Privacy Policy

Robinson & Associates Tech Solutions LLC (“we,” “us,” or “our”) operates Caribbean RaceHub at caribbeanracehub.com and the Caribbean RaceHub mobile application (collectively, the “Platform”). This Privacy Policy explains how we collect, use, share, and protect your personal information when you use the Platform.

By creating an account or using our services, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Platform.

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

• Full name and email address
• Password (stored securely as a hash by Supabase Auth — we never see your plaintext password)
• Phone number (optional, used for SMS notifications)

1.2 Driver Profile

If you create a driver profile, we collect:

• Display name and nickname
• Island / country of origin
• Bio and social media links (optional)
• Profile photo / avatar

1.3 Vehicle Information

• Vehicle make, model, and year
• Vehicle photos

1.4 Race Data

• Elapsed time (ET), trap speed, 60-foot time, reaction time
• Time slip photos uploaded as verification

1.5 Event Registration

• Racing class selection and vehicle
• Phone number for event communications
• Crew name (optional)

1.6 Automatically Collected Information

• IP-based location: We use your IP address to detect your country/island for pre-selecting your location. This is done via ip-api.com and Vercel geolocation headers. We do not store your IP address long-term.
• Analytics: We use Vercel Analytics, which is privacy-focused and does not use cookies or track individual users across sites.
• Mobile app GPS location (opt-in):The mobile app offers an opt-in GPS switch (default OFF) on the run submission form and DA Calculator to compute accurate density altitude. When enabled, your device’s current coordinates are sent to the Open-Meteo elevation/weather service for a one-time lookup and are not storedby RaceHub — only the derived conditions (density altitude, temperature, humidity, pressure) are saved with your run. Open-Meteo’s own data retention policy applies to anything logged on their end.

2. How We Use Your Information

We use your information to:

• Operate, maintain, and improve the Platform
• Display your driver profile, vehicles, and race times on public leaderboards
• Process event registrations and send event-related communications
• Send SMS notifications about events and registrations (with your consent)
• Send transactional emails (account verification, password resets)
• Detect and prevent fraud, abuse, and policy violations
• Respond to support requests and feedback
• Pre-select your island based on IP geolocation for convenience

3. Third-Party Services & Data Sharing

We do not sell your personal information. We share data with the following service providers solely to operate the Platform:

4. Data Storage & International Transfers

Our Platform serves users across the Caribbean region. Your data is processed and stored on servers located in the United States through our service providers (Supabase, Vercel). By using the Platform, you consent to the transfer and processing of your data in the United States, which may have different data protection laws than your country of residence.

We take reasonable measures to protect your data during transfer and storage, including encryption in transit (TLS/HTTPS) and at rest.

5. Data Retention

We retain your information as follows:

• Account data: Retained as long as your account is active. Deleted within 30 days of account deletion request.
• Race times and leaderboard data: Retained indefinitely as part of the public racing record, even after account deletion, unless you choose full erasure or request removal (see Section 6).
• Uploaded photos: Deleted when you remove them or within 30 days of account deletion.
• Event registration data: Retained for the duration of the event plus 12 months for administrative purposes.

6. Account Deletion & Data Retention

You can permanently delete your account at any time — in the mobile app under Settings → Account → Delete Account, or on the web at caribbeanracehub.com/account/delete. Deletion takes effect immediately and cannot be undone.

6.1 What Deletion Removes

When you delete your account, we permanently erase:

• Your account and login credentials
• Email address and phone number
• Profile photo, bio, and social media links
• Notifications, device tokens, and saved settings
• Contact details on your event registrations

6.2 What Remains as Public Race Records

Race results (driver name, vehicle, times, and event placings) are published records of public motorsport competition events — like printed timesheets from a race meet. We retain and publish them on the basis of legitimate interest and freedom of information, independent of your account. Many racers on the Platform appear in results without ever having created an account.

If you delete your account, your account and personal contact details are permanently erased, but your racing name and published race results remain publicly available on leaderboards and event results — the same way results appear for racers who never created an account.

6.3 Full Erasure Option

If you want everything gone, the deletion flow includes an option to also permanently delete your race results, vehicles, and racing profile. Choosing this removes your runs from leaderboards and completed event results.

Additionally, anyone — with or without an account, including racers whose results were imported from public event records — may request removal of their results by contacting legal@caribbeanracehub.com. We honor these requests unless the integrity of a specific event record requires retention, in which case results may be anonymized instead.

7. Your Rights

You have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Update or correct inaccurate information through your profile settings or by contacting us.
• Deletion: Request deletion of your account and associated data.
• Data portability: Request your data in a machine-readable format.
• Opt out of SMS: Reply STOP to any SMS message or update your notification preferences.

To exercise any of these rights, contact us at legal@caribbeanracehub.com. We will respond within 30 days.

8. For Users in the European Union (GDPR)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Legal basis: We process your data based on your consent (account creation), contractual necessity (providing the service), and legitimate interest (fraud prevention, platform improvement).
• Right to object: You may object to processing based on legitimate interest.
• Right to restrict processing: You may request we limit how we use your data.
• Supervisory authority: You have the right to lodge a complaint with your local data protection authority.

9. For California Residents (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with specific rights:

• Right to know: You may request disclosure of the categories and specific pieces of personal information we have collected.
• Right to delete: You may request deletion of your personal information, subject to certain exceptions.
• Right to non-discrimination: We will not discriminate against you for exercising your CCPA rights.
• No sale of data: We do not sell personal information to third parties.

To make a CCPA request, email legal@caribbeanracehub.com with the subject line “CCPA Request.”

10. Children’s Privacy

The Platform is not intended for users under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at legal@caribbeanracehub.com and we will promptly delete such information.

11. Security

We implement reasonable security measures to protect your personal information, including:

• Encryption in transit (HTTPS/TLS) and at rest
• Secure password hashing via Supabase Auth
• Row-level security (RLS) policies on our database
• Bot protection via Cloudflare Turnstile
• Regular security reviews of our codebase

While we strive to protect your data, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the “Last updated” date. Your continued use of the Platform after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, contact us: