1Introduction

Five Suns Digital LLC ("we," "us," or "our") is a Colorado-based software company that develops AI-powered mobile and web applications. This Privacy Policy applies to all products and services published by Five Suns Digital LLC, including The Appraisal Room, ThriftiQ, and any future applications we release (collectively, "our Products" or "the Services").

This policy explains what personal information we collect, how we use and protect it, who we share it with, and what rights you have. By creating an account or using any of our Products, you agree to the practices described here.

2Information We Collect

Account Information

• Email address — collected when you register via email/password or Google OAuth. Used for authentication, account management, and service communications.
• Password — stored in hashed form only via Supabase Auth. We never see or store your plaintext password.

Photos and Media

• Photographs you capture with your device camera or upload from your gallery for analysis within our Products. Images are compressed before processing and storage.
• Images are stored in our database as base64-encoded data so they persist across devices and sessions for your history.

User-Provided Details

• Optional text details you enter alongside photos (e.g., item dimensions, condition notes, price paid, markings). These are used solely to improve the AI analysis for your request.

Analysis Results

• AI-generated analysis results (appraisals, resale valuations, etc.) are saved to your account history so you can review them later.

Subscription & Usage Data

• Subscription tier, scan/usage counts, billing period dates, and Stripe customer and subscription IDs. We do not store credit card numbers, CVV codes, or full billing addresses — those are handled entirely by Stripe.

What We Do NOT Collect

• Device GPS location, contacts, microphone audio, or any sensor data beyond the camera (when you explicitly use it).
• Advertising identifiers or behavioral tracking data.
• Any data for the purpose of serving advertisements. Our Products are ad-free.

3AI Processing & Third-Party Analysis

AI-generated analysis results are estimates for informational purposes only. They do not constitute professional appraisal, financial, insurance, legal, or investment advice. See our Terms of Service for the full AI disclaimer.

4How We Use Your Information

• Provide the Services — authenticate your account, process your analysis requests, and display your history across sessions and devices.
• Manage subscriptions — process payments via Stripe, track usage counts, enforce tier limits, and manage renewals and cancellations.
• Service communications — send transactional emails (receipt confirmations, password resets, material policy updates). We do not send marketing emails without your opt-in.
• Improve our Products — understand aggregate usage patterns to guide feature development. We do not sell or share individual usage data for this purpose.
• Customer support — respond to questions, bug reports, or account issues you contact us about.
• Legal compliance — comply with applicable laws and respond to lawful requests from government authorities.

We do not sell your personal information to third parties under any circumstances.

5Third-Party Services

Our Products rely on the following third-party services. Each operates under its own privacy policy and data handling practices:

Our Products are hosted on Vercel (web hosting and serverless functions) and distributed through the Google Play Store (Android). Both collect standard infrastructure and distribution logs per their own privacy policies. We do not use any advertising SDKs or third-party analytics trackers.

6Data Security

We implement the following security measures across all our Products:

• Encryption in transit — all data between your device and our servers is encrypted via HTTPS/TLS.
• Row Level Security (RLS) — database-level policies ensure users can only read and write their own records. Other users' data is inaccessible by design.
• Server-side secrets — all API keys, Stripe credentials, and service role keys are stored in server-side environment variables and are never included in client-side application code.
• Hashed passwords — managed by Supabase Auth. Plaintext passwords are never stored.
• Minimal data collection — we collect only what is necessary to provide the Services.

No method of electronic transmission or storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security against unauthorized access.

7Data Retention

• Account data is retained while your account is active.
• Analysis history (including stored images) is retained until you delete individual records or your account.
• Subscription and billing records are retained as required for financial and legal compliance, even after account deletion (typically 7 years per standard accounting practice).
• When you delete your account, your profile, analysis history, and personal data are removed from our active systems within 30 days. Aggregated, non-identifiable data may be retained for analytics.

8Your Rights & Choices

You may also have the right to:

• Access the personal data we hold about your account.
• Correct inaccurate personal data by updating your account.
• Delete your data (see above).
• Export your analysis history — contact us and we will provide a machine-readable copy.
• Opt out of any future marketing communications (we currently send none).

Colorado Residents: You have additional rights under the Colorado Privacy Act (CPA), including the right to appeal our decisions regarding your data requests. To exercise any right, contact us at privacy@fivesunsdigital.com. We will respond within 45 days.

California Residents: California residents may have additional rights under the CCPA. We do not sell personal information. For any CCPA-related request, contact us at the email above.

9Children's Privacy

None of our Products are directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have inadvertently collected such information, we will delete it promptly. If you believe a child under 13 has created an account, please contact us at privacy@fivesunsdigital.com.

10Product-Specific Details

The following describes each current Five Suns Digital product and any data practices specific to it:

As Five Suns Digital LLC releases new products, this section will be updated with their specific data practices. The core data handling described in this policy applies to all current and future products.

11Changes to This Policy

We may update this Privacy Policy from time to time. The "Effective Date" at the top of this page will reflect the date of the most recent revision. For material changes, we will notify you via email to your account address at least 14 days before the change takes effect. Continued use of our Products after the effective date constitutes acceptance of the updated policy.

12Contact Us