Privacy Policy

1. Introduction

AIpraisal ("Company," "we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, applications, and services (collectively, the "Service").

Please read this Privacy Policy carefully. By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, do not use the Service.

This Privacy Policy may change from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

2. Information We Collect

2.1 Information You Provide to Us

We collect information you voluntarily provide when using the Service:

• Account Information: When you create an account, we collect your email address, password (encrypted), and optional profile information such as your full name.
• Project and Item Data: Information you enter about appraisal projects and items, including item names, descriptions, categories, and notes.
• Images: Photographs you upload for item identification and analysis.
• Search Queries: Keywords and search terms you enter when researching comparable items.
• Payment Information: If you subscribe to a paid plan, payment details are collected and processed by our third-party payment processor. We do not store complete credit card numbers on our servers.
• Communications: Information you provide when you contact us for support or feedback.

2.2 Information Collected Automatically

When you access the Service, we automatically collect certain information:

• Device Information: Browser type, operating system, device type, and unique device identifiers.
• Usage Data: Pages visited, features used, time spent on the Service, and interaction patterns.
• Log Data: IP address, access times, referring URLs, and error logs.
• Cookies and Similar Technologies: We use cookies, local storage, and similar technologies to enhance your experience and collect usage information (see Section 8).

2.3 Information from Third Parties

We may receive information from third-party services integrated with AIpraisal:

• Marketplace Data: Product listings, prices, and seller information from various online marketplaces and sales databases.
• AI Services: Analysis results and generated content from AI providers (Anthropic Claude).
• Visual Search: Image recognition results and similar item matches from visual search services.

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 Providing and Improving the Service

• Create and manage your account
• Process your uploaded images for AI analysis and item identification
• Search for comparable items across marketplaces
• Generate AI-assisted valuations and analysis
• Store and organize your projects and items
• Generate reports and documentation
• Process payments and manage subscriptions
• Improve and optimize the Service based on usage patterns

3.2 Communications

• Send account-related notifications (verification, password reset, security alerts)
• Respond to your inquiries and support requests
• Send service updates and important notices
• With your consent, send marketing communications about new features or services

3.3 Security and Compliance

• Detect, prevent, and address fraud, abuse, or security issues
• Enforce our Terms of Service and other policies
• Comply with legal obligations and respond to lawful requests
• Protect the rights, property, and safety of AIpraisal and our users

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

4.1 Service Providers

We share information with third-party service providers who perform services on our behalf:

• Supabase: Database hosting, authentication, and file storage
• Anthropic (Claude): AI analysis and content generation
• Search APIs: Marketplace search and visual search services
• Stripe: Payment processing, subscription billing, and fraud prevention
• Hosting Providers: Cloud infrastructure and content delivery

These providers are contractually obligated to use your information only to provide services to us and to maintain appropriate security measures.

4.2 AI Processing

4.3 Payment Processing

4.4 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency), including to:

• Comply with a legal obligation
• Protect and defend the rights or property of AIpraisal
• Prevent or investigate possible wrongdoing in connection with the Service
• Protect the personal safety of users or the public

4.5 Team and Organization Data Sharing

If you are part of a team or organization account:

• Organization administrators can view all projects, items, and activity within the organization
• Data you create within an organization account is owned by and shared with that organization
• Your name and email may be visible to other members of your organization
• If you leave an organization, your access to organization data will be revoked, but the data itself remains with the organization
• Organization administrators may export or delete organization data, including your contributions

4.6 Business Transfers

If AIpraisal is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will provide notice before your information becomes subject to a different privacy policy.

5. Data Storage and Security

5.1 Data Storage

Your data is stored on secure servers provided by our hosting partners. We use industry-standard cloud infrastructure with data centers located in the United States.

5.2 Security Measures

We implement appropriate technical and organizational security measures to protect your information, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure password hashing using industry-standard algorithms
• Row-level security policies in our database
• Regular security assessments and monitoring
• Access controls limiting employee access to personal data
• Secure authentication mechanisms

5.3 Security Limitations

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security and are not responsible for the actions of third parties who may gain unauthorized access.

6. Data Retention

6.1 Active Accounts

We retain your information for as long as your account is active or as needed to provide you with the Service. This includes your account information, projects, items, and uploaded images.

6.2 Account Deletion

When you delete your account, we will delete or anonymize your personal information within 90 days, except where we are required to retain certain information for legal, accounting, or business purposes.

6.3 AI Processing Data Retention

6.4 Retention for Legal Purposes

We may retain certain information for longer periods if required by law, to resolve disputes, enforce our agreements, or protect our legal rights. This may include transaction records, communication logs, and security-related data.

7. Your Rights and Choices

7.1 Access and Portability

You have the right to access the personal information we hold about you. You can view and download your data through the Service settings, or contact us to request a copy of your data in a portable format.

7.2 Correction

You can update or correct your account information at any time through your account settings. If you believe any information we hold about you is inaccurate, please contact us.

7.3 Deletion

You can delete your account at any time through the Service settings. Upon deletion, we will remove your personal information as described in Section 6. You can also request deletion of specific data by contacting us.

7.4 Marketing Communications

You can opt out of marketing communications at any time by clicking the "unsubscribe" link in our emails or by updating your communication preferences in your account settings. Note that you may still receive transactional or account-related communications.

7.5 California Residents

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information held by us
• Right to opt-out of sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your privacy rights

7.6 European Residents

If you are a resident of the European Economic Area (EEA) or United Kingdom, you have additional rights under GDPR:

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent at any time
• Right to lodge a complaint with a supervisory authority

8. Cookies and Tracking Technologies

8.1 What Are Cookies

Cookies are small data files stored on your device when you visit a website. We use cookies and similar technologies (local storage, session storage) to operate and improve the Service.

8.2 Types of Cookies We Use

• Essential Cookies: Required for the Service to function, including authentication and security cookies. These cannot be disabled.
• Functional Cookies: Remember your preferences and settings to enhance your experience.
• Analytics Cookies: Help us understand how users interact with the Service so we can improve it.

8.3 Managing Cookies

Most web browsers allow you to control cookies through their settings. You can set your browser to refuse all cookies or to indicate when a cookie is being sent. However, some features of the Service may not function properly if you disable cookies.

9. Children's Privacy

The Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

If we discover that we have collected personal information from a child under 13, we will take steps to delete that information as quickly as possible.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country.

If you are located in the EEA or UK, we ensure that transfers of personal data to countries outside the EEA/UK are protected by appropriate safeguards, such as standard contractual clauses approved by the European Commission.

By using the Service, you consent to the transfer of your information to the United States and other countries where we and our service providers operate.

11. Third-Party Services and Subprocessors

The Service integrates with various third-party services (subprocessors) that help us provide, maintain, and improve the Service. Each third-party service has its own privacy policy governing the use of your information.

11.1 Subprocessor List

The following is a list of our current subprocessors:

11.2 Privacy Policy Links

• Supabase: supabase.com/privacy
• Anthropic: anthropic.com/privacy
• Stripe: stripe.com/privacy
• Vercel: vercel.com/legal/privacy-policy

11.3 Third-Party Links

When you click on links to third-party websites or marketplaces from within the Service, you are subject to their privacy policies. We are not responsible for the privacy practices of third-party websites.

12. Do Not Track Signals

Some browsers include a "Do Not Track" (DNT) feature that signals to websites that you do not want your online activity tracked. Because there is no universally accepted standard for how to respond to DNT signals, we do not currently respond to DNT browser signals. However, you can manage your cookie preferences as described in Section 8.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last updated" date at the top of this page
• Sending you an email notification for significant changes
• Displaying a prominent notice within the Service

You are advised to review this Privacy Policy periodically for any changes. Changes are effective when posted on this page. Your continued use of the Service after any changes indicates your acceptance of the updated Privacy Policy.

14. Contact Us

If you have any questions about this Privacy Policy, your personal data, or would like to exercise your privacy rights, please contact us:

15. Privacy Policy Summary