ClutterWorth Privacy Policy

Version 0.1 (G0 draft) · Effective: TBD

DRAFT — pending owner/lawyer review. This is a template draft, not legal advice. Reviewed and finalized by the owner (with counsel) before launch (G5).

1. Who we are

The data controller is [COMPANY_LEGAL_NAME], [REGISTERED_ADDRESS] ("ClutterWorth", "we"). Contact: [PRIVACY_CONTACT_EMAIL].

2. What we process and why

ClutterWorth processes photos of the user's own space to identify resellable items and produce an estimated-resale-range report and declutter plan. Legal basis: performance of the contract you conclude when ordering a scan, and your consent for the photo upload.

Consent: you confirm the space is your own before upload.

3. Person-reject gate — no face data, ever

Photos with clearly visible people are rejected before processing. This is a binary reject gate: the person check returns only a yes/no signal.

No face data is stored or analyzed. No facial recognition, embeddings, landmarks, or any face-derived data are ever computed, logged, or stored. On reject, the upload is marked as rejected and the photo is queued for deletion; no analysis of the person occurs. This invariant is enforced by automated tests in our codebase.

4. Readable documents and screens

Photos containing readable documents or screens are not hard-rejected; they trigger a privacy warning suggesting a re-shoot so you do not accidentally share sensitive information.

5. Retention and deletion

Uploaded photos auto-delete 30 days after report delivery. Reports persist until you delete them. Using /account/delete erases all your data.

6. Storage and model training

Data is kept in EU-hosted storage. Your uploads are never used for model training.

7. Payments

Payments are processed by Stripe as merchant of record; Stripe processes your payment and billing data under its own privacy notice. We never receive or store your card data.

8. Your rights (GDPR)

You have the rights of access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent at any time and to lodge a complaint with your supervisory authority. Contact: [PRIVACY_CONTACT_EMAIL].