Privacy Policy

1. Overview

WarrantyBuddy ("we," "us") helps you track the products you own, their warranties, receipts, and applicable safety recalls. This policy explains what information we collect, how we use it, which third parties process it on our behalf, and the choices you have.

2. Information we collect

• Account information: your name, email address, and password. Passwords are handled entirely by our authentication provider (Supabase Auth) and are never visible to us in plain text.
• Product and warranty information you enter: product name, brand, model and serial numbers, category, purchase date and price, retailer, and warranty terms.
• Photos and documents you upload: product label photos, receipts, warranty documents, and manuals, stored in a private file bucket tied to your account.
• Emails you forward to us: if you use receipt-forwarding, we parse the forwarded email and any attachments to extract receipt or warranty details.
• Payment information: handled entirely by Stripe. We never receive or store your full card number — only a subscription status and plan identifier.
• Usage data: request counts used purely for rate-limiting (preventing abuse of AI and search features), and basic server logs.
• Recall checker (no account needed): if you use the free public recall checker at /recall-check, your search terms are sent to our server to look up recall records; we do not attach them to an account. If you sign up for recall email alerts on our public pages, we store your email and the categories/brands you asked to follow, solely to send those alerts, with a one-click unsubscribe on every email.

3. How we use AI

WarrantyBuddy uses Anthropic's Claude API to power several features: reading product labels and receipts you photograph, answering questions in Ask Buddy, drafting claim emails, and matching warranty terms to plain-language questions. When you use these features, the relevant photo, document text, or question is sent to Anthropic's API to generate a response.

Under Anthropic's standard commercial API terms, data submitted through the API is not used to train Anthropic's models by default. We do not send AI providers more than what a feature needs to function — for example, a label photo is sent only to extract brand/model/serial text, not shared with any other party.

Content you upload is treated as untrusted input: our prompts explicitly instruct the AI to treat any instruction-like text found inside a photo or document as literal content to report, never as a command to follow.

4. Service providers we use

• Supabase — database, authentication, and encrypted file storage.
• Anthropic — AI processing for label/receipt extraction, Ask Buddy, and claim drafting.
• Stripe — subscription billing and payment processing.
• Resend — transactional emails (e.g. recall alerts, account notices).
• Postmark — inbound email parsing for the receipt-forwarding feature.
• UPCitemdb — barcode-to-product lookup (only the scanned barcode is sent, no personal data).
• CPSC, NHTSA, FDA, and USDA— public U.S. government recall data sources we check on your behalf; we don't send them any of your personal information.
• Vercel — hosting infrastructure.

5. Data retention and deletion

You can delete your account at any time from Settings. Doing so permanently removes your products, warranties, documents, photos, and chat history from our systems, including the underlying file storage. This action cannot be undone.

6. Security

Your data is protected by database-level access rules that restrict every record to your own account, private (non-public) file storage, encrypted connections (HTTPS/TLS) everywhere, and rate limiting on sensitive endpoints. No method of storage or transmission is 100% secure, but we design every feature around only exposing what a signed-in user is authorized to see.

7. Your rights

You can access, correct, export, or delete your data at any time from within the app. If you have questions about your data that aren't covered here, contact us at the email below.

8. Children's privacy

WarrantyBuddy is not directed at children under 13, and we do not knowingly collect their information.

9. Changes to this policy

We may update this policy as the product changes. We'll update the "last updated" date above when we do.

10. Contact

Questions about this policy or your data: admin@mywarrantybuddy.com