Privacy Policy

WarrantiesVault ("we", "our", or "us") operates the WarrantiesVault web application at warrantiesvault.com. This Privacy Policy explains what personal data we collect, how we use it, and your rights regarding your data.

We are committed to handling your data responsibly and in compliance with applicable privacy laws including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

Account Information

When you sign in with Google, we receive and store:

• Your name
• Email address
• Profile photo URL (hosted by Google)

We do not receive or store your Google password.

Device and Warranty Records

Data you enter into the app:

• Device names, brands, models, and serial numbers
• Purchase dates, prices, and retailers
• Warranty durations and coverage notes
• Credit card nicknames and last four digits (no full card numbers)
• Membership identifiers (e.g., Amazon Prime, Costco)

Receipt Images

When you use the receipt scanning feature, your image or PDF is sent to Anthropic's Claude API for data extraction. Anthropic does not store or train on your receipt content — see Anthropic's Privacy Policy. We do not store the raw image after extraction.

Usage Data

We collect minimal server logs (request timestamps, error codes) for debugging. We do not use analytics tracking or advertising cookies.

• To provide the warranty tracking service
• To send email reminders when warranties are about to expire
• To calculate credit card extended warranty eligibility
• To authenticate your account

We do not sell your data. We do not use your data for advertising.

We share data with the following service providers solely to deliver the service:

Your data is retained for as long as your account is active. When you delete your account via Settings → Delete Account, all your data is permanently deleted from our database within minutes, including:

• Your profile (name, email)
• All device and warranty records
• Credit card and membership associations
• Reminder preferences

We do not keep backups of deleted user data beyond standard database backup retention periods (typically 7 days for disaster recovery).

We use one cookie: a session cookie set by our authentication system (NextAuth). This cookie is strictly necessary to keep you logged in and is not used for tracking or advertising. It is deleted when you sign out.

We do not use third-party tracking cookies, analytics cookies, or advertising cookies. No cookie consent banner is required because we only use strictly necessary cookies.

Depending on your location, you may have the following rights:

• Access:View all data we hold about you (it's visible in the app).
• Deletion (Right to Erasure): Delete your account and all data via Settings → Danger Zone → Delete Account.
• Portability: Export your data (coming soon via Settings → Export).
• Correction: Update your name in Settings → Profile.
• Opt-out of communications: Disable email reminders in Settings → Notification Preferences.

California residents: We do not sell personal information as defined under the CCPA. You have the right to know, delete, and opt-out. Contact us to exercise any right not available in the app interface.

We implement technical safeguards including HTTPS-only access, database encryption at rest, secure session tokens, and access controls. All data queries are scoped to the authenticated user. No user can access another user's data.

WarrantiesVault is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has provided us personal data, contact us and we will delete it.

We may update this policy as the service evolves. Material changes will be communicated via email. The "Last updated" date at the top reflects the most recent revision.

For privacy questions or to exercise a right not available in the app:

privacy@warrantiesvault.com