Privacy Policy
This Privacy Policy explains how Gavel AI ("we", "us", or "our") collects, uses, shares, and protects information when you use the Gavel AI mobile application and related services (the "Service"). By using the Service, you agree to this policy. See also our Terms of Service.
1. Information we collect
| Category | Examples | Source |
|---|---|---|
| Account | Name, email address, profile photo, authentication provider identifiers | You; Apple or Google sign-in |
| Auction data | Auction titles, dates, categories, collaborators, lot numbers, titles, descriptions, locations, consignor references | You and your team |
| Photos and media | Lot images, auction hero images, export files | Your device camera or library |
| Voice notes | Audio recordings transcribed into lot cataloging notes (Premium feature) | Your device microphone |
| AI usage | Processing counts, queue status, rate-limit buckets | Service operation |
| Subscription | Plan tier, billing status, store transaction references | Apple, Google, RevenueCat |
| Device | Push notification token, app version, optional biometric unlock preference (stored on device) | Your device |
| Diagnostics | Audit and activity logs for security and support | Service operation |
2. How we use information
We use information to:
- Provide cataloging, collaboration, export, Identify, and subscription features
- Run AI cataloging and voice transcription on your content
- Enforce plan limits and prevent abuse
- Send in-app notifications and optional push alerts you enable
- Process payments and manage subscriptions
- Maintain security, troubleshoot issues, and comply with law
- Improve reliability and product quality
3. AI processing
When you request AI cataloging or identification, lot images and related text (such as lot prompts and auction instructions) are sent to our AI providers for processing. Results are stored with your auction data. Do not submit sensitive personal information you do not want processed by automated systems.
4. How we share information
We share information only as needed to operate the Service:
- Infrastructure: Supabase (database, authentication, file storage, edge functions)
- AI: OpenAI and related model providers for cataloging and transcription
- Sign-in: Apple and Google when you choose those login methods
- Export: Google Drive when you explicitly export to Drive on supported devices
- Billing: Apple, Google, and RevenueCat for subscription management
- Collaborators: Other users you invite to an auction or organization
- Legal: When required by law or to protect rights, safety, and security
We do not sell your personal information.
5. Data retention
We retain your data while your account is active and as needed to provide the Service. Auction lifecycle rules may automatically archive exported auctions after 14 days, archive stale drafts after 60 days, and delete stored photos and lot data 14 days after archival, while keeping a minimal auction record for reporting. You can mark auctions complete sooner or delete your account from the app.
When you delete your account, we delete or anonymize personal data subject to legal retention requirements and brief backup cycles.
6. Local storage on your device
The app stores upload queues, draft state, and preferences locally (including secure storage for session tokens) so cataloging survives restarts and offline capture. Local files are removed after successful upload when the Service confirms storage in your account.
7. Your choices and rights
Depending on where you live, you may have rights to access, correct, delete, or export personal data, or to object to certain processing. You can update your profile in the app, manage notifications in settings, and delete your account from Profile. Contact us to exercise other rights.
8. Security
We use industry-standard safeguards including encrypted transport (HTTPS), access controls, and row-level security on database tables. No method of transmission or storage is 100% secure.
9. Children
The Service is not directed to children under 18, and we do not knowingly collect their personal information.
10. International users
We may process and store information in the United States and other countries where our providers operate. By using the Service, you consent to this transfer where permitted by law.
11. Changes
We may update this Privacy Policy from time to time. We will post the revised version with a new effective date and provide additional notice for material changes where required.
12. Contact
Privacy questions or requests: privacy@gavel.ai
General support: support@gavel.ai