Privacy Notice

Who we are

355Live ("we", "us") is an independent fan project tracking the worldwide Ferrari F355 market. We act as the data controller for personal data described below. Contact: hello@355live.com.

What data we collect when you sign in

• Your email address, and (when you sign in with Google) your name and profile picture as released by Google.
• A session token (no password is ever sent to or stored by us).
• Your marketing email opt-in choice and a timestamp of your consent.
• Standard server logs (IP address, user agent) for security and abuse prevention.

Why we use it

• Provide the 355Live Score (legal basis: performance of contract / your request).
• Send you product update emails — only if you opted in (legal basis: consent, Art. 6(1)(a) GDPR). You can withdraw at any time from any email's footer or in your account.
• Prevent abuse and fraud (legal basis: legitimate interest).

Who processes it

We use these sub-processors:

• Supabase, Inc. — authentication and database hosting (EU region).
• Cloudflare, Inc. — edge hosting and DDoS protection.
• Google LLC — only when you choose Google as your sign-in provider.

When you contact us (chat or contact form)

If you message us through the on-site chat widget or the contact form, we collect:

• The content of your messages and any name/email you choose to share.
• The page URL the chat was opened from and your browser user-agent (chat only) — used to give the team context when replying.
• An anonymous browser identifier stored in your local browser so you can come back to the same conversation (chat only).
• If you tick the consent box to provide your email, we also store a consent timestamp as proof you agreed.

Legal basis: Art. 6(1)(b) GDPR (taking steps at your request to respond to your enquiry) — and, for the email follow-up, Art. 6(1)(a) consent.
Purpose: Solely to read and reply to your message. We do not use these emails for marketing, do not share them with third parties, and do not enrich or profile them.
Who sees it: Only the 355Live admin team. Chat messages are also processed by Lovable's AI gateway (Google Gemini) to draft an instant reply — they are not used to train any AI model.
Retention: We keep contact and chat records for up to 24 months from the last activity, then delete them. You can ask us to delete sooner at any time by emailing hello@355live.com.

When you upload garage photos (service book, invoices, receipts)

Inside your private Garage you can upload images of service book pages, invoices and receipts so we can build a maintenance history and spend total for your car. When you do:

• The image is stored in our backend object storage (Supabase, EU region) under your account only — it is never made public.
• Once per upload the image is sent over HTTPS to Google Gemini via the Lovable AI Gateway to read structured fields off the page (date, mileage, total, garage name, work performed).
• Only the extracted text fields are saved alongside the image; the image bytes are not retained by the gateway or by Google after the inference call.

Legal basis: Art. 6(1)(b) GDPR — performance of the Garage feature you asked us to provide.
No model training: Images and extracted text are not used to train any AI model, are not shared with advertisers, and are not used to enrich any public dataset.
Who sees it: Only you, and 355Live admins for support/QA. Other Garage users cannot see your photos.
Retention: Kept while your Garage car exists. Delete an invoice, stamp or the whole car at any time and the underlying file is removed from storage. Deleting your account removes everything.

How long we keep it

• Account data: until you delete your account.
• Marketing opt-in records: until you opt out, plus 12 months for proof of consent.
• Chat & contact form messages: up to 24 months from last activity.
• Server logs: 30 days.

Your rights

Under GDPR you have the right to access, correct, export and delete your data, and to withdraw consent or object to processing. You can delete your account at any time from the 355Live Score page — this immediately removes your profile and email from our database. To exercise other rights, email hello@355live.com. You can also lodge a complaint with your local data protection authority.

Cookies

We use a single first-party local-storage entry to keep you signed in. We do not use advertising cookies or third-party analytics that profile individual users.