Privacy Policy

1. Scope & Roles

We act as a controller for personal data we decide to process (e.g., accounts, billing, analytics). For certain features—like generating “Collector’s Notes,” recognition, and conversations—we process your inputs and selected content with third-party AI model providers as our processors to deliver the results you request.

2. Information We Collect

• Account & contact: name, email, authentication tokens, preferences.
• Content you provide: item photos, descriptions, collection metadata, tags, notes, conversations, and forms/support messages.
• Conversation logs: prompts, responses, and related context used with conversational features.
• Environmental monitoring: temperature, humidity, and sensor connection data from Bluetooth devices you connect (e.g., readings such as 18–22 °C and 40–55% RH).
• App & device: device type, OS, app version, language, time zone, crash/performance diagnostics.
• Usage: feature interactions, pages/screens viewed, referrers, timestamps, approximate location from IP, and AI request counts/token usage (maintained locally to manage service limits and prevent abuse).
• Transactions: purchase history, subscription tier, payment status (card/financial data handled by payment processors).
• Integrations: data you authorize via third-party connections (e.g., eBay), which you can disconnect anytime.
• Cookies/local storage: to stay signed in, remember settings, and measure usage.

3. Device Permissions (Bluetooth & Location)

To connect environmental sensors, ArchiveSense uses Bluetooth Low Energy (BLE). On some Android versions, BLE scanning requires location permission even if we do not access precise location data.

• Bluetooth: scan, connect, and exchange data with supported sensors (e.g., temperature/humidity loggers).
• Location (Android BLE requirement): requested solely to enable BLE scanning. We do not use this permission to collect or store precise location.

4. How We Use Information

• Provide, maintain, and improve the Service and features you use.
• Operate environmental monitoring features and display sensor readings/history.
• Operate AI features by processing your prompts and relevant content context.
• Review conversations and activity logs to improve and develop the Service (e.g., quality assurance, model configuration, feature design).
• Create aggregated, de-identified analytics and market insights derived from usage/activity, which we may commercialize or share with partners. These insights do not identify you.
• Communicate service updates and marketing you opt into.
• Detect/prevent fraud, abuse, and security incidents (including enforcing AI usage limits).
• Comply with legal obligations and enforce our Terms.

5. Access & Human Review Controls

• Access to personal data and conversation logs is restricted to authorized personnel with a need to know for the purposes above.
• We apply role-based access controls, logging, and periodic review. We use data minimization (e.g., sampling) where feasible.
• Support requests may require reviewing your account data to resolve issues you raise.

6. Legal Bases (EEA/UK)

Where GDPR/UK GDPR applies, we rely on: Contract, Legitimate Interests (security, product improvement/analytics balanced against your rights), Consent (where required, e.g., marketing/cookies), and Legal Obligation.

7. How We Share Information

• Service providers / processors: hosting, storage, analytics (e.g., Google Analytics, Microsoft Clarity), email delivery, customer support, payment processing, and AI model providers used to return requested outputs.
• Integrations you choose: e.g., eBay. Their terms and policies control their use of your data.
• Aggregated insights: we may share or sell aggregated, de-identified analytics and market insights that do not identify you. We contractually prohibit recipients from attempting to re-identify individuals.
• Legal/safety: to comply with law, legal process, or protect rights, security, and property.
• Business transfers: merger, acquisition, financing, or sale of assets.

We do not sell your personal information or your personal content, and we do not share personal information for cross-context behavioral advertising.

8. AI, OCR & On-Device vs Cloud Processing

To power AI features, we may send your prompts, item photos, and relevant context to third-party AI model providers under contracts limiting use to inference and service maintenance. We do not permit them to train their foundation models on your content. Some features may run on-device where supported. Photos are processed using on-device OCR for text extraction and may be analyzed by AI services to generate descriptions and insights about collection items. We track AI usage locally (e.g., request counts, token usage) to manage service limits and prevent abuse.

9. Cookies, Analytics & Affiliate Links

We use first-party cookies/local storage and analytics tools (e.g., Google Analytics, Microsoft Clarity) to understand usage and improve the Service. We do not engage in cross-context behavioral advertising. If this changes, we will provide required notices/choices.

Affiliate disclosure: some links (e.g., to marketplaces) may contain referral parameters; ArchiveSense may earn commissions on qualifying purchases. This does not increase your price.

10. De-identification & Aggregation Safeguards

• We apply technical and organizational measures to de-identify data before creating aggregated insights.
• We maintain de-identification and will not attempt to re-identify individuals.
• We require recipients of aggregated insights to agree not to re-identify or combine with other data to identify individuals.

11. Data Retention

We retain personal data only as long as needed for the purposes above (including while an account is active) and for legal/record-keeping periods thereafter. Environmental readings and AI usage counters may be stored on your device; you can delete app data from device settings. Aggregated, de-identified analytics may be retained for longer. You can request deletion of your personal data (see Rights).

12. Your Choices & Rights

• Access/Correction/Deletion/Appeal: email archivesenseco@gmail.com. If we deny a request, reply with “Privacy Request Appeal.”
• Portability: request a portable copy of certain data.
• Marketing: unsubscribe using links in marketing emails; service messages will still be sent.
• EEA/UK rights: access, correct, delete, restrict, object, and data portability; you can lodge complaints with your supervisory authority.

13. Security

We use reasonable technical and organizational measures (encryption in transit, access controls, monitoring). No system is perfectly secure.

14. International Transfers

We may transfer data to the United States and other countries where we and providers operate. Where required, we use safeguards like Standard Contractual Clauses.

15. Children

The Service is not directed to children under 13. In the EEA/UK, we do not knowingly process data of users under 16 without appropriate consent.

16. Changes to this Policy

We may update this Policy; material updates will be notified in-app or on this page. The “Effective date” governs.

17. Contact Us

Campbell Tech Ventures LLC d/b/a ArchiveSense
Email: archivesenseco@gmail.com
Mailing address: 277 Oxford Street, Hartford, CT 06105

California Notice at Collection & U.S. State Disclosures