Privacy Policy

1. The Short Version

We collect the minimum we need to run RaceAlly, we use it only to run RaceAlly, we share it only with the service providers that power the Platform, and we never sell it. There is no targeted advertising and no third-party ad tracking on RaceAlly — not on any profile, and categorically never on a youth profile. The rest of this policy is the detail behind that sentence.

2. Information We Collect

Account information: when you are invited into the private beta and create an account, your email address and sign-in credentials are collected and managed by Clerk, our authentication provider, along with the profile details you choose to add.

Waitlist and inquiry submissions: when you join the waitlist or send an inquiry, we collect your name, email address, and any company, role, or message details you include. These are stored in our database, hosted on Supabase.

Content you post: racer profiles, photos, results, media kits, deliverable proofs, and anything else you publish on the Platform.

Usage data: standard technical information generated when you use the Platform — such as pages visited, device and browser type, and approximate region — used to keep the Platform secure and working.

3. How We Use It, and Why That Is Allowed

We use your information to operate the Platform and your account, to respond to waitlist requests and sponsorship or driver inquiries, to display the content you choose to publish, to keep the Platform secure and prevent abuse, and to send you the communications described in Section 8. In plain English, our legal bases are: performing our agreement with you (running the account and Platform you signed up for), our legitimate interest in operating a safe and functional service (security, abuse prevention, responding to inquiries), your consent where we ask for it (marketing email, SMS, and anything involving a young racer), and compliance with legal obligations.

4. Who We Share It With

We share personal information only with the service providers that process it on our behalf to run the Platform: Vercel (hosting), Supabase (database), Clerk (authentication), Stripe (payment processing, when fan support goes live), and Resend (transactional email, when live). Each processes data under its own contractual obligations to us and only for the service it provides.

We do not sell personal information, we do not share it for targeted advertising, and we do not allow third-party advertising trackers on the Platform. We may disclose information if required by law, to protect the safety of users (especially minors), or as part of a corporate transaction — in which case this policy continues to apply to it.

5. How Long We Keep It

We keep personal information only as long as needed for the purpose it was collected. Our working retention schedule: account data is retained for the life of the account and then cleared after deletion on a rolling basis, targeting 90 days (to allow recovery and removal from backups); waitlist and inquiry submissions are retained for 24 months from last contact; and data relating to young racers is governed by the stricter rules in our Youth Racer & Guardian Policy and is deleted promptly on a guardian’s request. Records we are legally required to keep (for example, payment and tax records) are retained for the legally required period.

6. Children and Young Racers

Grassroots racing is full of young drivers, and we built RaceAlly to handle that responsibly. For racers under 13, we only ever collect information from the parent or legal guardian — never from the child. The child never creates an account, never logs in, and never submits anything to us. The guardian is the sole account holder and decides exactly what appears on the profile. We never serve behavioral or targeted advertising on youth profiles, and we require verifiable parental consent before a youth profile exists at all. The complete rules — including consent, data minimization, and one-email deletion — are in our Youth Racer & Guardian Policy.

7. Your Rights and Choices

You can access, correct, or delete your personal information at any time by emailing Chase@FarrisFactory.com — and we honor those requests for everyone, regardless of where you live. If you are a resident of California, Texas, or another state with a comprehensive privacy law, you may have additional rights (such as data portability, the right to know categories of data collected, and the right to non-discrimination for exercising your rights), and we will honor them as applicable law requires. We will verify your identity before acting on a request and respond within the timeframe the applicable law sets.

8. Email and Text Messages

We comply with CAN-SPAM: every marketing email we send includes a working unsubscribe mechanism honored within 10 business days, accurate header and sender information, and our postal contact information. Transactional and account-related messages (such as security notices) are not marketing and may be sent as needed to operate your account.

We send SMS messages only with your prior express written consent, and you can revoke that consent at any time by any reasonable means — replying STOP, emailing us, or telling us in any way that identifies you. Message and data rates may apply per your carrier.

9. Security

We protect personal information with industry-standard measures: encryption in transit (TLS) and at rest, access limited to those who need it to operate the Platform, authentication handled by a dedicated provider (Clerk) rather than homegrown password storage, and payment data handled exclusively by Stripe so card numbers never touch our servers. No system is perfectly secure, but we design so that a single failure exposes as little as possible.

10. If Something Goes Wrong

If a data breach affects your personal information, we will notify you and the relevant authorities without undue delay, consistent with applicable breach notification laws, and tell you plainly what happened, what data was involved, and what we are doing about it.

11. Changes to This Policy

We will update this policy as the Platform evolves — including before fan support payments go live. Material changes will be announced by email to account holders or by notice on the Platform before they take effect, and the effective date above will be updated. We will never retroactively weaken protections for data already collected without asking for consent.

12. Contact

Privacy questions, requests, or complaints: Chase@FarrisFactory.com. GoGeno LLC d/b/a RaceAlly, Arizona, United States. See also our Terms of Service.