Privacy Policy

1. Information We Collect

We collect information you provide directly, information generated by your use of the Platform, and limited technical information from your device and browser.

1.1 Account and Profile Information

When you register and set up your profile, we collect:

• Identity information: First name, last name, username, and email address.
• Location information: Zip code (used to display your general region to other riders and to suggest nearby connections). We do not collect precise GPS location.
• Profile details: Relationship status, riding styles, a short bio, profile photo, and cover photo.
• Garage / motorcycle information: Year, make, and model of motorcycles you add to your profile garage. This information is displayed publicly on your profile.

1.2 Content You Post

We collect and store content you create and share on the Platform, including:

• Posts (text, photos, and combinations of both).
• Comments and replies on posts.
• Likes and reactions to posts and comments.
• Group memberships and content posted within groups.
• Wall posts and content posted on other users’ profiles.

1.3 Communications

When you use our direct messaging feature, the contents of those messages are stored on our servers. Messages are intended to be private between participants; however, they may be reviewed by our team in response to a valid report of abuse or a legal requirement.

1.4 Social Connections

We collect information about your social connections on the Platform, including friend requests sent and received, accepted friendships, users you have blocked, and reports you have submitted.

1.5 Usage Information

We automatically collect certain information when you use the Platform:

• Activity timestamps: When you last visited the Platform (used to show “online recently” indicators to other users).
• Notification interactions: Whether you have read notifications, and when.
• Content interactions: Posts you have liked or commented on.

1.6 Technical Information

Our infrastructure provider (Supabase) and hosting provider (Vercel) may automatically collect standard technical information when you access the Platform, including:

• IP address.
• Browser type and version.
• Operating system.
• Referring URLs.
• Date and time of access.

This information is used for security monitoring, fraud prevention, and platform reliability. We do not use this data to build advertising profiles.

2. How We Use Your Information

We use the information we collect to:

• Operate the Platform: Create and manage your account, display your profile and content to other users, and deliver the features and services you use.
• Facilitate connections: Suggest nearby riders based on your zip code, enable friend requests and group participation, and power the people discovery features.
• Send notifications: Deliver in-app and email notifications about activity relevant to your account (friend requests, messages, post interactions, group events, and legal notices such as DMCA takedown notices).
• Moderate and maintain safety: Review reported content, enforce our Terms of Service and Community Guidelines, process DMCA takedown notices and counter-notices, and protect users from harassment, spam, and abuse.
• Improve the Platform: Understand how the Platform is used in aggregate to diagnose technical issues and improve features.
• Comply with legal obligations: Respond to lawful requests from government authorities, process copyright infringement notices, and meet our obligations under applicable law.

3. How We Share Your Information

We do not sell your personal information to third parties. We share your information only in the limited circumstances described below.

3.1 With Other Users

Much of the information you provide is shared with other registered users of the Platform as part of the social networking experience. This includes your profile information (name, username, zip code region, riding styles, profile and cover photo, garage), posts and photos you share, comments and likes, and your group memberships. Direct messages are shared only with the intended recipient.

3.2 Service Providers

We use trusted third-party service providers to help operate the Platform. These providers access your information only as necessary to perform services on our behalf and are contractually obligated to protect it:

• Supabase — database, user authentication, and file storage (images, photos). Your data is stored on Supabase’s infrastructure, which is hosted on AWS in the United States.
• Vercel — website hosting and content delivery. Vercel processes request data (including IP addresses) as part of delivering the Platform to you.
• NHTSA (National Highway Traffic Safety Administration) — when you add a motorcycle to your garage, we query the NHTSA public API using the make and model year you provide. No personally identifiable information is sent to NHTSA.

3.3 DMCA Counter-Notice Forwarding

If you submit a DMCA counter-notice disputing a takedown of your content, we are legally required under 17 U.S.C. § 512(g)(3) to forward your counter-notice — including your name, address, and contact information — to the original complainant. By submitting a counter-notice, you consent to this forwarding.

3.4 Legal Requirements

We may disclose your information when we believe disclosure is necessary to comply with applicable law, respond to a valid legal process (such as a subpoena or court order), protect the rights, property, or safety of BikerOrNot, our users, or the public, or investigate and prevent fraud or security incidents.

3.5 Business Transfers

If BikerOrNot is involved in a merger, acquisition, financing, or sale of all or a portion of its assets, your information may be transferred as part of that transaction. We will notify you via email or a prominent notice on the Platform if your information becomes subject to a different privacy policy as a result.

4. What Other Users Can See

The following information is visible to other registered users of the Platform:

• Your first name, last name, and username.
• Your profile photo and cover photo.
• Your general location (city/state derived from your zip code).
• Your riding styles and bio.
• Your garage (motorcycles you have added to your profile).
• Your posts, photos, and comments (except those posted in private groups).
• Your friend count and mutual friend connections.

The following information is not visible to other users:

• Your email address.
• Your exact zip code or precise location.
• Your direct message conversations.
• Users you have blocked or reported.
• Your account password or authentication credentials.

Content posted within private groups is visible only to active members of that group.

5. Cookies and Similar Technologies

We use cookies and similar technologies to operate and secure the Platform. Specifically:

• Authentication cookies: Used to keep you signed in between sessions. These are set by Supabase and are essential to the Platform’s operation.
• Session cookies: Temporary cookies that expire when you close your browser, used to maintain your session state.

We do not use third-party advertising cookies or tracking pixels. We do not use your browsing activity to serve you targeted advertisements.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with the Platform’s services. Specifically:

• Active accounts: We retain all account and profile data while your account remains active.
• Deleted accounts: When you delete your account, your profile is removed from public view. Some data (such as content you posted that other users interacted with, or records required for legal compliance) may be retained in anonymized or limited form for up to 90 days or as required by law.
• DMCA records: DMCA notices, counter-notices, and related records are retained for a minimum of 3 years to fulfill our legal obligations under the DMCA.
• Legal holds: If your account is involved in an active legal proceeding, we may retain relevant data until the matter is resolved.

Uploaded images and files may remain on our storage infrastructure for a brief period after deletion while propagating through our content delivery network.

7. Your Rights and Choices

7.1 Access and Correction

You can access and update most of your account information at any time through your account settings, including your name, username, profile photo, bio, zip code, relationship status, riding styles, and garage.

7.2 Account Deletion

You may delete your account at any time through your account settings. Upon deletion, your profile will be removed from public view. Please refer to Section 6 for information on what data may be retained after deletion.

7.3 Notification Preferences

You can manage your in-app notification preferences from your account settings. Certain operational and legal notices (such as DMCA takedown notifications) cannot be disabled while your account is active, as they are required communications.

7.4 Content Removal

You may delete your own posts, photos, and comments at any time. Deleted content is removed from public view immediately. If your content was removed due to a DMCA takedown and you believe the removal was in error, you have the right to submit a counter-notice.

7.5 Data Requests

To request a copy of the personal information we hold about you, or to request deletion of your data beyond what is available through your account settings, please contact us at legal@bikerornot.com. We will respond to verifiable requests within 30 days.

8. California Privacy Rights (CCPA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (“CCPA”) and the California Privacy Rights Act (“CPRA”), including:

• Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you.
• Right to Delete: You have the right to request deletion of personal information we have collected, subject to certain exceptions.
• Right to Correct: You have the right to request correction of inaccurate personal information.
• Right to Opt Out of Sale or Sharing: We do not sell or share your personal information with third parties for advertising purposes. No opt-out is required, but you may contact us to confirm.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

To exercise your California privacy rights, please contact us at legal@bikerornot.com. We will verify your identity before processing your request.

9. Data Security

We take reasonable technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encrypted transmission of data over HTTPS/TLS.
• Row-Level Security (RLS) policies on our database to ensure users can only access data they are authorized to see.
• Separation of service-level (administrative) credentials from user-facing authentication.
• Passwords are never stored in plaintext — authentication is handled by Supabase Auth using industry-standard hashing.

No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security. If you believe your account has been compromised, please contact us immediately at support@bikerornot.com.

10. Children’s Privacy

BikerOrNot is intended solely for users 18 years of age and older. We do not knowingly collect, solicit, or maintain personal information from anyone under 18. If we learn that we have inadvertently collected personal information from a person under 18, we will delete that information and terminate the associated account promptly. If you believe we may have information from or about a minor, please contact us at legal@bikerornot.com.

11. Third-Party Services and Links

The Platform may contain links to third-party websites or services not operated by BikerOrNot. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing any personal information.

Our use of third-party infrastructure services (Supabase, Vercel) means your data may be processed and stored on systems subject to those providers’ privacy and security policies. We have selected providers that offer strong data protection commitments consistent with our obligations to you.

12. International Users

BikerOrNot is operated from the United States, and our infrastructure is hosted in the United States. If you access the Platform from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country. By using the Platform, you consent to the transfer of your information to the United States.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the “Effective Date” at the top of this page and, where appropriate, by sending an email to the address associated with your account or displaying a prominent notice on the Platform.

Your continued use of the Platform after any changes to this Privacy Policy constitutes your acceptance of the updated policy. We encourage you to review this policy periodically.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please contact us:

We will respond to all verifiable privacy requests within 30 days. For security purposes, we may need to verify your identity before processing certain requests.