WorkFotos LLC, a Florida limited liability company doing business as FWDLink ("Company," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, with whom we share it, and your rights regarding your personal data when you use our website at fwdlink.com and related services (collectively, the "Platform").
By using the Platform, you agree to the collection and use of information in accordance with this Policy. If you do not agree to this Policy, please do not use the Platform. This Policy should be read with our Terms of Service, Cookie Policy, and Do Not Sell / CCPA Requests page.
Age requirement (18+)
The Platform is intended only for individuals who are at least 18 years of age. Anyone under 18 is not permitted to create an account or use the Platform. By using the Platform, you represent that you are 18 or older. See Section 4 (Children's Privacy).
Public pages and profiles — public by default
Your FWDLink page and public profile — including albums, updates, and links you choose to publish — are public by default. Content you make public may be visible to anyone who visits the Platform, opened by anyone with a link you share, and indexed by search engines or otherwise discoverable.
You control what you publish and can adjust your page's visibility settings. If you are unsure whether something will be public, assume it may be visible publicly before you post.
1. Information We Collect
1.1 Account and Profile Information
- Account registration: Name, email address, and password (via Firebase Authentication).
- Profile information: Username, profile photo, bio, city or neighborhood preferences, and content you publish on your page.
- Business listings: Business name, address, phone number, website, hours, categories, and description.
- Marketplace listings: Listing title, description, price, photos, category, and location.
1.2 Payment and Payout Information
- Payment information: Billing details processed by Stripe. We do not store full card numbers — Stripe handles card data securely and provides us limited tokens and transaction details (for example, last four digits, card brand, and payment status).
- Creator / Connect payouts: When you enable payouts through Stripe Connect, Stripe may collect identity verification (KYC) information such as legal name, address, date of birth, government ID, tax identifiers (for example SSN/EIN), and bank account details. We receive status and limited account information needed to operate payouts; sensitive identity documents are primarily processed by Stripe.
- Transaction records: Amounts paid, fees, refunds, chargebacks, memberships, tips, digital products, paid messages, invoices, and related timestamps.
1.3 Identity Documents, Selfies, and Depicted-Person Records
Two separate sets of sensitive documents may be collected, and they are handled differently. Neither is ever shown on a public page, included in a share link, or visible to other users.
(a) Your own identity verification. When payouts, Stripe Connect, business verification, or fraud checks require it, we may collect a photograph of a government-issued photo identity document and a selfie taken at the time of submission. They are uploaded directly into encrypted, private storage. Sexually explicit content is not permitted on FWDLink.
- How they are analysed. Both images are screened by an automated classifier. The face in the selfie is compared with the face on the document. The date of birth is read from the labelled field on the document and used to compute your age. This analysis is performed by Amazon Rekognition and Amazon Textract, services of Amazon Web Services, acting as our service provider on our instructions. Processing takes place in the United States.
- How long the images are kept. The images are deleted as soon as a decision is reached, whether approved or declined. They are kept only while a submission is waiting on a human reviewer, and abandoned submissions expire automatically.
- What is kept. The decision, the face-comparison score, the date of birth and computed age, the classifier labels, and the last four characters of the document number.
- What is never stored. The full document number, the name and address printed on the document, the image bytes after a decision, and any biometric face template or face vector. The comparison is performed as a one-off operation; no enrolled face database is created, and your face is not used to identify you anywhere else.
- Who can see them. Only authorised reviewers, through links that expire after a few minutes. Every issuance of such a link is logged against the reviewer who requested it.
(b) Records about people appearing in content. FWDLink does not operate a depicted-person records program for sexually explicit user content, because that content is prohibited. Identity documents collected for payouts and fraud remain governed by subsection (a) and Section 6.
Retention. Identity-verification artifacts are retained as needed for fraud prevention, tax, compliance, and legal obligations. Sections 6 and 8.2 explain what that means for a deletion request.
If you appear in someone's content without consent, or believe content violates our policies, use Report Content & Takedown Requests. Related policies: Age Verification Policy and the 18 U.S.C. § 2257 Statement.
Some laws treat facial comparison and identity documents as sensitive or biometric information and require specific notice, consent, and retention limits. Where such a law applies to you, we handle this data in accordance with it, and you may contact us about your rights under section 8.
1.4 Messages and Inbox Content
- Message content: Text, media, and other content you send or receive through private messages, contact forms, support inbox, team chat, or paid/unlockable messages.
- Message metadata: Sender and recipient identifiers, timestamps, delivery/read status, conversation IDs, and payment status for paid messages.
We process message content and metadata to deliver messaging, process payments, provide support, and protect safety and integrity. We may access or review messages as described in Section 2 and in our Terms of Service. We do not claim that we never access messages.
1.5 Information Collected Automatically
- Usage data: Pages visited, features used, time spent, clicks, and search queries.
- Device information: Browser type, operating system, device identifiers, IP address, and time zone.
- Location data: City or region preferences you select; general location inferred from IP address. We do not collect precise GPS location without explicit permission.
- Cookies and tracking: As described in our Cookie Policy.
- Security signals: Bot-protection and fraud-prevention signals (for example, Cloudflare Turnstile) where enabled.
1.6 Mobile Application — Additional Data Collected
When you use the FWDLink mobile application (available on the Apple App Store and Google Play), we may collect additional data including:
- Precise GPS location: With your explicit permission, the app captures GPS coordinates at the time a photo is taken to tag it with a job address or geographic location. You may deny location access in your device settings; however, this will disable location-based features. We collect location data only when you actively use the app and grant permission.
- Photos and camera access: The app captures photos using your device camera. Photos may contain embedded metadata (EXIF data) including GPS coordinates, device model, and timestamp at the time of capture. We store photos and their metadata on our servers (AWS S3) to provide the service. You may manage which photos are uploaded or deleted.
- Weather data: When you capture a photo, the app may record current weather conditions (temperature, conditions, humidity) from a third-party weather API associated with your GPS location at the time of capture.
- Device sensors: The app may access device sensors required for photo capture and GPS tagging (camera, GPS receiver, accelerometer). We do not access sensors unnecessarily or in the background without your permission.
- Job and business data: Job addresses, client information you enter, estimate and invoice data, team member information, notes, and documents you upload to job workspaces.
- Push notifications: If you enable push notifications, we collect a device push token to deliver notifications. You may opt out of notifications in your device settings.
- Crash and diagnostics data: The app may automatically collect crash logs and diagnostic data to help us identify and fix bugs. This data is anonymized where practicable and used for improving the application.
1.7 Information from Third Parties
- Authentication providers: If you sign in with Google or another provider via Firebase, we receive basic profile information such as your name and email address.
- Payment processors: Stripe may share transaction confirmations, Connect account status, limited billing data, and risk/fraud signals with us.
- Communications you send us: Support requests, feedback, and privacy requests.
2. How We Use Your Information
We use the information we collect to:
- Create and manage your account and provide Platform features.
- Host, display, and deliver User Content you choose to publish or send.
- Deliver private messages, contact-form messages, and paid messages, and process related payments.
- Process payments, payouts, refunds, and chargebacks through Stripe / Stripe Connect.
- Verify identity and eligibility for payouts and monetization features.
- Display your business listings, marketplace listings, and profile to other users.
- Send transactional emails (account confirmation, payment receipts, listing expiration notices, security alerts).
- Send promotional communications (only with your consent where required; you may opt out at any time).
- Monitor and improve the safety, security, and performance of the Platform, including abuse, fraud, spam, and illegal-content detection.
- Enforce our Terms of Service and Acceptable Use Policy.
- Comply with legal obligations, including tax reporting where required.
- Respond to your inquiries and provide customer support.
- Analyze trends and usage to improve our services.
3. How We Share Your Information
We do not sell your personal information and we do not share personal information for cross-context behavioral advertising as those terms are commonly defined under the CCPA/CPRA. We may share your information in the following limited circumstances:
- Publicly visible content: Your username, profile photo, business listings, marketplace listings, and other content you make public are visible to other users and may be indexed by search engines. You control what information you add to your public profile and listings.
- Other users: Recipients of your messages can see message content you send them. Buyers and creators see transaction details needed to complete purchases.
- Service providers (processors): We share data with third-party vendors who assist us in operating the Platform, including:
- Google Firebase — Authentication and related backend services.
- Stripe, Inc. — Payment processing and Stripe Connect payouts / identity verification.
- Amazon Web Services (AWS) — Hosting, databases, and media storage (including S3); and, through Amazon Rekognition and Amazon Textract, automated analysis of identity documents and selfies submitted for verification and automated screening of uploaded images. See Section 1.3.
- High-risk / adult payment processors — Not used. Sexually explicit sales are not a supported product; Stripe remains the SMB payment path.
- Cloudflare — Security, bot protection (for example Turnstile), and related infrastructure where enabled.
- Email and notification providers — Transactional and account emails.
- Analytics providers — Usage analytics to improve the Platform.
- Legal requirements: We may disclose your information when required by law, subpoena, court order, or government request, or when we believe disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud or illegal content (including reports to NCMEC where applicable), or comply with applicable law.
- Business transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal data may be transferred as part of that transaction. You will be notified via email and/or a prominent notice on our Platform of any such change in ownership or uses of your personal information.
- With your consent: We may share your information for other purposes with your explicit consent.
4. Children's Privacy
The Platform is not directed to children under the age of 18, and we do not knowingly collect personal information from anyone under 18. If you are a parent or guardian and you believe a minor has provided us with personal information, please contact us immediately through Support. We will take prompt steps to delete such information from our records. This commitment is consistent with the Children's Online Privacy Protection Act (COPPA) and our 18+ eligibility rules.
5. Field Service Data and Third-Party Integrations
5.1 GPS and Location Data
GPS coordinates captured through the mobile app are stored with your photos and job records. This data is visible to you, your team members, and anyone you share job links with. We do not sell location data to advertisers or data brokers. Location data may be shared with service providers (e.g., AWS for storage) solely for the purpose of providing the service.
5.2 Weather Data Providers
Weather conditions are retrieved from third-party weather APIs. When you capture a photo with weather context enabled, your GPS coordinates are sent to the weather API to retrieve current conditions. Please review the applicable weather provider's privacy policy for their data handling practices. We do not store your GPS coordinates with the weather provider beyond what is necessary to retrieve the weather response.
5.3 Photo Metadata (EXIF)
Photos you upload may contain EXIF metadata embedded by your device, including GPS coordinates, device model, and capture timestamp. We store this metadata as part of your job documentation. When you share a client link or export photos, EXIF metadata may be visible to recipients. You are responsible for reviewing and managing metadata before sharing photos if confidentiality is required.
5.4 Client Share Links
When you generate a client share link, the linked content (photos, job documentation) is accessible to anyone who has the link. We do not collect personal information from link recipients who do not create accounts. Link recipients' IP addresses may be logged for security and fraud prevention purposes.
6. Data Retention
We retain your personal information for as long as your account is active or as needed to provide you with our services, comply with our legal obligations, resolve disputes, and enforce our agreements. When you delete your account, we will delete or anonymize your personal information within a reasonable timeframe, except as required by law or for legitimate safety, fraud, tax, or dispute-resolution purposes.
Marketplace listing data, payment and payout records, chargebacks, and tax-related records may be retained for up to 7 years (or longer if required by law). Message content is retained while needed to deliver the service and may be retained longer when related to safety investigations, legal claims, or payment disputes. Backup copies may persist for a limited period before being overwritten in the ordinary course.
Identity documents and selfies submitted for verification are deleted as soon as a decision is reached, as described in Section 1.3. What is retained is the derived result, not the image.
Stored verification results are retained as needed for fraud prevention, tax, compliance, and legal obligations. FWDLink does not operate a depicted-person records program for sexually explicit content. Records connected to a report of illegal content are preserved for as long as the law requires.
7. Data Security
We implement industry-standard security measures to protect your personal information, including encryption in transit (HTTPS/TLS), secure storage with access controls, and regular security reviews. However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security. In the event of a data breach that affects your rights and freedoms, we will notify you as required by applicable law.
8. Your Rights and Choices
8.1 Access and Correction
You may access and update most of your personal information directly through your account settings. For information you cannot update yourself, contact us at Support.
8.2 Deletion
You may request deletion of your account and personal information by contacting us at Support. We will process your request within 30 days where required by law. Please note that some information may be retained as required by law or for legitimate business purposes (for example, fraud prevention or tax records).
8.3 Marketing Communications
You may opt out of promotional emails by clicking "unsubscribe" in any marketing email or by updating your notification preferences in your account settings. You will continue to receive transactional emails (e.g., payment receipts) regardless of your marketing preferences.
8.4 Cookies
You may manage cookies through your browser settings or as described in our Cookie Policy.
9. California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including:
- Right to Know: You may request information about the categories and specific pieces of personal information we have collected about you, the categories of sources, our business purposes for collecting it, and the categories of third parties with whom we share it.
- Right to Delete: You may request that we delete personal information we have collected, subject to certain exceptions.
- Right to Correct: You may request that we correct inaccurate personal information we maintain about you.
- Right to Opt-Out of Sale / Sharing: We do not sell personal information and do not share it for cross-context behavioral advertising. You do not need to opt out, but you may still submit a request via our Do Not Sell / CCPA Requests page.
- Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.
To exercise these rights, open a ticket at Support with the subject line "CCPA Request," or use our Do Not Sell / CCPA Requests page. We will verify your identity before processing your request. Authorized agents may submit requests with proof of authorization.
10. Nevada Privacy Rights
Nevada residents may opt out of the sale of personal information. We do not sell personal information as defined under Nevada law. For inquiries, contact us at Support.
11. International Users and Transfers
The Platform is operated from the United States. If you are accessing the Platform from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States and other countries where our service providers operate, where data protection laws may differ from those in your country. By using the Platform, you consent to this transfer.
If you are in the European Economic Area (EEA), United Kingdom, or Switzerland and have questions about cross-border transfers of your data, please contact us at Support.
12. Third-Party Links
The Platform may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their respective privacy policies.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last Updated" date at the top of this page and, where required by law, by providing additional notice (such as adding a statement to our homepage or sending you a notification). Your continued use of the Platform after such changes constitutes your acceptance of the updated Policy.
14. Contact Us
If you have questions, concerns, or privacy requests regarding this Privacy Policy, please contact us:
WorkFotos LLC, dba FWDLink
2125 Biscayne Blvd, Ste 204 #21075
Miami, FL 33137-5029
Phone: +1 (305) 537-6170
Support: fwdlink.com/support
Website: www.fwdlink.com
CCPA requests: fwdlink.com/do-not-sell