Privacy Policy

1. Who We Are

Inventori ("we," "us," or "our") operates a home inventory management application. This Privacy Policy describes how we collect, use, and protect your personal information when you use our Service.

2. Information We Collect

Account information: When you register, we collect your name, email address, and a hashed password.

Inventory data: Photos, item descriptions, serial numbers, purchase details, warranty dates, and any other information you choose to add to your inventory.

Usage data: Basic server logs (request timestamps, IP addresses) retained for security and debugging purposes.

Authentication via Google: If you sign in with Google, we receive your name, email address, and a unique identifier from Google. We do not receive your Google password.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service.
• Authenticate your identity and secure your account.
• Store and display your inventory data across your devices.
• Respond to support requests or questions you send us.
• Detect and prevent fraudulent or unauthorized activity.

We do not use your inventory data for advertising, and we do not sell your personal information to third parties.

4. Data Storage and Security

Your data is stored in a PostgreSQL database hosted in a secure environment. Passwords are hashed using bcrypt before storage — we never store plain-text passwords. Photos and receipts are stored as compressed data within the database.

While we take reasonable technical and organizational measures to protect your data, no method of transmission or storage is 100% secure. We encourage you to use a strong, unique password for your account.

5. Data Retention and Deletion

We retain your data for as long as your account is active. You can permanently delete your account — and all associated inventory data — at any time from the Edit Profile section of your account dashboard. Deletion is immediate and irreversible.

6. Third-Party Services

We use the following third-party services to operate the Service:

• OpenAI — used for OCR scanning of serial/model numbers from photos. Images sent for scanning are processed transiently and not stored by OpenAI beyond the API request.
• Google OAuth — optional sign-in method. Governed by Google's Privacy Policy.
• Google Fonts — used to load the DM Sans typeface. Google may log font requests.

7. Cookies and Local Storage

The web dashboard uses localStorage to store your authentication token so you remain logged in between sessions. We do not use third-party tracking cookies or advertising cookies.

8. Children's Privacy

The Service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can remove it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Your continued use of the Service after changes constitutes acceptance of the revised policy.

10. Contact

If you have questions or concerns about this Privacy Policy or how your data is handled, please reach out via our contact page.