Privacy Policy

Last updated: [date]

1. Information We Collect

OwnRecord collects information you provide when creating an account, cataloging items, and using features of the service. This includes:

• Account information: name, email address, password (hashed)
• Inventory data: items, photos, documents, values, locations
• Usage data: IP address, browser type, pages visited, actions taken
• Payment information: handled by Stripe, we do not store card details

2. How We Use Your Information

We use the information we collect to:

• Provide the OwnRecord service to you
• Process payments and manage subscriptions
• Send you account-related emails (verification, password reset, notifications)
• Improve the service
• Comply with legal obligations

3. Your Rights (GDPR & CCPA)

You have the right to:

• Access: Request a copy of all data we hold about you
• Portability: Export your data in a machine-readable format (available in Backup & Restore)
• Correction: Edit any incorrect information through your account
• Deletion: Delete your account and all associated data (Settings → Data & Privacy → Delete Account)
• Objection: Opt out of non-essential communications in Notification Preferences
• Restriction: Pause processing of your data by disabling your account

4. Data Sharing

We do not sell your personal information. We only share data with:

• Service providers: Stripe (payments), SMTP provider (emails)
• Legal authorities: when required by law
• Household members: data you explicitly share via household collaboration

5. Data Security

We use industry-standard security practices including encrypted passwords, HTTPS connections, CSRF protection, rate limiting, and optional two-factor authentication.

6. Data Retention

We retain your data as long as your account is active. Trashed items are permanently deleted after 30 days. When you delete your account, all personal data is removed within 30 days except where legally required to retain it.

7. Cookies

We use essential cookies for authentication and session management. We do not use advertising or tracking cookies.

8. International Transfers

Your data is stored on servers in the United States. By using OwnRecord, you consent to this transfer.

9. Children

OwnRecord is not intended for users under 13 years of age. We do not knowingly collect data from children.

10. Contact Us

For privacy-related questions, contact: privacy@ownrecord.com

11. Changes to This Policy

We will notify you of material changes to this policy via email or in-app notification.