Privacy Policy

1. Who this policy is about

This policy explains what personal information Fanographs collects when you use the platform as a Fan or as an Icon, why we collect it, who else sees it, and what you can do about it. It applies to the Fanographs website and application, and forms part of the Fanographs Terms and Conditions.

Fanographs is the controller of the information described here. If you are an Icon, the Fanographs Icon Agreement adds detail specific to selling, verification, and fulfilment; where it is more specific about Icon activity, it governs.

2. What we collect

Account details. Your name and email address, and a password if you did not sign in with Google. These are the only things required to hold an account.

Profile details, all optional. Pronouns, country, a short biography, the categories you collect, and a profile photo. You can browse, follow Icons, and watch items without providing any of it.

Contact and delivery details, asked for by the order that needs them. A mobile number and a delivery or return address. We do not ask for these at signup.

Order information. What you requested or bought, from whom, the dedication or instructions you supplied, the status of the parcel in each direction, and the resulting certificate.

Icon verification material, from Icons only. Legal name, date of birth, gender, mobile number, postal address, a verification selfie, and a government photo identity document. This is collected to confirm that the person behind a listing is who they say they are.

Technical information. Sign-in and security events, the approximate device and browser a session was created from, and a hashed form of the network address a request arrived from. We hash rather than store the address itself because the purpose is abuse control, not identification.

3. Why we use it, and on what basis

To provide the service you asked for: to open and fulfil an order, get a parcel to the right place in both directions, issue a certificate, and let you sign in. This is the processing without which there is no product.

To keep accounts and transactions safe: verifying an email address, checking an Icon's identity, detecting abuse, and rate-limiting attacks. Some of this we are also required to do.

To communicate with you about things you are doing. Order updates, security alerts, email verification, and password changes are operational messages tied to your account and are not preferences — they will continue to arrive while your account is open.

To improve and promote Fanographs, using what an Icon has chosen to publish. Marketing use of an Icon's public content and likeness is bounded by the Icon Agreement to operating and promoting the platform, and to nothing else.

We do not sell your personal information. We do not use it to train machine-learning models without asking you first.

4. Payment information

Fanographs never stores card numbers. Payment is taken on our payment provider's own hosted page, and no card number, security code, or chargeable token is ever persisted, logged, or returned by Fanographs.

We record that a payment succeeded, what it was for, and how much it was, because that is the order. The instrument behind it stays with the provider.

Icons connect a payout method through the same provider. Fanographs does not hold Icon bank details either.

5. Who else sees your information

The other party to your order, and only what fulfilment requires. An Icon signing your item is given what they need to handle and return it. Personal information learned that way may be used only to fulfil that order; it is not theirs to keep, market to, or pass on, and the same rule binds you about them.

Service providers acting on our instructions: hosting and database infrastructure, the payment provider, the identity-verification provider, the shipping carrier, and the transactional email provider. Each receives only what its function needs.

Fanographs staff, under limits. Icon verification material is kept apart from the public profile, the sensitive values are encrypted at rest, access is restricted to authorised Admins carrying out a review, and every access to an identity document is recorded — who looked, and when.

Anyone, where you have chosen to publish. An Icon's public name, photo, biography, and listings are public by design, and the name attached to a completed signing stays visible permanently because the value of the item to its owner depends on that attribution.

Authorities, where the law requires it, and a successor if the business is transferred.

6. How long we keep it

Account and profile information is kept while your account is open. Deactivating pauses the account and erases nothing, so returning is lossless.

Deleting an account starts a 30-day grace period during which nothing is erased and you can sign in and cancel. At the end of it we erase verification values, identity documents, profile photo, biography, and sign-in credentials.

Two things deliberately survive deletion: the legal name, as part of the record of who transacted, and the public name shown on anything signed or sold, permanently, for the reason given above.

Identity documents are erased on their own schedule once the decision they supported is final, unless a legal hold prevents it. Records we are required to retain — transaction records in particular — are kept for as long as that requirement lasts.

7. Your choices

Optional email is a preference and operational email is not. You can turn marketing and other optional messages off at any time in Account Settings; messages that keep your account usable and safe will continue.

SMS delivery alerts are off unless you switch them on for a number you have verified, and you can withdraw that consent at any time. Changing the number withdraws it automatically, because an unverified number cannot carry a promise to text it.

You can request a copy of your account data from Account Settings. The file is prepared in the background and lists, inside itself, exactly what it excludes and why — it does not include Icon verification values or identity documents.

You can correct most details yourself in your profile, and you can deactivate or delete your account from Account Settings.

This is a US-focused product and the above is not an unconditional right to erasure. If you are subject to a legal regime granting broader rights, contact us and we will tell you what we can do.

8. Security

Sensitive verification values are encrypted at rest. Passwords are stored only in hashed form. Sessions can be reviewed and revoked from Account Settings, and multi-factor authentication is available.

No system is perfectly secure, and we do not claim otherwise. If a breach affects your information we will tell you and the relevant regulator where we are required to.

9. Children

Fanographs is not intended for children. You must be at least the age of majority where you live to hold an account, and we do not knowingly collect information from anyone below it. If you believe a child has given us information, contact us and we will remove it.

10. Changes, and how to reach us

When this policy changes we publish the new version on this page and record a new version label against future signups, so it is always provable which version an account agreed to.

Questions about this policy, or about the information we hold, go to Fanographs support. The published contact route for privacy requests is being finalised alongside the approved wording of this policy and will be named here.