Privacy Policy | What’s It Worth

Effective September 1, 2026 · Last updated September 1, 2026

What’s It Worth lets you photograph an item and get an identification, an estimated value range, and recent comparable sales. This Privacy Policy explains what personal information WhatsItWorth Labs, Inc. (“we,” “us,” “our”), a Delaware corporation, collects through whatsitworthguide.com, our web app, and our upcoming iOS and Android apps (together, the “Service”), how we use it, and the choices you have.

1. Who we are

WhatsItWorth Labs, Inc. is the controller of personal information processed through the Service. You can reach us at [email protected] or by mail at WhatsItWorth Labs, Inc., 2261 Market Street, Suite 5178, San Francisco, CA 94114, USA.

2. Information we collect

Information you give us

Photos and scan details. Images you upload or capture, plus anything you add, such as notes, measurements, or condition descriptions.
Account information. Email address, display name, password (stored hashed), and plan.
Collections and alerts. Items you save to your collection tracker and the value alerts you set (Pro and Dealer).
Waitlist sign-ups. Name, email address, and your answer to “What will you scan first?”
Support messages. Whatever you include when you email us.
Payment information. Card details are entered directly with Stripe, Apple, or Google. We receive only a token, card brand, last four digits, expiration, and billing country, never your full card number.

Information collected automatically

Device and usage data. Browser and device type, operating system, IP address, approximate location derived from IP (city level), pages and features used, scan counts, and timestamps.
Photo metadata. Uploaded images can contain EXIF data, including GPS coordinates. We strip GPS location from photos on upload and keep only technical fields (such as image dimensions) needed for processing.
Crash and performance data. Error logs and diagnostics.
Cookies and similar technologies. See our Cookie Policy.

Information from others

Affiliate partners (such as the eBay Partner Network) report aggregated or transaction-level referral data so we can be paid commissions.
App stores tell us your subscription status if you subscribe through Apple or Google.
Ad partners may provide aggregated campaign measurement.

3. A note about what’s in your photos

Photos sometimes capture more than the item: faces, house interiors, documents, or addresses. Please frame shots on the item. We do not use photos to identify people, and we do not run facial recognition.

4. How we use information

To identify items, generate value estimates, and retrieve comparable sold listings.
To run your account, collection tracker, value alerts, batch scans, and CSV exports.
To enforce the 3-scans-per-day Free limit and process subscriptions, renewals, and refunds.
To hand item details to eBay or Mercari when you choose one-tap listing.
To show and measure ads to Free-plan users.
To send service emails (receipts, security notices, alerts you set) and, with permission, waitlist and product updates.
To debug, secure, and prevent fraud and abuse of the Service.
To improve the Service using aggregated usage data, and, only if you opt in, de-identified photos to improve our models.
To comply with law and enforce our Terms of Service.

5. Model training is off by default

We do not use your photos to train or fine-tune our identification models unless you turn on “Help improve What’s It Worth” in settings. If you opt in, we remove metadata and account identifiers before use. You can switch it off any time; this stops future use, and we will remove your photos from training datasets that have not yet been used. We also contractually prohibit our AI inference providers from training their own models on your photos.

6. How we share information

We do not sell your photos. We share personal information only as follows:

Sub-processors who process data for us under contract (see the table below).
Marketplaces you choose. When you tap “List on eBay” or “List on Mercari,” we send the item title, description, photos, and suggested price you approve. That marketplace’s privacy policy then applies.
Advertising partners. On the Free plan, ad networks such as Google receive device identifiers, IP address, and browsing data through cookies. Under some U.S. state laws this may be a “sale” or “sharing” for targeted advertising; you can opt out (Section 10).
Affiliate partners receive click identifiers so referrals can be attributed. See our Affiliate Disclosure.
Legal and safety. When required by law, subpoena, or to protect rights, safety, and property.
Business transfers. In a merger, acquisition, or sale of assets, subject to this Policy.

Category	What they do	Data involved
Cloud hosting and storage	Host the app, databases, and photo storage	All Service data
AI inference providers	Run image-recognition models on uploaded photos	Photos, scan details
Sold-listing data providers	Return comparable sales for an identified item	Item descriptors only (no account data)
Payment processors (Stripe, Apple, Google)	Handle subscriptions and refunds	Payment and billing data, email
Email delivery provider	Send receipts, alerts, and waitlist emails	Name, email, message content
Product analytics	Measure feature usage	Usage and device data
Crash reporting	Diagnose errors	Device data, logs
Advertising networks (Free plan)	Serve and measure display ads	Cookie IDs, IP, browsing data
Affiliate networks	Attribute referrals and pay commissions	Click IDs, transaction data

A current list of named sub-processors is available on request at [email protected].

7. How long we keep information

Photos (Free plan): deleted 30 days after upload unless you save the item to a collection.
Saved items and paid-plan scans: kept while your account is active or until you delete them.
Account data: kept until you delete your account, then removed within 30 days; backups roll off within 90 days.
Billing records: kept up to 7 years for tax and accounting.
Waitlist data: kept until launch plus 12 months, or until you unsubscribe.
Logs and analytics: generally 13 months or less.

You can delete any photo or scan, or your whole account, at any time from settings.

8. Security

We encrypt data in transit (TLS) and at rest, restrict internal access, and review sub-processor security. No system is perfectly secure; if a breach affects you, we will notify you as required by law.

9. Your rights in the EEA and UK

If you are in the European Economic Area or the United Kingdom, GDPR or UK GDPR gives you rights to access, correct, delete, restrict, or object to processing of your data, to data portability, and to withdraw consent at any time. Our legal bases are:

Contract: providing scans, accounts, and subscriptions.
Legitimate interests: security, fraud prevention, and improving the Service with aggregated data.
Consent: non-essential cookies, personalized ads, marketing email, and model training.
Legal obligation: tax and accounting records.

We transfer data to the United States using the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum, or the EU-U.S. Data Privacy Framework where a recipient is certified. You may complain to your local data protection authority.

10. Your rights in California and other U.S. states

Under the CCPA/CPRA and similar laws in states such as Colorado, Connecticut, Virginia, and Texas, you may have the right to:

Know what personal information we collect, use, and disclose, and get a copy.
Correct or delete it.
Opt out of “sale” or “sharing” for cross-context behavioral advertising and targeted advertising, using the “Your Privacy Choices” link in our footer or a Global Privacy Control signal, which we honor.
Not be discriminated against for exercising these rights.

In the past 12 months we collected identifiers, commercial information (subscriptions), internet activity, approximate geolocation, and visual information (photos). We disclosed identifiers and internet activity to advertising partners, which may count as “sharing.” We do not sell or share personal information of consumers we know are under 16, and we do not use sensitive personal information to infer characteristics about you. You may use an authorized agent; we will verify requests by confirming control of your account email. If we deny a request, you may appeal by replying to our decision.

11. How to make a request

Email [email protected] with the subject “Privacy request,” or use the controls in your account settings. We respond within 30 days (45 days where U.S. state law allows), and will tell you if we need more time.

12. Children

The Service is for people 13 and older, or 16 and older in the EEA and UK. We do not knowingly collect personal information from younger children. If you believe a child has given us information, contact us and we will delete it.

13. Communications choices

You can unsubscribe from marketing and waitlist emails via the link in any email. Service emails such as receipts and security notices cannot be turned off while your account is active. Value alerts can be managed in settings.

14. Changes to this Policy

We will post changes here and update the “Last updated” date. For material changes, we will notify you by email or in the app before they take effect.

15. Contact

Privacy questions: [email protected]. Mail: WhatsItWorth Labs, Inc., Attn: Privacy, 2261 Market Street, Suite 5178, San Francisco, CA 94114, USA. For how our estimates work, see the Valuation Disclaimer.