Privacy Policy

We do NOT store your original photos on VerifAEye servers. Our service operates using a "Bring Your Own Storage" (BYOS) model:

• Google Drive Integration: When you connect your Google Drive, your high-resolution photos are saved directly to a folder called "Verifaeye_Vault" in YOUR Google Drive account.
• Local Thumbnails: Small thumbnail images may be cached locally in your browser's IndexedDB for faster loading of your inventory list.
• No Server-Side Storage: We never upload, store, or retain your original photos on our infrastructure.

Our AI-powered item recognition uses Google's Gemini API for analysis:

• Transient Analysis: Images are sent to the AI service for analysis and are NOT retained after processing. The analysis is performed in real-time and the image data is immediately discarded.
• No AI Training: Your images are not used to train any AI models. We use the Gemini API with data logging disabled.
• Analysis Results: Only the text-based results (item names, estimated values, categories) are stored in your account—never the actual images.

The following information IS stored on our secure servers:

• Account Information: Email address, name, and encrypted password (hashed using industry-standard bcrypt).
• Inventory Metadata: Item names, descriptions, categories, rooms, estimated values, and analysis results.
• Google Drive References: File IDs and paths pointing to your photos in your own Google Drive (not the photos themselves).
• Usage Data: Analysis count, purchase history, and feature unlock status.
• Notification Preferences: Your chosen notification settings.

We use Stripe to process all payments:

• No Card Storage: We never see, store, or have access to your full credit card number. All payment processing is handled directly by Stripe.
• Purchase Records: We store a record of your purchases (date, amount, credits purchased) but NOT your payment method details.
• PCI Compliance: Stripe is PCI DSS Level 1 certified, the highest level of payment security certification.

For more information, see Stripe's Privacy Policy.

You have full control over your data:

• Delete Individual Items: Remove any inventory item at any time from your dashboard.
• Delete Account: Request complete account deletion by contacting us at privacy@verifaeye.com.au. This will remove all your inventory data from our servers within 30 days.
• Google Drive Photos: Photos in your Verifaeye_Vault folder remain in YOUR Google Drive and are not affected by account deletion. You manage these directly in Google Drive.
• Data Export: Export your full inventory as CSV at any time from the Inventory page.

• All data transmitted via HTTPS/TLS encryption
• Passwords hashed using bcrypt with salt
• JWT tokens for secure authentication with expiration
• Google OAuth 2.0 with PKCE for secure Drive authorization
• Regular security audits and updates

We integrate with the following third-party services:

• Google Drive API: For BYOS photo storage (with your authorization)
• Google Gemini API: For AI-powered item analysis (transient processing)
• Stripe: For secure payment processing
• Resend: For transactional emails (password reset, verification)