Privacy Policy

This Privacy Policy explains how Cameron Gupta LLC, the owner and operator of camerongupta.com, may collect, use, retain, disclose, and otherwise process information when you use the website, the camerongupta iPhone application, Digital Library, Research, GupWire, GupVault, GupGlobe, payments, or related support services.

By using camerongupta.com, submitting information, attempting a transaction, or completing a transaction, you acknowledge this Privacy Policy.

For Research requests and correspondence, see Section 32: Research Inquiries and Correspondence.

Current iPhone application

The camerongupta iPhone application in build 28 and later includes Homepage, Digital Library, Research, GupWire, GupGlobe, GupVault, and GupShop Account. Embedded account creation, sign-in, sign-out, recovery-code use, and password resets use the existing account service. GupGlobe loads the separately hosted OSIRIS application and third-party public feeds. Research sends search terms and selected topic identifiers to our server and opens an editable request in your chosen message application when you select Submit request; you complete sending there. GupWire uses the shared server feed cache described in Section 33. Support GupShop and GupCoin contribution pages use the existing website Stripe checkout under the disclosures below. Build 27 excludes those payment flows and GupWire. Build 28 does not introduce StoreKit purchases or subscriptions. Existing transaction records may still be processed to maintain accurate account entitlements, and earlier app versions may differ.

1. Scope of This Privacy Policy

This Privacy Policy applies to information collected through or in connection with camerongupta.com, the camerongupta iPhone application, GupShop-branded pages or functionality, website pages, forms, user accounts, the Digital Library and digital document delivery functionality, the GupVault, the GupGlobe and its data layers, map imagery, and camera imagery, checkout flows, donation pages, transaction pages, Stripe-hosted payment pages or payment links, App Store in-app purchases where offered, payment interfaces, communications, security tools, and other online or offline interactions connected to Cameron Gupta LLC.

This Privacy Policy does not apply to websites, platforms, payment pages, applications, or services operated by third parties except to the extent Cameron Gupta LLC receives information from, discloses information to, or otherwise processes information with those third parties in connection with its business operations.

2. Who Is Responsible

Cameron Gupta LLC, a Florida limited liability company, operates camerongupta.com, GupShop, and the camerongupta iPhone application. It determines how personal information is used for the purposes described here and is the controller where that term applies under privacy law.

Privacy and account requests can be sent to camjgupta@gmail.com or Cameron Gupta LLC, 320 Central Avenue Unit 432, Sarasota, FL 34236. The contact route is available to website visitors and app users.

3. Information We Process

The information involved depends on the feature you use. The categories below distinguish information supplied to our service from information handled locally on your device or directly by a provider. The account form does not require every category listed here.

• Account and authentication: your email address, optional name, Stripe customer identifier, password and recovery-code hashes, temporary reset-token hash and expiry, signed session data, and any pseudonymous account identifier used for app entitlements or the saved library.
• Payments and GupVault: transaction identifiers, date, amount, currency, base contribution, the 40% website Platform & Operations Fee, payment status, limited card details and billing information returned by the provider, receipts, refunds, disputes, GupCoin quantities, and epoch-allocation records. If an Apple transaction exists, its signed transaction and renewal information and account-association token may also be processed.
• Digital Library: account-verification status, document-access designations, source documents and their names, online listing or file requests, and account-derived PDF unlock credentials. Saved sources, cached unlock passwords, and temporary unlocked copies on an iPhone are described in Section 7.
• Technical and security information: requests reaching our hosting or API infrastructure may include IP address, requested URL, timestamp, response status, browser and operating-system information, referring information, and error or security diagnostics. A network address may reveal an approximate location. These logs are not a complete record of activity performed offline on your device.
• GupGlobe: requests to its wrapper and separately hosted OSIRIS application may include selected layers, map areas, search terms, media requests, and information submitted to its tools, as described in Section 8. Map coordinates identify a requested view and do not necessarily identify your location.
• Communications and submissions: information you choose to send in a support, refund, privacy, licensing, or other request, including contact details, relevant documents, and correspondence. A phone or postal address is processed if you provide it or it is included in a relevant payment, support, or legal record.

4. Stripe Payment Processing Information

Cameron Gupta LLC may use Stripe to process payments, facilitate checkout, calculate and display payment amounts, provide payment records and any Stripe-hosted receipt links, maintain transaction records, review transaction risk, process refunds, and handle payment disputes.

When you make or attempt to make a payment through camerongupta.com, Stripe may collect, receive, process, store, transmit, verify, and use payment-related information, including payment card information, billing information, transaction metadata, device information, IP address, security signals, and other information necessary or appropriate for payment processing, compliance, risk management, security, and legal obligations.

Cameron Gupta LLC may receive from Stripe limited payment-related information, including transaction identifiers, payment status, payment amount, payment method type, limited card details, billing details, receipt information, dispute information, refund information, risk indicators, and related transaction metadata. Stripe’s collection, use, processing, storage, and disclosure of information are governed by Stripe’s own terms, policies, and privacy notices.

• Stripe Privacy Policy: https://stripe.com/privacy
• Stripe legal terms: https://stripe.com/legal

5. Service Providers and Infrastructure

GupFont is a custom vector font developed with generative AI assistance. Its published font files do not run an AI model or send account information or document contents to an AI service. GupFont font files are served through our website hosting infrastructure; camerongupta app versions that include GupFont bundle the font files for native interface use. The font itself does not set cookies, track activity, or transmit personal information. Web font requests may appear in ordinary hosting and security logs described in this policy. Displaying GupFont does not require a request to an external font provider. The OSIRIS application embedded in GupGlobe retains its own typography and provider practices described below.

Cameron Gupta LLC uses a small set of service providers to operate camerongupta.com. These providers process information as needed to provide their services and are subject to their own terms and privacy policies:

• Stripe processes payments and stores payment records. Stripe is also the platform on which Cameron Gupta LLC maintains its customer records, which include the account email address and optional name, one-way password and recovery-code hashes, password-reset token hashes and expiration times, account and transaction identifiers, payment history, Digital Library entitlement designations, and GupVault contribution and epoch-allocation records. Stripe Privacy Policy: https://stripe.com/privacy
• Vercel provides website hosting, serverless infrastructure, and security and operational logging for camerongupta.com and the separately hosted copy of OSIRIS displayed within GupGlobe. Vercel Privacy Policy: https://vercel.com/legal/privacy-policy
• GitHub provides private source control and stores Digital Library source PDFs in Cameron Gupta LLC’s private repository so they can be bundled with authenticated camerongupta.com server routes. GitHub Privacy Statement: https://docs.github.com/en/site-policy/privacy-policies/github-general-privacy-statement
• Cloudflare provides the private transactional storage used for verified App Store purchase records through a SQLite-backed Durable Object. Cloudflare Privacy Policy: https://www.cloudflare.com/privacypolicy/
• Apple operates the App Store. The camerongupta application in build 28 and later includes the website Support GupShop and GupCoin contribution flows through Stripe checkout; build 27 excludes those payment flows. Build 28 does not introduce StoreKit purchases or subscriptions. Apple may still process renewals, refunds, revocations, or other status changes for historical purchases. Cameron Gupta LLC receives Apple-signed transaction and renewal data needed to verify existing entitlement periods, grace periods, refunds, revocations, and pseudonymous account associations. Private transactional storage retains verified status events, ownership bindings, and account-specific entitlement indexes. Apple Privacy Policy: https://www.apple.com/legal/privacy/
• Resend delivers GupShop’s transactional emails, including branded receipt emails and password-reset emails. To deliver these emails, Resend may receive the recipient’s email address; receipt information, including the entered amount, the Donation or GupCoin and Platform & Operations Fee itemization, any GupVault epoch, GupCoin, and worker details, limited card details such as card brand and last four digits, the receipt number, and any receipt link; the password-reset URL, including its time-limited reset token; and, when applicable, the customer’s PDF unlock password and a link to the Digital Library. Resend Privacy Policy: https://resend.com/legal/privacy-policy
• Apple Pay and Google Pay are optional wallet payment methods processed through Stripe. Use of a wallet is also subject to the applicable wallet provider’s terms and privacy practices. Apple Privacy Policy: https://www.apple.com/legal/privacy/ · Google Privacy Policy: https://policies.google.com/privacy
• GupGlobe displays a copy of the open-source OSIRIS application hosted by Cameron Gupta LLC on Vercel, inside an embedded frame. The outer page is branded GupGlobe; the embedded application retains OSIRIS branding and attribution. OSIRIS source project: https://github.com/simplifaisoul/osiris. The hosted application uses MapLibre and third-party map, imagery, public data, camera, and media services described in the GupGlobe Information section.
• Map, imagery, camera, video, news, and font providers used by the embedded application may receive requests directly from your browser, including your IP address, browser and device information, the requested resource or map area, and referring-origin information. Other data is retrieved through the hosted application’s server routes. Each provider’s processing is governed by its own terms and privacy policies; the providers and resources contacted depend on the selected layers and features.

6. Account Information and Sign-In Data

camerongupta.com offers optional user accounts. If you create an account, Cameron Gupta LLC collects the email address you provide, the name you optionally provide, and security values derived from your password and recovery code. Passwords and recovery codes are protected with one-way cryptographic hashing; Cameron Gupta LLC does not store, and cannot recover, your plain-text password or recovery code.

Account records, including hashed security values, are stored within Cameron Gupta LLC’s customer records maintained with Stripe, the payment processing platform described in this Privacy Policy. If you make a payment while signed in, that payment is linked to your account so that you can view your own payment history.

When you sign in, camerongupta.com sets a session cookie named gupshop_session so that you stay signed in as you move between pages. This cookie is strictly necessary for authentication and security, is not used for advertising, and carries the HttpOnly, Secure, and SameSite=Lax attributes. Its maximum duration is 30 days, unless it is removed earlier because you sign out or because of an account or security action such as a password change or reset. The cookie holds a digitally signed session payload containing the Stripe customer ID for your account, your email address, your optional name, a password-version value used to invalidate older sessions when your password changes, and the session’s issue and expiration times. The payload is signed to prevent tampering, not encrypted, and it never contains your plain-text password or recovery code.

If email-based password reset is available and you request it, Cameron Gupta LLC stores only a one-way hash of the reset token and its expiration time in your customer record maintained with Stripe. The reset email, sent through Resend, contains a password-reset link that includes the raw, time-limited reset token and your account email address; the token is single-use and expires 30 minutes after it is issued. You may also reset your password using your recovery code. You can initiate account deletion from the Delete account section of your signed-in account page in the website or app after confirming your password and entering DELETE. A private pending-deletion record may temporarily retain the Stripe customer identifier needed to confirm and recover a two-phase deletion; the identifier is removed from that record after deletion is confirmed. Confirmed deletion removes the GupShop account record and its account-specific App Store entitlement index. Payment processors may retain transaction records under their own policies and requirements. Pseudonymous App Store transaction events and ownership safeguards remain to honor refunds and revocations, prevent replay or duplicate grants, preserve authoritative historical transaction status, and respond to support or entitlement questions.

7. Digital Library Information

camerongupta.com may offer an optional Digital Library through which eligible signed-in account holders may view or download protected digital documents. When the Digital Library is used by you or made available to you, Cameron Gupta LLC may collect, generate, receive, store, and use information in connection with it, including your account and payment-verification status; records of which documents are made available to your account, which may be stored as access designations within Cameron Gupta LLC’s customer records maintained with Stripe; records of document listing, view, and download requests, including the document requested, date and time, result, IP address, and related device, browser, and technical information captured in server, security, and hosting logs; and records relating to receipts, support requests, or communications that reference the Digital Library.

Documents delivered through the Digital Library may be protected for your account. Supported PDFs are 50 MiB or less and are individually password-protected using a customer-specific PDF unlock password. The unlock password is cryptographically derived for your account when needed and is not stored in plain text by Cameron Gupta LLC on its servers; it is displayed to you on your library page when you are signed in and your account has active, verified library access with one or more documents available to it, and, where that feature is enabled, may be included in receipt emails sent to the email address associated with your signed-in payment. The website and app build 28 and later provide a Copy password control; choosing it places the PDF password on the device clipboard under your browser or operating system’s clipboard controls. Library access remains account-specific, revocable, and subject to payment verification and document entitlements. You are responsible for keeping your document password confidential, and Cameron Gupta LLC may use Digital Library records to investigate suspected unauthorized access, unauthorized sharing, or other misuse.

When an eligible protected PDF is downloaded in the camerongupta iPhone application, the application may use the account-specific password to decrypt the file locally on your device. For a password-protected file, the saved source remains password-protected, while the application creates an unlocked working copy as needed so the file can be viewed from the private Digital Library without another manual PDF-password prompt or sent to Apple’s share sheet. Working copies remain in application-controlled storage with iOS file-protection controls while the in-app preview is open and are designed to be removed when that preview closes. The application also clears working copies left by an interrupted prior launch when its document-access feature initializes again. The optional camerongupta App Lock controls access to the application interface but does not add PDF password encryption to an exported copy.

The application receives a pseudonymous, account-specific library namespace derived from the account’s customer identifier and uses it to separate locally saved source files, Keychain entries, and temporary working copies between accounts on the same device. The namespace is a local partitioning identifier, not a substitute for server-side authentication or entitlement verification. A confirmed sign-out completed in the iPhone application hides that account’s saved shelf while preserving its protected source files and associated Keychain credentials for a later sign-in to the same account; signing out on another device or browser may not immediately hide or remove offline content on this device. Another account cannot list or open those files through the application. A confirmed account deletion completed through the iPhone application is designed to remove the matching local source files, Keychain entries, and temporary working copies. Older unscoped downloads that predate this separation mechanism are quarantined rather than assigned to the next account and may need to be downloaded again.

After a protected PDF is successfully unlocked, the application may save the password in the iOS Keychain so that the same saved document can open automatically in the future, including when the device is offline. The Keychain entry is scoped to that account and saved document and uses Apple’s When Unlocked, This Device Only accessibility class, meaning it is available to the application only while the device is unlocked and is not configured to migrate to another device. A later suspension, revocation, entitlement change, or server-side document removal stops future server access as applicable but may not automatically delete or disable a source file or Keychain entry already stored on your device. The password is not included in the unlocked exported PDF. Deleting the saved document through the Saved Library also deletes its associated Keychain entry. Because Keychain storage is managed by iOS, removing the application itself may not immediately remove an existing Keychain entry; any such entry remains scoped to the identifier of the previously saved document.

Native document-title search and PDF text search are performed on the device using the available document list and downloaded PDF. The reader keeps PDF search terms and results in working memory for the current reader session rather than saving a search history. Page bookmarks and the last viewed page number are saved beside the downloaded source in the account-specific application directory, using iOS complete file protection and an exclusion from device backup. These reading records are not uploaded or synchronized by camerongupta. Deleting that download removes its bookmark and reading-position file; a confirmed account deletion completed in the app is designed to remove the matching account directory, including those records. A sign-out hides the account-scoped shelf and retains its saved files and reading records for a later sign-in to the same account. Files exported to another destination remain subject to that destination’s retention and deletion controls.

If you use Share Document, the camerongupta iPhone application gives Apple’s share sheet an unlocked copy. Cameron Gupta LLC does not receive the destination or recipient selected in the share sheet and does not create or retain a new server-side copy as a result of the local unlock or share action. Once the copy is accepted by Files, Mail, Messages, a cloud-storage provider, another application or device, or a recipient, that destination may store, synchronize, retain, use, or disclose it under its own settings, terms, and privacy practices. Cameron Gupta LLC does not control the destination and cannot retrieve or delete the exported copy for you.

Digital Library source files and delivery records may be stored, processed, and served using the hosting, storage, email, and infrastructure providers described in this Privacy Policy. Digital Library information may be used to provide and individualize library access, verify eligibility, deliver and protect documents, secure the website, prevent misuse, respond to support requests, review refund requests, respond to payment disputes, enforce the Terms and Conditions, comply with legal obligations, and for the other purposes described in this Privacy Policy. Server, security, and hosting logs may record authenticated download, library-listing, and online credential-refresh requests. The application does not intentionally report document-specific local-open or local-delete events or the destination or recipient selected in Apple’s share sheet; however, an online credential refresh initiated while opening a saved protected PDF may appear in logs as a general Digital Library request. A support request or information supplied by another party may also disclose local activity to Cameron Gupta LLC.

8. GupGlobe Information

Cameron Gupta LLC offers GupGlobe on the camerongupta.com website as a signed-in page containing an embedded frame of its separately hosted copy of OSIRIS, an open-source global information application. The GupGlobe wrapper checks your gupshop_session cookie before displaying the page. The embedded application runs at a separate Vercel-hosted origin and does not receive that cookie, your GupShop account identifier, or your account email from the wrapper. Its own address and public data routes may also be reached directly without GupShop sign-in. GupGlobe is also available inside the current camerongupta iPhone application after sign-in, using the same separately hosted OSIRIS frame. Its live feeds require an internet connection.

When you open GupGlobe, your browser contacts both camerongupta.com and the separately hosted OSIRIS application. Their hosting and security logs may record requested addresses, dates and times, results, IP addresses, and device and browser information. Requests made within OSIRIS may include layer selections, map coordinates or search terms, public camera or media addresses, and information you submit to an available tool. The embedded application uses its own server routes for many public feeds and may load map tiles, imagery, fonts, camera images, video players, or other media directly from third-party services.

OSIRIS automatically uses approximate IP-based location to center the map. Its location route may send your network address to ipapi.co, freeipapi.com, or ip-api.com to obtain an approximate location; this does not require a browser device-location prompt. Other location or device features depend on browser support, permissions, and the restrictions applied to the GupGlobe frame, and may be unavailable. Coordinates sent for a map search or route describe the places selected within the application and need not be your physical location.

Public feed providers may include OpenSky Network and adsb.fi for aircraft; aisstream.io where credentials are configured for vessels; CelesTrak and SatNOGS for satellite information; USGS, NASA, and NOAA for natural events and environmental information; GDELT for news and events; abuse.ch for reported malware; and public camera operators and broadcasters. A provider contacted by the hosted application generally receives the server’s network address and the requested resource or query. A provider contacted directly by your browser receives your network address and related browser information, may receive referring-origin information, and may use its own cookies or similar technologies. Camera images and video may be loaded through server routes or directly from their operators or embedded players; they are not limited to the previous camerongupta.com still-image relay.

The hosted OSIRIS application can use local browser storage for drawings and interface style preferences. These records belong to that application’s browser origin and are not saved to your GupShop account. Layer selections may appear in page addresses; share links created inside OSIRIS can also contain map latitude, longitude, and zoom. Those addresses may appear in browser history, hosting logs, or a recipient’s browser when shared. A GupGlobe wrapper link requires GupShop sign-in, while a link directly to the separately hosted application does not use that sign-in gate. The upstream project’s Docker analytics middleware is not included in this hosted copy.

The information displayed on the GupGlobe is third-party public data and may relate to other people, including aircraft identifiers and callsigns, vessel identifiers and names, camera images or streams of public places that may incidentally show people, vehicles, or license plates, links to news articles, and network addresses reported by threat-information providers. Cameron Gupta LLC does not collect this information from those people, does not verify it, does not combine it with customer records, and does not control it; it remains subject to the provider’s terms. You may view this information only for your personal, non-commercial use as described in the Terms and Conditions and may not use it to identify, locate, track, monitor, surveil, harass, or harm any person, to build any database or profile, or for any purpose prohibited by the provider or applicable law. Cameron Gupta LLC may use GupGlobe request records to investigate suspected misuse.

Feed responses may be cached in server memory, hosting caches, or the browser according to the route and provider. Refresh intervals, coverage, and retention of cached responses vary; some results may be stale, sampled, empty, or unavailable. Optional features that require provider credentials, a scanner backend, an intelligence service, or an AI service may not be configured. Request logs follow the ordinary retention of the server, security, and hosting logs described in the Data Retention section. GupGlobe information may be used to provide and secure the GupGlobe, enforce request limits, prevent misuse, diagnose technical issues, respond to support requests, enforce the Terms and Conditions, comply with legal obligations, and for the other purposes described in this Privacy Policy.

9. Payment Descriptions, Donation Wording, and Fee Records

The website, checkout flow, Stripe-hosted page, receipt, payment metadata, or related payment records may describe an entered base amount as a Donation or use similar payment-purpose wording.

The checkout flow may add a separate customer-visible 40% Platform & Operations Fee to the base amount you enter. Cameron Gupta LLC may collect, receive, generate, store, and use records showing the entered amount, the Fee, and the final amount charged for payment processing, receipts, accounting, customer support, refund review, dispute response, legal compliance, and business recordkeeping.

Unless Cameron Gupta LLC expressly states otherwise in a signed written agreement or separate written policy, Donation wording does not mean that a payment is tax-deductible, charitable, a political contribution, a pledge, a grant, an investment, a loan, a deposit, an escrowed amount, a stored-value balance, or an ownership interest.

10. Sensitive Information and Device Authentication

Do not send full payment-card numbers, card security codes, account passwords, recovery codes, or sensitive personal documents by support email. Payment credentials should be entered only in the applicable payment-provider interface. If a service request requires sensitive information, provide only what is necessary for that request.

Optional camerongupta App Lock uses Apple’s local device-owner authentication. iOS evaluates Face ID, Touch ID, or a device passcode as available; the app receives the authentication result and does not receive your face or fingerprint template or device passcode. App Lock is a device feature and does not replace server-side account or document-access checks.

Information you voluntarily provide remains subject to the purposes and retention rules in this policy. Providing sensitive information is not blanket consent for unrelated use or disclosure.

11. Children’s and Minors’ Privacy

The services are intended for adults: you must be at least 18 and have reached any higher age of majority that applies where you live. We do not knowingly collect personal information from children or offer a child-directed service.

If you believe a child has provided personal information, contact camjgupta@gmail.com. We will investigate and take appropriate steps, including deletion where required, while retaining only information that must lawfully be kept. The adult-use rule is not a representation that every visitor’s age has been verified.

12. Sources of Information

We receive information directly from you when you register, authenticate, pay, request content, or contact us; from requests automatically sent by your browser or app; and from the payment, hosting, storage, and email providers identified in Section 5. We may receive relevant transaction, dispute, or legal information from a bank, processor, adviser, or authority.

GupGlobe displays public and third-party feed information. Public imagery may incidentally show people, vehicles, or identifiers; it is not information you submitted to a GupShop account. Local device processing and external provider requests are described separately below.

13. How We Use Information

We use information for the specific functions described in this policy. Access is limited to the people and providers who need it for an operational, support, security, or legal purpose.

• Accounts and security: create and authenticate accounts, verify credentials, recover access, maintain sessions, prevent abuse, and carry out account deletion.
• Payments: process and confirm transactions, show payment history, issue receipts, maintain accounting records, assess fraud signals, and handle refunds, chargebacks, or disputes.
• Digital Library and GupVault: determine account eligibility, apply document entitlements, protect and deliver PDFs, separate saved library data on a device, and report contribution and epoch-allocation records.
• GupGlobe: serve its wrapper, load selected public feeds and media, process available map or search tools, and manage technical errors or request limits.
• Support and service operation: answer requests, investigate errors, maintain the service, and send necessary account, security, transaction, or policy communications.
• Legal obligations and rights: retain required records, respond to valid legal process, and establish or defend legal claims. Additional uses requiring a new notice or consent will follow those requirements.

14. Legal Bases and Consent

Where a law such as the GDPR applies, processing may be necessary to perform our agreement with you, comply with legal obligations, or pursue legitimate interests in security, fraud prevention, service operation, and resolving claims, subject to your rights and the applicable balancing requirements. We rely on consent where the law requires it for the particular use.

Reading this notice, visiting the website, or using an account is not blanket consent to every possible use of personal information. Where we rely on consent, you may withdraw it by contacting us or using an available setting. Withdrawal does not affect earlier lawful processing or processing supported by another applicable legal basis.

15. Cookies and Tracking Technologies

camerongupta.com currently uses the strictly necessary gupshop_session authentication cookie described in this Privacy Policy; Stripe payment technology, including Stripe-hosted checkout pages, Stripe.js, and wallet interfaces, which may use cookies or similar technologies for payment functionality, security, and fraud prevention under Stripe’s own policies; and ordinary hosting, security, and server logs. The install banner uses a localStorage timestamp named gupshop-install-banner-dismissed-v1 to remember dismissal for seven days; the stored timestamp can remain until you clear site data or dismiss the banner again. This preference is stored in your browser and is not sent to our server by the banner. The OSIRIS application embedded in GupGlobe uses local browser storage for drawings and interface preferences, and third-party maps, imagery, cameras, and media may use their providers’ cookies or similar technologies, as described in the Service Providers and Infrastructure and GupGlobe Information sections. camerongupta.com does not currently use advertising pixels, targeted advertising, cross-context behavioral advertising, conversion tracking, or nonessential tracking cookies.

If Cameron Gupta LLC materially changes the tracking technologies used on camerongupta.com, this Privacy Policy and any legally required consent or opt-out controls will be updated before those technologies are activated. You may be able to disable or limit cookies through your browser settings; disabling the strictly necessary authentication cookie will prevent you from staying signed in. Do Not Track has no uniform implementation standard in this service. Where an applicable law requires us to honor Global Privacy Control or another recognized opt-out signal for covered processing, we will do so. Clearing local storage removes local preferences; it does not delete server account or payment records.

16. Analytics and Advertising

Cameron Gupta LLC does not currently use third-party analytics platforms, advertising networks, or behavioral advertising technologies on camerongupta.com. Cameron Gupta LLC does not currently sell personal information and does not currently use personal information for targeted or cross-context behavioral advertising. Operational insight comes from ordinary server logs, security logs, payment records, and diagnostics. If this changes materially, this Privacy Policy and any legally required notices, consents, or opt-out controls will be updated before new technologies are activated.

17. When We Disclose Information

We disclose relevant information to the providers identified in Section 5 as needed for hosting, authentication records, payment processing, entitlement storage, email delivery, and service operation. A provider may act on our behalf for some functions and as an independent business for others, such as a payment processor’s own fraud-prevention or legal obligations.

We may share relevant information with professional advisers for accounting or legal matters; with banks and payment networks to process or investigate a transaction; and with authorities or other parties where necessary to comply with law, protect safety, or establish or defend rights. We limit disclosures to information relevant to the purpose and applicable legal requirements.

If you choose to export a document, follow an external link, or interact with embedded media, the destination may receive information directly under its own privacy practices. Business transfers are addressed in Section 19. Your private documents or support messages are not made public merely because you supplied them to us.

18. Sale, Sharing, and Targeted Advertising

Cameron Gupta LLC does not currently sell personal information or use or disclose it for targeted or cross-context behavioral advertising. Necessary service-provider disclosures and direct requests to embedded services are described in this policy; those providers’ own practices also apply.

If a future practice would constitute a regulated sale, sharing, or targeted advertising, we will provide the required notice and consent or opt-out mechanism before beginning it. A future policy revision does not retroactively authorize a use inconsistent with commitments made when information was collected.

19. Business Transfers

If the business is involved in a merger, acquisition, financing, reorganization, bankruptcy, or asset transfer, relevant information may be disclosed for due diligence and transferred as part of that transaction, subject to appropriate confidentiality and applicable law.

A transfer does not remove existing privacy commitments or permit materially different uses without the notices, choices, or consent required by law.

20. Legal Compliance and Protection of Rights

We may preserve or disclose relevant information in response to valid legal process, to meet legal duties, to investigate fraud or a security incident, or to establish, exercise, or defend legal claims. This includes cooperating with payment providers about disputed transactions.

This section does not authorize indiscriminate disclosure. The purpose, scope, and retention of information remain subject to applicable law and the commitments in this policy.

21. Data Retention

Cameron Gupta LLC retains personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including operating accounts and entitlements, processing and documenting transactions, providing support, maintaining security, responding to refunds or disputes, meeting accounting or tax requirements, complying with law, and establishing or defending legal claims. Retention periods vary by the type and sensitivity of the information, the operational or legal need for it, applicable limitation periods, and the retention practices of the service providers identified in this Privacy Policy.

Closing or deleting an account does not necessarily delete records that Cameron Gupta LLC or its service providers must or may lawfully retain, such as payment records, fraud-prevention records, security logs, refund and dispute records, or pseudonymous App Store transaction history. Where continued retention is no longer reasonably necessary, Cameron Gupta LLC will delete, de-identify, or otherwise dispose of information in accordance with its operational processes and applicable law. This policy does not promise one fixed deletion period for every record or provider. Contact us about the retention of a particular record; legally required records may remain after account deletion, but are not retained merely to reactivate the deleted account.

A source file saved inside the camerongupta iPhone application remains in the application’s local storage until you delete it, complete an in-app account deletion that triggers matching local cleanup, remove the application and its data, or the operating system removes the application data. Redownloadable saved sources are marked for exclusion from device backup where iOS honors that setting, and unlocked working copies are kept in temporary application storage that is not ordinarily included in device backups. An unlocked working copy created for preview or sharing is designed to be removed from application-controlled storage when the preview closes, with interrupted-launch working copies cleared when the document-access feature next initializes. An associated Keychain password is removed when you delete the saved document through the Saved Library; as explained above, iOS may retain a Keychain item after the application itself is removed. A copy exported through Apple’s share sheet is retained according to the settings and policies of the destination you select; Cameron Gupta LLC does not control or set that destination’s retention period.

22. Security and Its Limits

Protections in the service include one-way hashes for account credentials, signed authentication sessions, authenticated and account-specific document access, rate limits on relevant endpoints, and private service-provider storage. Supported iPhone features use the app sandbox, iOS file protection, and device-only Keychain storage described above.

No internet service, password-protected PDF, device, or storage system can be guaranteed secure. These controls are not a promise of end-to-end encryption, anonymity, immunity from compromise, or remote deletion of every copy. Access on an already unlocked or compromised device and copies exported to another destination have separate risks.

If you suspect unauthorized access, contact us and change your account password as appropriate. We will assess reported incidents and provide notices required by applicable law. We do not need your password or recovery code to receive a security report.

23. Administrative Access and Entitlement Management

Authorized Cameron Gupta LLC administrators may use a protected administrative interface to support and secure customer accounts. Through that interface, an administrator may search for an account by email address; view the customer’s name, email address, Stripe customer identifier, payment-verification status, and Digital Library entitlements; and assign or restrict access to particular library documents. Administrative access is used for support, security, payment-verification, refund, dispute, and access-management functions, and administrative activity may be recorded in operational logs.

24. Third-Party Websites and Services

camerongupta.com may contain links to third-party websites, services, payment pages, social media platforms, embedded content, or tools, including links opened from the GupGlobe to news articles on third-party news websites, to USGS earthquake event pages and GDACS disaster report pages, and to the camera pages of public transport agencies, as well as the separately hosted OSIRIS application and map tiles, imagery, cameras, and media that it loads from third-party providers. Cameron Gupta LLC is not responsible for the privacy practices, security practices, content, terms, policies, or conduct of third parties. Your interactions with third parties are governed by their own terms and privacy policies.

25. Your Choices and Privacy Requests

You may contact camjgupta@gmail.com to request access to, correction of, or deletion of your personal information. Identify the account email and the nature of the request; do not include your password, recovery code, or full payment details. We may verify your identity using information reasonably necessary to protect the account.

You can initiate account deletion from the signed-in Account page on the website or in the camerongupta app: open Delete account, confirm your password, and enter DELETE. If you cannot sign in, use password recovery or contact us for help. Deletion is different from signing out, removing the app, requesting a refund, or canceling an Apple subscription.

Depending on where you live and which laws apply, you may also request a portable copy, restrict or object to certain processing, withdraw consent, use an authorized agent, appeal a denied request, or complain to the relevant privacy regulator. We will respond within the period required by the applicable law, explain any permitted denial or extension, and provide an applicable appeal route. You will not be unlawfully discriminated against for exercising a protected right.

Browser settings can clear cookies, site data, and the install-banner preference; blocking the authentication cookie prevents sign-in. In the app, delete saved documents through Saved Library to remove their associated local passwords. Manage exported copies in the destination you chose.

26. Florida Residents

Florida privacy and consumer protections apply according to their statutory scope. Some laws apply only to businesses meeting particular thresholds; this policy does not represent that every Florida privacy statute applies to Cameron Gupta LLC.

Use the contact route in Section 25 for a request or concern. Where an applicable law grants access, correction, deletion, appeal, or other rights, those rights and the law’s response requirements control.

27. Other U.S. State Residents

Residents of other states may have additional rights when the relevant state law applies to the business and the processing involved. These may include knowing the categories, sources, purposes, and recipients of information, access and portability, correction, deletion, and opting out of a regulated sale, targeted advertising, or certain profiling.

We do not currently sell personal information or use it for targeted advertising. Where a state law requires a recognized opt-out preference signal to be honored, we will honor it for processing covered by that law. You may submit requests, authorized-agent documentation, or an appeal of a response through the contact route in Section 25.

28. International Users and Transfers

The service is operated from the United States. Information may be processed in the United States or other countries where the identified providers operate. Those countries may have different privacy laws from your country.

Where international-transfer rules apply, transfers must use the safeguards, adequacy decisions, contractual measures, or other lawful mechanisms required by those rules. Use of the website alone is not a substitute for a required transfer safeguard. Contact us for information about a transfer relevant to your account.

Where applicable, you may complain to the data-protection authority where you live, work, or believe a violation occurred, in addition to contacting us.

29. Email and Communications

We use contact information for support, account recovery, receipts, transaction status, security, and necessary legal or policy notices. Branded transaction and reset emails are delivered through Resend; messages and attachments you send to our contact email are processed by the email services used for that correspondence.

If you receive marketing communications from us, you can ask to stop them by replying or using any provided unsubscribe control. Essential account, security, legal, and transaction messages may still be sent while relevant. A reset or receipt email can contain sensitive account or document-access information, so keep it private.

30. Updates to This Privacy Policy

The Last Updated date identifies this revision. We may update the notice to explain changes in the service or legal requirements. Material changes will receive any additional notice or consent required by applicable law before the affected processing begins.

A revised notice does not retroactively remove privacy commitments or itself supply consent to a new use. Information remains subject to applicable law and the commitments that applied when it was collected.

31. Contact Information

For privacy, account-data, or security questions, contact Cameron Gupta LLC at camjgupta@gmail.com or by mail at 320 Central Avenue Unit 432, Sarasota, FL 34236. Website: https://www.camerongupta.com

If your request concerns an account, include its email address and a description of the issue. Do not send credentials, full card numbers, or sensitive documents that are unnecessary for us to understand the request.

32. Research Inquiries and Correspondence

Research is available at https://www.camerongupta.com/research and in the current camerongupta iPhone application. Signed-in users can explore 1 Million+ topics organized into 100+ subject topics, each with one specific question and an editable request. Search terms and selected area or topic identifiers are sent to our server to return matching results. Request addresses and technical information may appear in the ordinary hosting and security logs described in this policy. Access requires a free GupShop account and the existing authentication cookie described in Section 6; no qualifying payment, donation, GupCoin, or Digital Library entitlement is required. Each topic’s Submit request button uses a mailto link to open an editable request in your chosen message application addressed to camjgupta@gmail.com. The page has no research submission form, file-upload facility, or payment collection. You must send the request from that application for Cameron Gupta LLC to receive it. Your messaging provider may handle or save an unsent request under its own settings and privacy practices. Ordinary website requests remain subject to the hosting and security logging described in this policy; Research does not add a separate advertising or analytics tracker.

If you choose to send an inquiry, we receive the information in your request, including your sender name and email address, any organization you optionally identify, the subject and scope of your request, reference links, relevant region or time period, requested deadline and output, any budget you choose to provide, and any other details or attachments you send. Correspondence can also include follow-up messages, agreed engagement terms, research materials and deliverables, and ordinary message metadata. Provide only information reasonably needed to explain the request and materials you are authorized to share; the initial inquiry does not require passwords, full payment-card details, or sensitive personal records.

We use Research correspondence to evaluate and clarify a request, respond, agree on scope and any quote, carry out and deliver an accepted engagement, maintain related business records, provide support, and address legal or dispute matters where necessary. Our receiving address is hosted by Google’s Gmail service, which processes messages, attachments, and associated message information. Your chosen message application and sending provider also process the correspondence under their own practices. Google Privacy Policy: https://policies.google.com/privacy. This request route is separate from GupShop’s Resend-delivered account and receipt emails.

Sending Research material does not publish it on camerongupta.com or add it to the shared Digital Library. We do not treat an inquiry as permission to publish private correspondence, client files, or completed research. Any agreed publication or broader reuse requires separate permission. Information is otherwise handled under the service-provider, disclosure, and security provisions of this policy, and sending an inquiry does not itself create a legally privileged relationship.

Research requests, attachments, engagement records, and deliverables follow the necessity-based retention principles in Section 21; no single fixed retention period applies to every request or record. Deleting a GupShop account does not automatically remove separate request correspondence. To ask about access, correction, or deletion of Research information, contact camjgupta@gmail.com and identify the relevant correspondence. Requests are handled as described in Section 25, subject to applicable law and any continuing lawful retention need.

33. GupWire News Reader

GupWire is a public feature on the website and in camerongupta iPhone build 28 and later that does not require an account or payment. Our server retrieves a fixed list of public RSS/Atom sources and caches shared news results. While the reader is open and active, it checks for updated results every 30 seconds; publisher feeds may update less often. These feed requests do not forward your GupShop account, cookies, payment information, Library documents, or search terms to publishers. Feed providers receive our server’s ordinary request information.

Search and filter choices are applied to the news loaded in your browser and can be reflected in a shareable page address. Page addresses, IP addresses, and ordinary technical request data may appear in the hosting and security logs already described in this policy. Avoid entering confidential information into search fields. GupWire adds no advertising tracker, brokerage connection, portfolio storage, or separate account database.

Following a publisher, project, education, or license link sends you to that external service under its privacy practices. GupWire does not embed publisher pages or tracking images in its news cards. Following an internal Research link may carry a topic search through sign-in to the existing Research service; its server searches and optional requests remain governed by Section 32. The Digital Library and GupGlobe retain their existing access rules and provider disclosures. Build 27 does not include GupWire; build 28 and later uses the same reader, shared cache, and external links as the website.