Privacy Policy

1. Who we are

CoverRate (cover-rate.com) is operated by LazyTech, a sole trader registered in France (SIRET: 10491596200013). Contact: hello@cover-rate.com

2. Data we collect

• Account data: email address, hashed password, subscription status. Collected at registration and kept for the duration of your account.
• Scan history: predicted grades, condition scores, recommendations. Stored in your account for your reference.
• Photos: images you upload for analysis are processed in memory by our AI and are not stored after the analysis is complete.
• Payment data: handled exclusively by Stripe Inc. We never see or store your card details. We only receive your subscription status.
• Technical data: IP address (used for rate limiting and abuse prevention, not linked to your identity, automatically deleted after 24 hours).

3. How we use your data

• Provide and improve the CoverRate service
• Send transactional emails (verification codes, payment confirmations, subscription updates)
• Prevent abuse and enforce rate limits
• Comply with legal obligations

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Third-party services

• Stripe (stripe.com) — payment processing. Subject to Stripe's privacy policy.
• Resend (resend.com) — transactional email delivery.
• Neon (neon.tech) — database hosting (PostgreSQL, hosted in AWS us-east-1).
• Vercel (vercel.com) — application hosting (servers in the USA and Europe).
• Anthropic (anthropic.com) — AI analysis of uploaded photos. Photos are sent to Anthropic's API for processing and are subject to Anthropic's data usage policy. Photos are not used to train Anthropic's models.

5. Data retention

• Account data: kept until account deletion
• Scan history: kept until account deletion
• Uploaded photos: deleted immediately after analysis (not stored)
• IP rate limit data: deleted after 24 hours
• Email verification codes: deleted after use or expiry (15 minutes)

6. Your rights (GDPR)

If you are in the EU/EEA, you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your account and data
• Data portability
• Object to processing

To exercise any of these rights, contact us at hello@cover-rate.com. We will respond within 30 days.

7. Cookies

CoverRate does not use tracking or advertising cookies. We use a single functional token stored in your browser's localStorage to keep you signed in. This is strictly necessary for the service to function and does not require consent under GDPR.

8. Data transfers

Your data may be processed in the United States by Vercel, Neon, Stripe, Resend, and Anthropic. These transfers are covered by Standard Contractual Clauses or equivalent safeguards ensuring an adequate level of protection.

9. Contact and complaints

For any privacy-related question or complaint: hello@cover-rate.com

You also have the right to lodge a complaint with the French data protection authority (CNIL): cnil.fr