Privacy policy

Draft — last updated November 9, 2026.

Data we collect

• Buyers: email, order details, the name PayPal shares with us, download history. Card and PayPal login data are handled only by PayPal; we never see them.

• Photographers: name, contact details, profile photo, PayPal Business email and account ID, contract acceptance (date and IP).

• Everyone: basic, anonymous usage statistics and the searches made on the site (spot and date).

Photos of people

Photos are taken in public places. Unsold photos are deleted automatically 30 days after upload. Anyone can ask us to remove a photo where they appear.

Selfie search (coming soon)

If you choose to search with a selfie, we will ask for your explicit consent first. The selfie is processed on your device; only a numeric face description is sent to compare with photos, and it is discarded after the search unless you turn on alerts, in which case it is kept for at most 30 days.

Why we use your data

To deliver your purchase, route each payment to the right PayPal account, handle refund requests, prevent fraud, meet legal and tax duties and improve the service.

Who we share it with

PayPal (payments), the photographer you buy from (your masked email, order and payment ID, to handle refunds), Supabase (database), Cloudflare (file storage), Resend (email), Vercel (hosting). Some are located outside your country.

Your rights

You can ask to access, correct or delete your data at hola@miolasurf.com. The controller is an individual resident in Brazil, and the Brazilian data protection law (LGPD) applies.