Privacy Policy
This Privacy Policy explains what personal data CircuitSync ("we", "us") collects when you use our live event-timing service at circuitsync.app, why we collect it, how long we keep it, and the rights you have over it. It applies to club administrators, staff, and drivers whose data is entered into the service.
Who is responsible for your data
The data controller is HARMN LLC, 7901 4th St N STE 300, Saint Petersburg, FL 33702. For any privacy question or to exercise the rights below, contact us at support@circuitsync.app.
What we collect
- Account data — your name, username, email address, and password (stored only as a secure hash by our authentication provider).
- Club membership — which organisations you belong to and your role (owner, admin, or staff).
- Driver and registration data — driver name, email, car number and description, the classes and events you register for, and your run times and results.
- Marketing preference — whether you opted in to event and product updates (a separate, optional choice).
- Uploaded content — club logos and branding images you provide.
- Limited technical data — for private events protected by a passcode, we briefly record a hashed identifier of the requesting device/IP to rate-limit guessing.
- Product-analytics data — with your consent, we use a product-analytics tool (PostHog) to understand how the service is used so we can improve it. We do not use advertising or cross-site ad tracking. See our Cookie & Storage Notice for the full detail and your choices.
Why we use it (lawful basis)
- To provide the service (contract) — creating your account, running events, timing runs, and publishing results is the core service you sign up for.
- Legitimate interests — keeping the service secure (e.g. passcode rate-limiting, two-factor device trust) and improving it.
- Consent — marketing emails and product analytics happen only if you opt in, and you can withdraw at any time.
- Legal obligation — where we must retain records for tax or accounting (subscriptions).
Who we share it with (sub-processors)
We do not sell your data. We share it only with the service providers needed to run CircuitSync:
| Provider | Purpose | Data location |
|---|---|---|
| Cloudflare | Web app hosting and content delivery (CDN) | Global edge network |
| Supabase | Authentication, database, and file storage | United States |
| PowerSync | Real-time data synchronisation for offline use | United States |
| Resend | Transactional and notification email | United States |
| Stripe | Subscription billing and payments | United States |
| PostHog | Product analytics (only with your consent) | European Union |
CircuitSync is operated by HARMN LLC, a United States company, and your personal data is primarily stored and processed in the United States. If you are in the United Kingdom or the European Economic Area, that transfer is covered by appropriate safeguards (such as Standard Contractual Clauses and each provider's data-processing terms).
How long we keep it
- Account and club data — for as long as your account is active.
- Event and results data — retained by each club for its records; you can ask a club to remove your driver entries.
- Cancelled subscriptions — after cancellation, data is kept for a limited retention grace period (see our Terms of Service) before deletion.
- Security/technical data — passcode rate-limit records are purged shortly after they are no longer needed.
Your rights
Subject to applicable law (including the EU GDPR), you have the right to:
- access the personal data we hold about you;
- correct inaccurate data;
- request erasure of your data ("delete my account / my data");
- receive a portable copy of your data;
- object to or restrict certain processing; and
- withdraw consent to marketing at any time.
To exercise any of these, email support@circuitsync.app and we will respond within the timeframes required by law. You also have the right to complain to your local data protection authority.
Cookies and local storage
We use first-party browser storage that is strictly necessary to run the app, plus optional preference settings. With your consent, our product-analytics tool also sets its own cookies and storage. We do not use advertising cookies. See our Cookie & Storage Notice for the full inventory.
Children
CircuitSync is intended for use by motorsport clubs and adult participants. Where junior drivers take part, registration should be carried out by a parent, guardian, or club official on their behalf.
Changes to this policy
We may update this policy as the service evolves. Material changes will be reflected in the version stamp at the top of this page, and where appropriate we will ask you to re-accept.