Privacy Policy

Information We Collect

Account Information

• Email address and name (when registering or using Google OAuth)
• Hashed password for email/password accounts — we never store plain-text passwords
• Credit balance and purchase history

Appraisal Data

• Images you upload for appraisal
• Item descriptions and additional context you provide
• AI-generated appraisal results

Technical Data

• IP address, browser type, and device information
• Session tokens stored in secure cookies
• Anonymous usage analytics (pages visited, features used)

How We Use Your Information

• Service Delivery — to process your images and generate appraisals
• Account Management — to manage your account and credit balance
• Payments — to process credit purchases via Polar
• Communication — to send transactional emails (receipts, password resets)
• Security — to detect and prevent fraud and abuse
• Improvement — to improve our AI models using anonymized, aggregated data with no personal identifiers

We do not sell your personal data to third parties.

Information Sharing

We do not sell your personal information. We may share data in these limited circumstances:

• Service Providers — hosting, payment processing (Polar), and email services, under strict confidentiality agreements
• AI Processing — images and descriptions are sent to OpenRouter and the underlying AI provider to generate appraisals
• Legal Requirements — if required by law or valid legal request
• Business Transfers — in the event of a merger or acquisition, your data may transfer to the new entity

Data Security

• All data in transit is encrypted via SSL/TLS
• Passwords are stored as secure hashes — never in plain text
• Access to personal data is restricted on a need-to-know basis
• Uploaded images are processed and deleted within 30 days unless retained as part of your appraisal history

No security system is impenetrable. We cannot guarantee absolute security, but we take reasonable and industry-standard measures to protect your data.

Your Rights

Depending on your jurisdiction, you may have the right to:

• Access — request a copy of personal data we hold about you
• Correction — update inaccurate information in your account settings
• Deletion — request deletion of your account and associated data (you can also do this directly from the Profile page)
• Portability — receive your data in a machine-readable format
• Objection — object to processing based on legitimate interest
• Opt-Out — unsubscribe from marketing emails (service-critical emails cannot be opted out)

To exercise these rights, contact us at privacy@worthlens.ai. We aim to respond within 30 days.

Data Retention

• Account data — retained while your account is active
• Uploaded images — deleted within 30 days unless saved to your appraisal history
• Transaction records — retained for 10 years for legal and accounting purposes
• Server logs — retained for 30 days
• Anonymized analytics data — may be retained indefinitely

Cookies

We use cookies for authentication, preferences, and anonymous analytics. For full details, see our Cookie Policy.

Children's Privacy

WorthLens.ai is not directed at children under 16. We do not knowingly collect personal data from minors. If you believe a child has registered, please contact us and we will delete the account promptly.

International Data Transfers

Your data may be processed in countries outside your country of residence (including the US, where our infrastructure providers operate). Where data is transferred outside the EEA, appropriate safeguards such as Standard Contractual Clauses are in place.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy and, for significant changes, via email. Continued use of the Service after changes are posted constitutes acceptance.

Contact

Privacy inquiries: privacy@worthlens.ai
General support: support@worthlens.ai
Response time: we aim to respond within 3 business days.