Privacy Policy

Scraplift ("we", "us") provides a mobile and web application that helps scrap-metal haulers find the best yard prices for the metals they collect. This policy explains what we collect, why we collect it, and what we do with it.

1. What we collect

• Phone number — required to sign you in. Verified via SMS one-time code.
• Optional profile info — name, email, vehicle, home ZIP, search radius, tracked metals. You provide these in Settings; they're optional.
• Loads and tickets — items you photograph or log, weights, payouts you record, scanned weigh tickets.
• Photos you upload to Lens or Scan Ticket — sent to our servers to be classified by Google Cloud Vision and Anthropic Claude. We retain photos for up to 60 days, then anonymize them (faces blurred, EXIF stripped) for use in training future versions of our classifier. You can request deletion at any time.
• Approximate location — only if you grant permission. Used to compute distance to scrap yards. We do not track your movement.
• Device and usage information — app version, crash reports, basic usage events. No advertising identifiers.

2. Why we collect it

• To run the service: identify metals, rank yards, compute payouts, surface market comparisons.
• To prevent abuse: rate-limiting, fraud detection on yard self-reported prices.
• To improve accuracy: anonymized photos and corrections you submit help train better classification models. You can opt out by deleting your account.

3. Who we share it with

• Service providers we use to run the app: Twilio (SMS verification), Google Cloud Vision (image labeling and OCR), Anthropic (Claude classification), Stripe (subscription billing if you upgrade to Pro), Alpha Vantage (commodity prices). Each receives only what it needs to do its job, and we do not sell your data to anyone.
• Yard operators — when you save a weigh ticket, the associated yard sees the ticket-line data tied to their listing only. Operators do not see your phone number, email, or location.
• Law enforcement — only when required by valid legal process.

4. What we do not do

• We do not sell your data.
• We do not show third-party advertisements.
• We do not track you across other apps or websites.

5. Your rights

• Access: export your loads, tickets, and earnings as CSV from Settings → Data.
• Delete: tap "Delete account" in Settings. All your loads, tickets, scans, and price alerts are permanently removed. Anonymized training images may persist if used in a model snapshot before deletion.
• Correct: edit your profile fields in Settings. If you find an error in our records that you cannot edit yourself, email support@scraplift.app.
• California / EU residents: you have additional rights under CCPA / GDPR. Email us to exercise them.

6. Data retention

• Account data: until you delete the account.
• Photos: 60 days raw, then anonymized indefinitely or deleted on request.
• Logs: 30 days.
• Backups: encrypted and rotated within 30 days.

7. Security

We use industry-standard encryption in transit (HTTPS/TLS) and at rest. Passwords (when set) are hashed with bcrypt. Auth tokens are short-lived (15 minutes for the access token, 30-day refresh tokens stored hashed in the database). We do not have access to your password.

8. Children

Scraplift is not directed at children under 13 and we do not knowingly collect data from children.

9. Changes

If we change this policy, we'll update the "Last updated" date and, for material changes, notify you in-app before they take effect.

10. Contact

Questions, complaints, or requests: support@scraplift.app.