Privacy policy

Scope and operator This notice describes Vistroam’s current photo-discovery experience for Riyadh, Diriyah, Jeddah and Qiddiya. Operator identity, business location and monitored contact channels have not yet been configured. Contact explains this limitation; no company, office or privacy email is presented as real. Information used The site and host receive normal connection information, which can include a network address, browser information and request logs. Account features may process your name, username, email or phone number, sign-in provider identifier and private profile settings. Only configured sign-in methods are offered. Email/phone verification and Google, Apple or Microsoft sign-in use the information needed for the chosen method. Matching email text alone does not merge accounts. Private profile You can keep or change your generated username. Date of birth is optional initially; if supplied, it is encrypted and private, without a public age badge. Profile completion may be required before a future sensitive feature. The current profile displays initials and does not automatically load an external avatar. Public visitor photo uploads and comments are not currently enabled. No minimum-age or parental-consent programme is established by the birth-date field. Likes, saves and suggestions Guest reactions use a random session identifier represented internally by a keyed hash. Saves are private to the relevant browser session or account; like counts represent recorded actions, not verified people. Successful visitor sign-in can associate existing browser reactions and suggestions with your account. Clearing cookies can lose access to a guest collection. Suggested public social links and place names enter private administrative review; tracking parameters are removed and the post is not automatically fetched or republished. Purpose and choices Information supports requested account functions, collections, authentication, security, source review and privacy requests. Optional maps and any activated optional advertising use the relevant choices at the point of loading. Browsing is not blanket permission for marketing or future features. You can browse without an account or birth date; refusing information needed for a requested sign-in or sensitive function can prevent that function from working. Maps and other providers Maps load only after map consent and an explicit request. Map providers can receive connection information and the displayed map area. Directions opens an independent map service when selected. Discovery does not automatically request your device location. When activated, the chosen identity, email or SMS provider receives information needed for sign-in. Photos and fonts are served locally, without automatic Instagram/Pinterest embeds. Processing countries and the final supplier/transfer arrangements have not yet been fully documented; no Saudi-only storage promise is made. Optional place ratings When configured and explicitly requested after map consent, Google Places supplies a live place rating and rating count. Google Maps is identified beside this data. These third-party ratings are not Vistroam reviews, are not stored as profile data, and are not copied into our structured review markup. Google’s privacy policy is available at https://policies.google.com/privacy and its Maps terms at https://www.google.com/help/terms_maps/. Discovery measurements With optional analytics consent, recent detail views and directions requests are deduplicated using a daily keyed session hash and retained for 30 Saudi calendar days. No IP, email, user agent, search text or referrer is stored in this table. Consent withdrawal stops new events; Global Privacy Control and Do Not Track are respected. The scheduled cleanup also removes expired events during quiet periods. These browser actions are not physical visits or independently verified people. Advertising and customer stories Advertising is off by default. Structured custom promotions do not embed an advertising tracker. Google advertising stays blocked until its readiness, consent-platform and consent requirements are met. Revoking the relevant choice removes active optional ad frames but cannot recall information already received by a provider or clear all third-party storage. Genuine customer testimonials require confirmed quote, display-label and context permission; private supporting evidence is encrypted. Earlier photography-service stories are identified separately, and hypothetical examples remain unpublished. Retention and protection Consent choices are stored for up to 180 days. Guest reactions and suggestions are scheduled for removal after 90 days without an update. Account collections remain until removed or handled through account deletion. Email codes expire after five minutes; successful use clears recoverable challenge details. Cleanup depends on configured jobs, and a complete operational retention schedule for logs, audits, evidence and backups is not yet documented. Access controls and encryption protect specified private fields, including birth date and testimonial evidence; not every database field is encrypted, and security cannot be guaranteed. Access, correction and deletion Available account controls let you edit your profile and, after recent authentication, export private account information or request deletion. Applicable retained-record safeguards and lawful obligations can affect deletion. You can withdraw optional choices through Cookie settings. Applicable law may also provide rights to information, access, a readable copy, correction, destruction and consent withdrawal. A monitored operator channel for additional requests has not yet been configured; this page is not a submitted request. Never send passwords, one-time codes or unnecessary identity documents. Updates and international visitors The displayed effective date identifies this notice. It should be updated when actual features, suppliers or processing change. An English interface does not establish which law applies to every visitor, and this notice does not claim worldwide compliance or regulatory certification.