Privacy

What we collect

• Email address — required for account creation, magic-link sign-in, and account-recovery notifications.
• Sign-in identity — when you sign in with Google or Apple we receive your name and email but no other profile data.
• Home location (optional) — if you set a "home" location in onboarding it's stored as a lat/lon pair so we can rank sales by distance from that point.
• IP-derived approximate location — used to sort anonymous browse results by distance. Not stored.
• Push subscriptions (optional) — if you enable Web Push we store the browser-issued subscription record.
• Payment information — handled entirely by our payment processor; we never see your card number. We store a customer reference and your current subscription tier.
• AI usage history — per-user counts and timestamps of AI valuations + sale-analyze runs, used for quota enforcement and per-user cost telemetry.
• Submitted content — sales you submit, photos you upload, and reports you file are stored and displayed publicly once approved.

Who we share with

We share information with third-party service providers only as needed to deliver the Service. These typically include:

• Hosting, content delivery, and network security
• Payment processing and subscription billing
• Transactional email (sign-in links, receipts)
• Error monitoring and product analytics
• Image storage

All providers process data on our behalf under their own privacy and security commitments. Item identification and pricing run on our own self-hosted AI models, so your photos and listing data are not sent to any third-party AI provider. We don't sell personal data and we don't share with advertisers.

Cookies

We use a small number of cookies and similar browser storage to keep you signed in, remember your preferences (like theme), and — only if you opt in — to collect anonymous product analytics. You can decline analytics from the banner on your first visit and the Service works the same.

Deleting your account

Email [email protected] from the address on your account and we'll delete it within 7 days. Deletion removes your user record, push subscriptions, saved searches, and submitted sales. Aggregate analytics (per-day signup counts etc.) remain because they don't identify you.

GDPR & CCPA

If you're in the EU, EEA, or California, you have the right to access, correct, or delete your personal data. Email [email protected] and we'll respond within 30 days. We don't sell personal information, so there's no opt-out-of-sale flow to implement.

Note: this is plain-English guidance for launch. Full GDPR compliance (DPIA, EU Standard Contractual Clauses for third-party processors, granular data-export endpoint) is on the roadmap before we publicly market in the EU.

Changes to this policy

We'll update the "Last updated" date above and post an in-app notice for material changes. Continued use after a change means you accept the updated policy.