Privacy Policy

Scraplift is operated by Web Developer NY LLC ("we", "us"). Scraplift provides a mobile and web application that helps scrap-metal haulers find the best yard prices for the metals they collect, and a free-pickup service ("Lifts") where people can post scrap metal for a hauler to collect. This policy explains what we collect, why we collect it, and what we do with it.

1. What we collect

• Phone number — required to sign you in. Verified via SMS one-time code.
• Optional profile info — name, email, vehicle, home ZIP, search radius, tracked metals. You provide these in Settings; they're optional.
• Loads and tickets — items you photograph or log, weights, payouts you record, scanned weigh tickets.
• Photos you upload to Lens or Scan Ticket — sent to our servers to be classified by Google Cloud Vision and Anthropic Claude. We retain photos for up to 60 days, then anonymize them (faces blurred, EXIF stripped) for use in training future versions of our classifier. You can request deletion at any time.
• Approximate location — only if you grant permission. Used to compute distance to scrap yards. We do not track your movement.
• Device and usage information — app version, crash reports, basic usage events. No advertising identifiers.
• Push notification token — if you turn on Lift alerts, a device token so we can notify you about posts near you and about your claims. Removed when you delete the account.
• Lifts posts (posters) — if you post scrap for pickup: the photos, the street address, your mobile number, an optional note, the time you posted, your IP address, your confirmation that the item is yours to give away, and — only if you tick the optional box — your consent to texts about that post (the wording you agreed to, the time and your IP address). Posters do not need an account.
• Lifts activity (haulers) — claims, pickups, ratings given and received, missed-pickup strikes.

2. Why we collect it

• To run the service: identify metals, rank yards, compute payouts, surface market comparisons.
• To prevent abuse: rate-limiting, fraud detection on yard self-reported prices.
• To improve accuracy: anonymized photos and corrections you submit help train better classification models. You can opt out by deleting your account.
• To run Lifts: show a post to nearby haulers, text the poster about it, give the confirmed hauler the address, and keep both sides honest (ratings, strikes, blocks).

3. Who we share it with

• Service providers we use to run the app: Twilio (SMS verification), Google Cloud Vision (image labeling and OCR), Anthropic (Claude classification), Stripe (subscription billing if you upgrade to Pro), Alpha Vantage (commodity prices). Each receives only what it needs to do its job, and we do not sell your data to anyone.
• Yard operators — when you save a weigh ticket, the associated yard sees the ticket-line data tied to their listing only. Operators do not see your phone number, email, or location.
• Lifts — what haulers see about a poster: the photos, the note, an approximate map area (offset by roughly a quarter to half a mile), and a reliability summary (number of pickups, no-shows, average rating). Only the one hauler the poster confirms sees the exact address. Haulers never see the poster's phone number.
• Lifts — what a poster sees about a hauler: first name, average rating and pickup count. Posters never see a hauler's phone number or precise location.
• Twilio also delivers the Lifts status texts to posters who opted in, and Expo (the push notification service) relays Lift alerts to haulers' devices. Posted photos are classified by Google Cloud Vision and Anthropic Claude once, at post time, to estimate the metal and weight.
• Law enforcement — only when required by valid legal process.

4. What we do not do

• We do not sell your data.
• No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text-messaging opt-in data and consent are not shared with any third party, except the provider that delivers the texts (Twilio) as needed to send them.
• We do not show third-party advertisements.
• We do not track you across other apps or websites.

5. Your rights

• Access: export your loads, tickets, and earnings as CSV from Settings → Data.
• Delete: tap "Delete account" in Settings. All your loads, tickets, scans, and price alerts are permanently removed. Anonymized training images may persist if used in a model snapshot before deletion. Lifts claims are kept in anonymized form (no name or phone) so the other side's history stays accurate.
• Posters without an account: close a post from its status link at any time; to have a post's photos and address removed sooner than the schedule below, or to have your number removed entirely, email us.
• Correct: edit your profile fields in Settings. If you find an error in our records that you cannot edit yourself, email support@scraplift.app.
• California / EU residents: you have additional rights under CCPA / GDPR. Email us to exercise them.

6. Data retention

• Account data: until you delete the account.
• Photos: 60 days raw, then anonymized indefinitely or deleted on request.
• Lifts posts: photos and the street address are deleted 30 days after the post closes. The poster's phone number, ratings and strike history are kept so repeat behaviour can be recognised; email us to have them removed.
• Logs: 30 days.
• Backups: encrypted and rotated within 30 days.

7. Security

We use industry-standard encryption in transit (HTTPS/TLS) and at rest. Passwords (when set) are hashed with bcrypt. Auth tokens are short-lived (15 minutes for the access token, 30-day refresh tokens stored hashed in the database). We do not have access to your password.

8. Children

Scraplift is not directed at children under 13 and we do not knowingly collect data from children.

9. Changes

If we change this policy, we'll update the "Last updated" date and, for material changes, notify you in-app before they take effect.

10. Contact

Questions, complaints, or requests: support@scraplift.app.