Privacy Policy

Who can use Houseload

Houseload is intended for people aged 16 and older. We do not knowingly collect personal information from anyone under 16. If you believe a child under 16 has given us personal information, contact us and we will delete it.

Information we collect

We collect only what we need to run the Service:

• Account information. Your email address and authentication credentials. With email-and-password sign-in we store a salted hash of your password, never the password itself. With a passkey we store only its public key — never your private key or biometrics. If you sign in with Google, we receive your email address and basic profile information from Google.
• Content you create. The inventory data you add — items (names, descriptions, quantities, purchase prices, replacement values, dates, categories), collections, and any files you upload such as receipts, invoices, and photos. These files may contain personal information you choose to include.
• Emailed receipts. On paid plans, each home has a private email address for sending receipts in. When you (or a forwarding rule you set up) email that address, we store the message — its sender address, subject, body, and attachments — so it can be scanned into draft items and kept as the record behind them. Only email sent to your home's private address is processed; rotating the address in Settings immediately disables the old one.
• Imported purchase history. If you import an order-history file from a retailer such as Amazon, the file is read in your browser and is never uploaded to us. Only the purchases you select are sent, and only these fields: product name, price, quantity, order date, any serial number, and the retailer's order and product identifiers (kept so we can link you back to that order's invoice, and so re-importing the same file doesn't duplicate anything). We also keep a record of the import itself — the file's name and when you ran it. Everything else in the file — including the billing and shipping addresses and payment-card details it contains — stays on your device.
• Homes and membership. Houseload organizes data into shared "homes." We store the homes you create or belong to, your role in each, and invitations you send (including each invitee's email address).
• Support reports. If you report a problem with a scan, we store your report — the issue category and any description you write — together with the scan it concerns, and our support staff review that scan's files and results to investigate and reply to you.
• Billing information. Subscriptions are processed by our payment provider, Lemon Squeezy, which acts as merchant of record and handles tax. We never receive or store your full payment-card number. We do store limited billing details such as your plan, subscription status, and the customer and subscription identifiers Lemon Squeezy assigns.
• Connection and device information. Houseload is hosted on Cloudflare's global network, so every request to the Service passes through Cloudflare. To deliver and secure the Service, Cloudflare processes standard request data — including your IP address, browser and device characteristics, and an approximate, network-derived location — and compiles aggregate traffic statistics. Houseload does not store your IP address or location on your account or session, and we add no analytics, advertising, or cross-site tracking of our own.

How we use your information

We use this information to:

• provide, maintain, and secure the Service and your account;
• store and display your inventory and share it with members of your homes;
• process the files you upload or email in, including extracting details with AI (see below);
• authenticate you and protect against fraud, abuse, and unauthorized access;
• process subscriptions and send related billing messages;
• send transactional email such as verification, password resets, home-invitation notifications, and (on paid plans) warranty-expiry reminders;
• respond to problem reports and other support requests; and
• comply with legal obligations and enforce our terms.

We do not sell your personal information, and we do not use your content to advertise to you.

AI processing

When you upload a receipt, invoice, or similar file — or email one to your home's private address — we use Cloudflare Workers AI to extract structured details (such as item names, prices, and dates) so you can review and save them. When you scan an item by photographing it (including any model or serial number label), the same AI service analyzes those photos to identify the item and any legible label details. These files, photos, emails, and their contents are processed only to provide this feature to you and are not used to train any AI models. AI-suggested items are created as drafts for your review — you decide what is saved.

If you ask us to look up a description or replacement value for an item, we send that item's name to Brave Software's search service as a search query — and, for a replacement-value lookup, to eBay's marketplace API to find current listing prices — retrieve a small number of the top matching public web pages through Cloudflare's browser service, and use Cloudflare Workers AI to write a short description or estimate a replacement price from them. The sites we fetch see a request for their page; they are not told who you are, and nothing else about you or your inventory is sent to them. A result is only saved automatically when the item's field is still empty, and you can edit or delete it at any time. The item name is the only detail that leaves the Service for this feature, and lookups only happen when you ask for them.

How we share information

We share personal information only as needed to operate the Service:

• Service providers (sub-processors) that process data on our behalf under contract: Cloudflare, Inc. (hosting, database, file storage, AI processing, and email — outbound sending and inbound routing of receipts emailed to your home's address; as our network and security layer it also processes connection data such as IP addresses and request metadata to route traffic, defend against attacks, and produce aggregate analytics), Lemon Squeezy (subscription billing, as merchant of record), Brave Software, Inc. (web search — receives an item's name as a search query, only when you ask us to look up a description or replacement value), eBay, Inc. (marketplace price listings — receives an item's name as a search query, only when you ask us to look up an replacement value), and Google (only if you choose to sign in with Google).
• Other members of your homes, who can see the content in a shared home according to their role.
• Legal and safety — when required by law or to protect the rights, property, or safety of Houseload, our users, or others.
• Business transfers — if m13n LLC is involved in a merger, acquisition, or sale of assets, your information may transfer as part of that transaction; we will notify you of any change in control of your personal information.

We do not sell or share your personal information for cross-context behavioral advertising.

Cookies and tracking

Houseload sets only essential cookies — such as your sign-in session and a record of your most recently used home (so settings pages can show the right navigation) — and stores your theme preference in your browser. Cloudflare, our hosting and security provider, may set its own strictly necessary cookies (for example, to mitigate bots and abuse). We use no analytics, advertising, or third-party tracking cookies, and we don't track you across other websites; Cloudflare's traffic statistics are aggregate and server-side, with no tracking script or identifier placed on your device by Houseload. Because there is no cross-site tracking, we honor "Do Not Track" and Global Privacy Control signals accordingly.

Data retention and deletion

We keep your information for as long as your account is active and as needed to provide the Service. You can delete your account yourself at any time from your account page (we email you a confirmation link first); this permanently deletes homes only you belong to, including their items and files. Homes you share with other members must be handed off or emptied first, so a shared inventory never disappears with one departing account. You can also ask us to delete your account and associated data by emailing privacy@houseload.app. When you delete a home, account, or content, we remove it from our live systems promptly and purge it from backups within 30 days, except where we must keep limited records to meet legal, tax, or accounting obligations.

Security

We protect your information with measures including encryption in transit (HTTPS), hashed passwords, and access controls that isolate each home's data. No method of transmission or storage is perfectly secure, but we work to protect your information and to address vulnerabilities promptly.

International data transfers

Houseload is operated from the United States, and our infrastructure providers operate globally. If you use the Service from outside the United States, your information may be transferred to and processed in the United States and other countries whose data-protection laws may differ from your own. Where required, we rely on appropriate safeguards (such as the European Commission's Standard Contractual Clauses) for these transfers.

Your privacy rights

EEA and UK (GDPR). You have the right to access, correct, delete, restrict, or object to our processing of your personal data, to data portability, and to withdraw consent where processing relies on it. Our legal bases are performance of our contract with you, our legitimate interests in securing and improving the Service, your consent where requested, and compliance with legal obligations. You may also lodge a complaint with your local supervisory authority, though we encourage you to contact us first.

California (CCPA/CPRA). You have the right to know what personal information we collect and how we use it, to access, delete, and correct it, and not to be discriminated against for exercising your rights. We do not sell or share personal information as those terms are defined under California law, so there is no opt-out to exercise.

Other US states. Residents of other states with comprehensive privacy laws — including Minnesota — may have similar rights to access, correct, delete, and obtain a copy of their personal information.

How to exercise your rights. Email privacy@houseload.app. We will verify your request (typically by confirming control of your account email) and respond within the time applicable law requires. You may use an authorized agent where the law permits.

Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes we will update the "Effective" date above and, where appropriate, notify you. Your continued use of the Service after an update means you accept the revised policy.

Governing law

This Privacy Policy is governed by the laws of the State of Minnesota, United States, without regard to its conflict-of-laws rules.

Contact us

m13n LLC
privacy@houseload.app