Privacy Policy

This Privacy Policy explains how ARSHANTI, LLC ("we," "us") collects, uses, and protects information at TroveScore.com (the "Service"). We describe practices for AI-assisted cataloguing, optional sign-in, integrations such as eBay, and product analytics.

Categories we may collect depending on how you use the Service:

Image data (scan): Photos you submit for identification. See Section 3.

Device identifier: A random identifier stored in your browser so anonymous sessions can persist. See Section 4.

Account and authentication data: If you sign in (for example with Google via our authentication provider), we receive and store identifiers needed to maintain your session and associate your Trove with your account, such as your user id, email address, and name or profile information supplied by the identity provider.

Emails we send you: If you have an account, we use your email address to send you messages about your account and the Service, such as your sign-in, your membership, and important changes. We send them through Brevo, an email delivery provider, which receives your email address, name (if we have it), and the content of each message, and may record whether it was delivered.

Catalogue and activity data: Scan results and related data you generate (for example titles, ISBNs or other identifiers, authors, conditions, notes, routing or donation choices, and estimated values), linked to your device identifier and/or account.

Private notes: If you're a Patron, you can write a private note on any book in your Trove. We store the text with that book in your account. Only you can see it: a private note is never shown on your Showcase or to any other user, and we don't send it to our analytics provider. If your membership ends, your notes are kept and you can still read or remove them. Deleting your account erases them.

Connected marketplace data: If you connect eBay or similar integrations, we store credentials or tokens and related technical data needed to act on your behalf within the Service, as described in Section 6. Listing payloads you send to a marketplace are governed by that platform's policies once transmitted.

Usage and diagnostics: How you interact with the Service, including events we log for reliability and improvement. We use PostHog for product analytics, which collects technical data such as browser and device type, pages viewed, clicks, and errors. PostHog receives your IP address and uses it to estimate your approximate location (for example, country and city).

Session recording: To troubleshoot bugs and fix confusing screens, we record how you use the Service: the pages as they appear, and your clicks, scrolls, and navigation, along with browser console messages and network timing. Anything you type into a form field is masked in your browser before the recording is sent, as are personal details shown on screen, such as your name, email address, eBay username, reviews, private notes, and Showcase bio. Recordings are linked to a random identifier and, if you're signed in, to your internal account ID, not to your name or email. We delete recordings automatically after 30 days.

Server and infrastructure logs: Standard web and application logs (for example IP address, timestamps, request metadata) through our hosting providers.

Payment data: Patron memberships are sold through Link, a service of Stripe, which acts as merchant of record and processes your payment under its own privacy policy. We never see or store your card number. We keep a Stripe customer ID and, for each membership, its status, plan and price, any promotional code and discount, its start, renewal and end dates, and the billing country entered at checkout, so we can tell whether you're a Patron and apply our refund rules. Link may contact you about your purchase. Membership records exist only if you have bought a membership, including one you later cancelled or were refunded. If you delete your account, we keep them for accounting and tax purposes, no longer linked to your TroveScore account; they still hold the Stripe customer ID, which Stripe can link to you. Stripe and Link keep their own records under their policies.

Scanning requires you to submit a photo. Typical handling:

• Your photo is sent over encrypted (HTTPS) connections to our servers and then to our AI provider(s) (for example Google Vertex AI / Gemini, or other configured models) solely to identify items in the image.
• We do not retain scan photos on our disks after in-memory processing for the standard scan pipeline completes. Images are processed in memory and discarded by us after that step. Third-party AI providers process images under their own terms.
• Where we use Google Vertex AI, enterprise terms apply and, under our API agreement, content is not used to train Google's models for that service configuration.
• Exceptions: If we introduce optional features that store images, or if you or a marketplace integration transmits images elsewhere (for example listing photos on eBay), those flows will be governed by the notices in effect when the feature ships and by the third party's policies. This policy will be updated before optional long-term photo storage is enabled.

You may use the Service anonymously (device id) or sign in to sync across devices and recover your Trove.

• Device identifier: A UUID in browser storage associates catalogue data with your browser. It is not derived from your name or email.
• Sign-in: When you authenticate, we link catalogue data from your device identifier to your account where applicable.
• Deletion (anonymous use): Clearing site data / local storage for TroveScore.com removes the device identifier from your browser; associated server-side rows may remain until we process retention or you request deletion.
• Deletion and disconnection (signed-in): You can delete your account, and disconnect your eBay account, directly from Settings — no need to contact us for either. Deleting your account anonymizes your usage data (it is retained in aggregate but no longer linked to you), erases any private notes you wrote, and retains a minimal record of the deletion itself (your email address and the deletion date) for 24 months to handle support inquiries and prevent abuse, after which the email address is removed. Analytics data held by PostHog is not deleted with your account. Session recordings expire within 30 days and analytics events within 1 year. A basic analytics profile (your internal account ID, sign-in method, sign-up date, and approximate location) may remain until you ask us to delete it. None of it contains your name or email. For any other request — for example correcting personal data, or something not covered by Settings' self-service controls — email us at the address in Section 10, subject to legal retention obligations.
• Downloading your data: If you're signed in, you can download your Trove from the Trove page as a spreadsheet (CSV or Excel). It covers your books: each book's details, its condition and status, your decisions, any eBay listing, and your own take (reading status, finish date, rating, and review), and any private notes. For a copy of anything else we hold about you, such as your profile, Showcase settings, or membership records, email us at the address in Section 10. We'll respond within the time the law of your country requires.

We use information to:

• Provide and operate the Service, including Trove, scan processing, and routing tools.
• Authenticate users and link anonymous data to accounts when you sign in.
• Call third-party APIs you trigger (metadata, pricing, institutions, marketplaces).
• Operate, secure, debug, and improve the Service; comply with law; enforce our Terms.
• Manage Patron memberships through Stripe and Link, including refunds under our Terms.
• Email you about your account and the Service, through Brevo.
• Understand aggregate usage to improve the product. We do not sell your personal information for money.

We rely on vendors and integrations. Each has its own privacy policy:

• Hosting and infrastructure: Google Cloud Platform and related services.
• Database and authentication: Supabase (or successor providers) for application data and auth.
• AI processing: Configured AI providers (for example Google Vertex AI / Gemini) for image identification.
• Book, metadata, and pricing sources: Third-party APIs (for example Open Library, Google Books, marketplace pricing feeds) receive queries derived from your catalogue as needed to enrich results.
• eBay and other marketplaces: When you connect or publish listings, data required by that platform (including listing fields and images you choose to send) is transmitted under your direction and subject to that platform's terms and privacy policy.
• Analytics: Product analytics vendors (for example PostHog or similar) may process usage events and technical data on our behalf.
• Payments: Stripe, and Link (a Stripe service and the merchant of record for Patron purchases).
• Email delivery: Brevo sends the emails we send you about your account and the Service. It processes your email address, name (if we have it), and the message content on our behalf, subject to Brevo's privacy policy.
• Help & Contact form: Our Help & Contact page links to a form hosted by Google Forms. If you submit it, the email address and message you enter — along with any details pre-filled in the form, which you can see and edit before sending — are received and stored by Google on our behalf, subject to Google's privacy policy.

California (CCPA/CPRA): California residents may have rights to know, delete, and correct personal information, and to limit certain uses of sensitive personal information, subject to exceptions. We do not sell personal information as "sale" is defined under the CCPA for monetary consideration.

United Kingdom and European Economic Area: If you are located in the UK or EEA, you may have rights under the UK GDPR or EU GDPR to access, correct, delete, restrict, or object to our processing of your personal data, and to receive a copy of it in a portable format, subject to applicable exceptions. You can exercise these rights using the account and deletion controls described in Section 4 or by emailing us at the address in Section 10.

To exercise rights, use available account controls or email hello [at] trovescore.com. We may verify your request. Authorized agents may submit requests with proof of authorization as required by law.

Canada: If you are located in Canada, the Personal Information Protection and Electronic Documents Act (PIPEDA), and applicable provincial privacy laws (for example Quebec's Law 25), give you the right to access and request correction of your personal information, to know how and why it is collected, used, and disclosed, and to withdraw consent where applicable, subject to legal exceptions. You can exercise these rights using the account and deletion controls described in Section 4 or by emailing us at the address in Section 10.

Australia: If you are located in Australia, the Privacy Act 1988 (Cth) and the Australian Privacy Principles give you the right to access and request correction of your personal information, and to know how it is collected, used, and disclosed, subject to legal exceptions. You can exercise these rights using the account and deletion controls described in Section 4 or by emailing us at the address in Section 10. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC).

Other regions and international transfers: If you reside outside the United States, your information will be processed in the United States and possibly other countries where our subprocessors operate, including for UK/EEA users. We rely on our subprocessors' own safeguards (such as standard contractual clauses or equivalent mechanisms) for these transfers. Laws may differ from those in your country.

Where we operate: TroveScore is run from the United States and is available to anyone online. We don't run marketing aimed at particular countries outside the United States, apart from the regional features we describe in our Terms of Service. Where you are doesn't reduce the rights this policy describes.

We use commercially reasonable safeguards, including encryption in transit (HTTPS), cloud security practices, and in-memory handling of scan photos as described above. No method of storage or transmission is completely secure.

We may update this policy as the Service changes. We will post the revised policy with an updated "Last Updated" date. Material changes may be highlighted in the product or by other reasonable means where appropriate.

ARSHANTI, LLC
Attn: Privacy Team
Email: hello [at] trovescore.com