytics cookies on our consent banner
Legitimate Interests
We process technical metrics where necessary for our legitimate interests, balanced against your fundamental rights:
- Preventing bot attacks, spam, and DDoS threats via Cloudflare Turnstile
- Ensuring website availability, server health, and debugging runtime errors
- Preserving localized language and cookie preference choices across page reloads
- Replying to direct inquiries sent to our privacy contact address
5. Third-Party Processors
We partner with vetted, industry-standard service providers acting as Data Processors under strict Data Processing Agreements (DPAs):
PostHog (EU Cloud)
EU Data Residency (Frankfurt)Product analytics, feature flags, A/B experiments, and waitlist subscriber profile ingestion.
Cloudflare (Turnstile)
Privacy-Preserving CAPTCHA AlternativeAnti-bot protection, DDoS defense, and form verification without cross-site tracking or cookies.
Google Analytics 4 (GA4)
Consent RequiredAggregated website traffic and referral source measurement. Only loaded if you choose "Accept" on the cookie banner.
Brevo (formerly Sendinblue)
Transactional Email DeliveryDispatches waitlist confirmations, onboarding invitations, and ambassador correspondence.
7. Your Privacy Rights
Regardless of your jurisdiction, we respect your rights under both European data protection regulations (GDPR) and California privacy law (CCPA / CPRA):
Right to Access & Portability
You have the right to request a copy of the personal data we hold about you (such as your waitlist submission or ambassador details).
Right to Erasure (Deletion)
You can request immediate and permanent deletion of your email address, survey answers, and ambassador application from our databases.
Right to Rectification
You can update or rectify any inaccurate or incomplete details you provided during waitlist or ambassador registration.
Right to Withdraw Consent
You can withdraw consent at any time by clicking the unsubscribe link in any email or by resetting your cookie preferences.
Notice for California Residents (CCPA / CPRA)
Under the California Consumer Privacy Act, we confirm that we do not sell your personal information, nor do we share personal information with third parties for cross-context behavioral advertising. You have the right to equal service and prices, free from discriminatory treatment for exercising your privacy rights.
Have Questions or Want to Exercise Your Rights?
To request data access, update your details, or delete your waitlist registration, contact our designated privacy team. We respond to all verified requests within 30 days.
privacy@gemapix.com