Privacy Policy

1. Information We Collect

Account Information: When you create an account, we collect your email address and, if you use social login (Google Sign-In or Sign in with Apple), your name and profile information provided by those services. If you use Sign in with Apple and choose to hide your email, we receive only an Apple-provided relay address.

Photos & Content: When you upload item photos, notes, and supporting details, we store that content so we can identify the object, generate valuation reports, and let you manage those reports later.

Research Agent Usage: When you use the Research Agent feature, we process photos you submit through AI to identify and value items. These photos, item descriptions, and valuation results are stored as reports in your account. By default, reports (including uploaded photos, item identification, and valuation data) are publicly accessible at their shareable report URL. Your identity (name, email, account details) is never displayed on public reports unless you explicitly enable this in your settings. You can make any individual report private at any time, or change your default visibility setting so that future reports are private. See Section 5 for details.

Usage Analytics: We collect usage data (pages or screens viewed, features used, button taps, referral source, and campaign parameters) to understand and improve the Service. We use first-party analytics and service providers such as Vercel to process this data.

Advertising Measurement: We may use the Reddit advertising pixel to measure whether an ad led to a page visit, completed item identification, account registration, or purchase. This tool may receive the page URL, browser or device information, advertising click identifiers, and the action taken. We do not send your uploaded item photos or report contents to advertising platforms.

Device Information: We collect basic device information (device type, operating system version) for debugging and compatibility purposes.

Assistant Connections: If you connect an assistant such as ChatGPT, Claude, or Codex, we store the connection name, callback addresses, your account identifier, granted permissions, and connection and expiry timestamps. We store hashes of the dedicated connection credentials. We receive the tool inputs needed to answer your request, such as an item search or assessment identifier; the connection does not request your full conversation history.

2. How We Use Your Information

• To provide and maintain the EstateRuth service
• To process your photos through AI for item identification and pricing
• To display public valuation reports on EstateRuth report pages
• To send you account-related communications (password resets, report notifications)
• To improve our AI pricing accuracy using anonymized, aggregated data
• To detect and prevent fraud or abuse
• To measure advertising performance and show more relevant ads

3. AI Processing

EstateRuth uses multiple AI services to analyze photos and provide item identification, pricing, comparable sales research, and historical context:

• Google Gemini AI: Used for photo identification, item analysis, and deep research into comparable sales. Photos and item descriptions are sent to Google's API for processing. Google's use of this data is governed by their privacy policy.
• OpenAI: Used for deep research into auction records and comparable sales data. Item descriptions (not photos) are sent to OpenAI's API. OpenAI's use of this data is governed by their privacy policy.
• Anthropic Claude: Used for synthesizing research findings into final valuation reports. Anthropic's use of this data is governed by their privacy policy.

We do not use your personal photos to train AI models. AI analysis results are stored in your account to provide the service.

4. Data Storage & Security

Your data is stored securely on Supabase (hosted on AWS). Photos are stored in encrypted cloud storage. We use row-level security policies to protect your account data. Private reports are accessible only to you. Public reports (the default) are accessible to anyone with the link and may appear in search engine results.

Authentication is handled through Supabase Auth with industry-standard encryption. Passwords are hashed and never stored in plain text.

5. Data Sharing

We do not sell your personal information. We share data only in these limited circumstances:

• Public Valuation Reports: By default, valuation reports generated through Quick ID and Full Research — including your uploaded photos, item identification, and estimated values — are publicly accessible at their report URL. Public reports may appear in search engine results and in social media link previews. Your name, email, and account information are never shown on public reports unless you explicitly opt in via your Privacy settings. You may change any report's visibility to private at any time through the report page or your account settings. You may also change your default so that all future reports are private. Existing reports created before this policy change remain at their prior visibility setting and are not retroactively made public.
• AI Processing: Photos and item data are sent to AI providers (Google, OpenAI, Anthropic) for analysis (see Section 3).
• Assistants You Connect: After you sign in and approve a connection, that assistant can retrieve your saved item identifications, valuations, research sources, notes, and existing report allowance, including private assessments. The current beta only reads saved work and does not transfer uploaded photos, change report visibility, or start new research. The assistant provider processes returned information under its own terms and privacy policy. This account connection is separate from the AI processing described in Section 3.
• Analytics and Advertising Providers: Limited usage, device, referral, and conversion-event data may be processed by providers such as Vercel and Reddit to measure product and campaign performance. We do not provide these companies with your uploaded item photos or report contents for advertising.
• Legal Requirements: We may disclose data if required by law or to protect our rights.

6. Your Rights

You have the right to:

• Access your personal data
• Delete your account and all associated data (available in your Profile settings)
• Export your data upon request
• Opt out of non-essential communications
• Request to opt out of targeted advertising measurement by contacting us
• Control the visibility of your valuation reports (public or private) on a per-report basis or by changing your default setting
• Opt out of public display entirely by setting your default report visibility to private in your account settings
• Disconnect an assistant from Connected apps in your Profile. Disconnecting stops future access through that connection and preserves your Ruth assessments. It does not delete information already returned to the assistant.

To exercise any of these rights, contact us at help@estateruth.com.

7. Data Retention

We retain your data for as long as your account is active. When you delete your account, we permanently delete all your personal data, including reports, uploads, comments, and analytics within 30 days.

Assistant connection grants expire after 30 days. Expired connection credentials and related authorization records are removed by scheduled cleanup. Revoked credentials may remain until their original expiry to prevent reuse. These connection records are separate from the assessments retained in your Ruth account.

8. California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale or sharing of personal information for cross-context behavioral advertising. We do not sell personal information for money. To exercise your CCPA rights or request an advertising-measurement opt-out, contact us at help@estateruth.com.

9. Children's Privacy

EstateRuth is not intended for children under 13. We do not knowingly collect personal information from children under 13.

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes by posting a notice in the app or sending an email.

11. Contact Us

If you have questions about this privacy policy or your data, contact us at:

help@estateruth.com