Privacy Policy

1. Introduction

Itemizable, LLC ("Company", "we", "us") operates Itemizable ("Service"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Service. By using the Service, you consent to the practices described in this policy.

2. Information We Collect

Account Information

When you create an account, we collect your name, email address, and password. You may optionally provide a profile photo and timezone preference.

Third-Party Authentication

If you choose to sign in using a third-party provider such as Google, we receive your name, email address, and profile photo from that provider. We also store a unique identifier from the provider to link your account. We do not receive or store your Google password, and we only request basic profile information (name, email, and profile photo).

Item and Asset Data

You may upload information about items you own, including names, descriptions, purchase details, serial numbers, VINs, ISBNs, photos, documents, service records, expenses, warranties, insurance records, locations, and notes. This data is stored solely to provide the Service to you.

Usage Data

We collect information about how you interact with the Service, including pages visited, features used, search queries, and actions taken. This helps us improve the Service and diagnose technical issues.

Device and Technical Information

We may collect your browser type, operating system, IP address, and timezone to provide a better experience, enforce security measures, and comply with legal obligations.

Payment Information

Payment processing is handled by Stripe. We do not store your full credit card number. We may receive and store your billing name, email, last four digits of your card, and transaction history from Stripe for account management purposes.

3. How We Use Your Information

We use your information to:

Provide, maintain, and improve the Service
Process your transactions and manage your subscription
Send notifications, reminders, and essential service communications
Power AI features including search, chat, and recommendations
Detect, prevent, and respond to fraud, abuse, and security threats
Analyze usage patterns to improve features and user experience
Comply with legal obligations and enforce our Terms of Service

4. AI Processing

When you use AI features, your queries and relevant item data may be sent to third-party AI providers (such as OpenAI or Anthropic) to generate responses. We take care to minimize the data sent and do not transmit sensitive fields such as passwords, encrypted data, or API keys to AI providers.

AI conversations may be stored to maintain your chat history and improve the Service. You can delete your AI chat history at any time from within the application.

5. Data Sharing and Disclosure

We do not sell, rent, or trade your personal data. We may share information with the following parties:

Service providers — Third parties that help us operate the Service, including cloud hosting, email delivery, payment processing (Stripe), authentication providers (Google), and AI providers. These providers are contractually obligated to protect your data.
Workspace members — Other users in your workspace can see shared items and data based on their assigned roles and permissions.
Legal requirements — When required by law, regulation, subpoena, court order, or other legal process, or to protect the rights, safety, or property of the Company or others.
Business transfers — In connection with a merger, acquisition, or sale of assets, your data may be transferred as part of the transaction. We will notify you of any such change.

6. Data Security

We implement industry-standard security measures to protect your data, including:

Encryption in transit (TLS/HTTPS) for all communications
Encryption at rest for sensitive fields such as passwords and encrypted credentials
Optional two-factor authentication (2FA) for account security
Role-based access controls within workspaces
Regular security updates and vulnerability monitoring

No method of electronic transmission or storage is 100% secure. While we strive to protect your personal data, we cannot guarantee absolute security.

7. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service to you.

If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it by law or for legitimate business purposes (such as resolving disputes or enforcing our Terms). Database backups may retain deleted data for up to 90 days before being purged.

8. Your Rights

Depending on your jurisdiction (including under GDPR, CCPA, and other applicable laws), you may have the right to:

Access — Request a copy of the personal data we hold about you
Correction — Request correction of inaccurate or incomplete personal data
Deletion — Request deletion of your account and personal data
Data portability — Export your data in a commonly used, machine-readable format
Opt-out — Manage your email notification preferences from your account settings
Restriction — Request restriction of processing of your personal data in certain circumstances

To exercise any of these rights, contact us at [email protected] or use the relevant features in your account settings. We will respond to verified requests within 30 days.

9. International Data Transfers

Your data may be processed and stored on servers located in the United States or other countries where our service providers operate. By using the Service, you consent to the transfer of your data to these locations. We ensure that appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

10. Cookies and Tracking

We use essential cookies to maintain your session, remember your preferences, and keep you logged in. These cookies are strictly necessary for the Service to function.

We use Google Analytics to understand how visitors interact with our marketing pages. Google Analytics may use cookies to collect anonymized usage data. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

We do not use third-party advertising cookies or cross-site tracking cookies.

11. Children's Privacy

The Service is not intended for users under 16 years of age. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us at [email protected] and we will promptly delete such information.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of material changes via email or in-app notification at least 14 days before they take effect. The "Last updated" date at the top indicates the most recent revision.

13. Contact

If you have questions about this Privacy Policy or how we handle your data, please contact us:

Itemizable, LLC

Email: [email protected]