Privacy Policy

This Privacy Policy explains how BE VISTA, LLC ("Vista," "we," "us," or "our") collects, uses, discloses, stores, retains, and otherwise processes personal information when people visit, access, or use our website, mobile applications, software, services, public and private galleries, marketplace tools, facial search features, payment flows, customer support channels, communications, and other products or features that link to this Privacy Policy (collectively, the "Services").

This Privacy Policy applies to all categories of users of the Services, including visitors, buyers, subjects appearing in images, prospective customers, event participants, photographers, independent contractors, referral partners, event organizers, and other business contacts, except where a separate notice is expressly provided for a specific service or relationship.

By using the Services, creating an account, uploading content, submitting a selfie or other image for photo matching, purchasing content, participating in an event workflow, or otherwise interacting with Vista, you acknowledge the practices described in this Privacy Policy, subject to your rights under applicable law.

1. Scope and role of Vista

Vista operates a technology marketplace and related tools that help photographers distribute photographs and videos, help individuals discover and purchase content, and help authorized parties search or organize images. Depending on the context, Vista may act as a controller of personal information, a service provider or processor for certain workflows, or an intermediary that facilitates a transaction between photographers and buyers.

This Privacy Policy covers both public photography and private-event workflows. It also applies to images and metadata submitted by photographers, images and selfies submitted by users for matching, payment and payout information processed through service providers, and information collected automatically through websites, apps, and connected tools.

2. Categories of information we collect

We collect information directly from you, automatically from your device or browser, from photographers and event organizers, from payment providers and other vendors, from business partners and integrations, and from other lawful sources. The categories below are intended to be broad and may include similar, related, or successor categories as our Services evolve.

A. Identity and account information

• Name, display name, username, date of birth, email address, telephone number, mailing address, billing address, business name, tax classification, emergency contact or guardian information when provided, and account credentials.
• Government-issued identification information, business registration information, tax forms, identity-verification data, age-verification data, or similar onboarding information where required for payouts, fraud prevention, compliance, or platform trust and safety.
• Profile information, biography, social media handles, portfolio links, preferences, interests, communication settings, language, region, and any information you choose to include in your account or communications.

B. Payment, payout, tax, and transaction information

• Order history, invoices, receipts, product selections, amounts charged, subscription plans, commissions, discounts, credits, tokens, promotions, refunds, disputes, and chargeback information.
• Payout and tax information for photographers and other payees, including Stripe Connect account information, payment processor identifiers, bank-account related data handled by processors, tax forms such as W-9 or W-8BEN, and year-end tax reporting information.
• Fraud-screening signals, risk scores, transaction authentication data, and related compliance data generated by us or our service providers.

C. Technical, device, and usage information

• IP address, device identifiers, browser type, operating system, app version, crash logs, session logs, timestamps, clickstream data, referral URLs, cookie identifiers, pixels, software development kit identifiers, and similar diagnostic data.
• Information about how you use the Services, including pages viewed, searches made, gallery interactions, download activity, purchase activity, favorites, saves, cart activity, message activity, referral activity, and settings choices.
• Approximate location derived from IP address, precise geolocation if you enable it, and embedded metadata such as EXIF data, timestamps, device model, serial information, focal length, and location metadata associated with uploaded images or devices.

D. Content and communications

• Photographs, videos, image crops, thumbnails, previews, edits, captions, tags, event names, bib numbers, notes, comments, support tickets, emails, SMS messages, survey responses, recordings or transcripts of support interactions, and other content you upload, send, receive, or store through the Services.
• Metadata and information associated with content, including file names, event identifiers, album identifiers, photographer identifiers, upload times, device information, image quality signals, and moderation or review notes.

E. Biometric and image-derived information

• If you upload a selfie, portrait, or other image for face search, matching, grouping, or identification, we may process the image and generate biometric identifiers, face geometry, face vectors, templates, embeddings, or similar derived data to help locate, cluster, recommend, or verify photos associated with you.
• When photographers upload images that contain people, we may automatically detect faces, bodies, bib numbers, jerseys, apparel, backgrounds, or other visual elements, and we may process image-derived signals to improve search, ranking, quality control, deduplication, moderation, and product functionality.
• We may also process image-derived data to determine whether a person is likely the same person across multiple photos, to reduce duplicates, to help organize galleries, or to improve platform performance, subject to applicable law and user choices.

F. Marketing, partner, and future-feature information

• Referral and affiliate information, campaign responses, waitlist submissions, contest entries, ambassador information, partner identifiers, and other marketing or partnership data.
• Inferences, predictions, classifications, or scores about preferences, likely interests, likely event participation, likely purchase intent, quality ratings, fraud risk, safety risk, or account reliability.
• Any other information you provide to us, that we lawfully receive from third parties, or that we collect through future or successor features of the Services.

3. Sources of information

• Directly from you when you register, purchase, upload, message us, enroll in face search, apply as a photographer, join a waitlist, complete forms, or otherwise interact with us.
• From photographers, event organizers, partners, referees, affiliates, or other users who upload content or metadata that includes you or relates to you.
• From payment providers, identity-verification providers, cloud-storage providers, email and messaging vendors, analytics tools, fraud-prevention vendors, advertising vendors, and similar service providers.
• Automatically from your browser, device, cookies, SDKs, APIs, logs, and comparable technologies.
• From public sources, social platforms, business databases, government records, and other lawful third-party sources.

4. Facial recognition, biometric processing, and image matching

Vista may offer or enable photo-matching and search experiences that rely on selfie upload, facial analysis, or other image matching methods. Where these features are offered, Vista may collect a source image from you, process that image, generate a biometric template or other matching data, compare that data against images in our systems, and return likely matches or recommendations.

We may use biometric and image-derived information to operate the Services, authenticate requests, prevent fraud, reduce irrelevant search results, improve search accuracy, moderate content, support customer service, and improve our recognition or organization tools. We do not intentionally use biometric templates for unrelated targeted advertising or to infer protected characteristics.

Photos uploaded by photographers may include faces of registered users, non-registered individuals, minors, spectators, and other persons. Unless a person has affirmatively enrolled in a matching workflow or another lawful basis applies, Vista does not promise to persistently identify or profile that person across contexts.

By uploading selfies, portraits, or enrollment images to Vista, you authorize Vista to process those images and related biometric data for the purposes described in this Privacy Policy and in the product flow through which the data is collected. If you are a parent or legal guardian acting for a minor, you represent that you are authorized to provide any required consent.

Photographers who upload content to Vista acknowledge that Vista controls the biometric processing it performs within the Services and that uploaded content may be processed using automated image-recognition and related tools.

5. How we use information

• Provide, operate, maintain, secure, debug, and improve the Services.
• Create and manage accounts; verify identity; authenticate users; and administer access controls.
• Process purchases, subscriptions, payouts, refunds, taxes, and related accounting functions.
• Enable photographers to upload, organize, distribute, market, and sell content.
• Enable users to discover, search for, match, preview, license, purchase, download, or otherwise access content.
• Operate face search, bib search, metadata search, and similar discovery tools.
• Analyze quality, detect duplicates, rank results, personalize galleries, and improve marketplace relevance.
• Prevent fraud, abuse, unauthorized access, chargebacks, spam, harassment, scraping, infringement, or other harmful activity.
• Communicate with you about accounts, transactions, updates, security alerts, support, policies, promotions, surveys, referrals, and product announcements.
• Comply with legal obligations, enforce our contracts, protect rights and safety, respond to legal process, and investigate disputes or claims.
• Develop, train, test, validate, monitor, and improve automated tools, analytics systems, search functions, moderation tools, fraud-prevention tools, and machine-learning systems related to the Services.

6. How we disclose information

We may disclose personal information to the following categories of recipients, subject to applicable law and contractual or operational safeguards:

• Service providers and processors, including payment processors such as Stripe, cloud and infrastructure providers such as AWS, storage vendors, analytics providers, email and messaging vendors, support vendors, fraud and identity vendors, and other operational vendors.
• Photographers, buyers, event organizers, and other users where disclosure is necessary to complete a requested transaction, operate a gallery, resolve a support issue, investigate a claim, or facilitate the Services.
• Professional advisors, insurers, auditors, lenders, acquirers, investors, or transaction counterparties in connection with financing, diligence, restructuring, or a merger, sale, or asset transfer.
• Government agencies, regulators, courts, law enforcement, or other third parties where we believe disclosure is required or appropriate under applicable law, legal process, or to protect rights, safety, property, or the Services.
• Marketing, referral, analytics, or advertising partners where permitted by law and our disclosures and consent mechanisms.
• Other parties at your direction or with your consent.

We do not currently state that we sell personal data for money in the ordinary sense of that phrase. However, some disclosures involving analytics, advertising, or partner tools could be characterized as a "sale," "sharing," or "targeted advertising" under certain privacy laws. Where applicable, we provide required notices and choices.

7. Cookies, pixels, SDKs, and similar technologies

We and our vendors may use cookies, pixels, local storage, SDKs, tags, and similar technologies to remember preferences, keep users signed in, measure engagement, analyze performance, prevent fraud, personalize content, attribute referrals, and deliver or measure marketing.

You may be able to control certain cookies through your browser settings, device settings, or other tools. Blocking some technologies may affect features or functionality.

8. Data retention

We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Services, complete transactions, maintain records, comply with legal obligations, resolve disputes, enforce agreements, and protect the Services.

Account information is generally retained while an account remains active and for a reasonable period afterward. Transaction and tax records may be retained for longer periods where required by law, accounting standards, tax rules, fraud-prevention needs, or audit requirements.

Uploaded content may remain stored until deleted by the photographer, removed by Vista, or otherwise expired under product rules. Backups, caches, logs, and archival copies may persist for a limited additional period.

Biometric templates or similar face-match data that we create from a user's enrollment image or selfie are retained only for as long as needed for the matching purpose, account maintenance, fraud prevention, dispute handling, and legal compliance, and will be deleted earlier upon a valid deletion request where required, or no later than when the purpose has been satisfied and continued retention is no longer reasonably necessary. Where no shorter period is required by law, we aim to delete or irreversibly de-identify such biometric matching data when the account is closed and all related obligations are resolved, or after an extended period of inactivity, whichever occurs first.

Where Delaware or another law requires a publicly available retention schedule or destruction guidance for biometric data, this Privacy Policy is intended to function as that public notice.

9. Security

We use administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, acquisition, destruction, use, modification, or disclosure. These safeguards may include access controls, encryption in transit and at rest where appropriate, logging, vendor diligence, training, monitoring, and incident-response procedures.

No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security. If you believe your account or information has been compromised, contact us immediately.

10. Children's privacy

Our Services are not intended to knowingly collect personal information online from children under 13 without any consent required by applicable law. If a child under 13 uses selfie search, matching, or other enrollment features, a parent or legal guardian must provide any legally required consent.

Photographs uploaded by photographers may include minors in public or private event contexts. The photographer and any event organizer are responsible for obtaining any permissions, releases, or notices required for photographing, uploading, selling, or licensing those images. Vista may remove content or restrict features if we believe minors' information is being processed unlawfully or inappropriately.

11. Cross-border transfers

Vista and its service providers may store or process information in the United States or in other jurisdictions where our vendors operate. By using the Services, you understand that your information may be transferred to and processed in jurisdictions with different privacy laws than your home jurisdiction, subject to applicable safeguards and contractual measures.

12. Your rights and choices

Depending on your jurisdiction and the nature of your relationship with Vista, you may have the right to request access to personal information, confirm whether we process it, correct inaccuracies, delete information, obtain a copy or portability export, opt out of certain sales, targeted advertising, or profiling activities, withdraw consent where processing is based on consent, and appeal a denial of a rights request.

You may also have choices regarding marketing emails, SMS, cookie settings, and certain face-search or matching features. You can submit privacy requests by contacting [email protected]. We may need to verify your identity and authority before completing a request.

Where required by law, we will respond within the time provided by applicable law and will explain any basis for denial. If your appeal is denied and you are a Delaware resident, you may have the right to contact the Delaware Department of Justice using the mechanism then designated by Delaware, including [email protected] if that remains the listed contact.

13. State privacy disclosures and rights

Depending on your state of residence, you may possess specific statutory rights regarding your personal information. These rights generally include the ability to confirm our processing of your data, access or obtain a portable copy of your information, and request the correction or deletion of personal data. In alignment with evolving state frameworks, Vista treats biometric identifiers (such as facial geometry used for image matching) and precise geolocation as sensitive information subject to enhanced protections and opt-out rights. We do not "sell" your personal data for monetary consideration; however, you may opt out of the processing of your data for targeted advertising or profiling where applicable by law. Vista maintains reasonable administrative and technical safeguards designed to comply with specific state standards, such as the New York SHIELD Act and the Florida Digital Bill of Rights, and we extend these fundamental privacy transparency practices to all users across the United States regardless of their specific state's current legislative status.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated version and revise the "Last updated" date. Where required by law, we will provide additional notice or obtain consent for material changes.

15. Contact information

BE VISTA, LLC
7345 W Sand Lake Rd Ste 210 Office 2371, Orlando, FL 32819, United States
[email protected]