Privacy Policy

Ecroo is a consumer tool that helps you keep track of purchases after you buy and prepare for money you may be owed — returns, price adjustments, warranties and recalls. This policy covers the Ecroo web app and its installable (PWA) version.

Questions about privacy can go to support@ecroo.com. This is an interim address while a permanent Ecroo support inbox is being set up.

• Account and contact details. Your email address, password credentials handled by our authentication provider, display name, time zone and currency preference.
• Receipts and purchase details. Merchant, items, prices, totals, purchase and order dates, order numbers, and whether the purchase was in store or online.
• Files you upload. Receipt images and PDFs, warranty documents, and evidence you attach to a claim (such as a refund confirmation or a delivery photo). Originals are kept so you can check them later.
• Product identifiers you supply. Brand, model, serial number, barcode or UPC, and tracking numbers, when you provide them.
• Monitoring and recovery records. Return, price, warranty and recall monitoring rows, price checks, claim and case records, follow-ups, merchant responses, and confirmed outcomes.
• Notification destinations. Your notification preferences and, if you turn on push, the push subscription your browser creates.
• Device, browser and security metadata. Information needed for the app and its security to work, including passkey credential records if you set up a passkey, installed-app state, and session data.
• Emailed receipts. If you use a private forwarding address, the receipt messages sent to it and the sender information we use to decide whether to trust them.
• Support messages. What you send us and our replies.
• Logs and security events. Technical logs from our hosting and database providers, plus records of processing jobs and errors.
• Connected mailbox data — only if you connect it. Ecroo does not read your inbox by default and no mailbox connection is required. If you choose to connect Gmail or Outlook in Settings, Ecroo asks for read-only mail access, uses it only to find receipt and order emails, never sends email from your account, and stops using it as soon as you disconnect.

• Reading receipts and warranty documents so you do not have to type everything.
• Watching your purchases for return windows, price drops, warranty expiry and recalls.
• Preparing instructions and evidence you can use yourself, and keeping the record of what you told us happened.
• Supporting you when you ask for help.
• Fraud prevention, abuse prevention and account security.
• Running, fixing and improving the service.
• Meeting legal obligations and responding to lawful requests.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. Ecroo does not run advertising, and there is no third-party analytics or ad tracking wired into the app today.

We use a small number of service providers, described by what they do rather than by promises we cannot verify for you:

• Hosting, database, authentication and file storage: Supabase. Your records and uploaded files live here, separated per account at the database level.
• Application hosting and build: Lovable and its underlying hosting platform serve the app itself.
• Workflow automation: n8n runs the server-side receipt processing workflow.
• Receipt reading: Tabscanner is the receipt extraction provider used by that workflow. Warranty documents are read inside our own service, not sent to a separate reading provider.
• Email delivery: an email provider is used for account and receipt-forwarding email when that feature is switched on for your account.
• Shipping, label and carrier providers: none. Ecroo does not track packages, does not create shipping labels, and sends no data to a carrier or label provider.
• Mailbox providers: nothing is sent to or read from Gmail or Outlook unless you authorize a read-only connection in Settings, and only receipt and order messages are used.
• Push notifications: when you turn push on for a device, the browser's own push service delivers the message. Push text is kept short and general and does not include amounts, item names or store names.

We keep your data for as long as we need it to run the service for you, to keep it secure, and to meet legal obligations. When it is no longer needed we delete or anonymize it. We do not promise a fixed number of days, because the app does not enforce one.

You can delete individual purchases and receipts yourself, and you can request a copy of your data or deletion of your account from Settings. Deletion requests are recorded and can be cancelled until they run. Copies held in routine backups may persist for a short period after deletion, and we may keep what the law requires us to keep.

You can ask for access to, correction of, or deletion of your personal information. Most of this is available directly in the app: edit your profile, remove a purchase or receipt, request a copy of your data, or request account deletion. If you would rather ask us, email support@ecroo.com.

California. Where California privacy law applies to Ecroo, California residents have statutory rights including access, correction, deletion, and the right not to be retaliated against for exercising them. We are not claiming that any particular statute currently applies to us; where it does, we will honor those rights through the same controls and contact route above. We do not sell personal information and do not share it for cross-context behavioral advertising, so there is nothing to opt out of on that front.

Records and files are scoped to your account in the database itself, not just hidden in the interface. Uploaded receipts and warranty documents are held in private storage. Sign-in supports passkeys. No service can promise perfect security, and we do not claim certifications we have not earned.

Ecroo is a general consumer tool and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you are under the age required to enter a contract where you live, use Ecroo only with a parent or guardian involved.

Ecroo uses automated systems to read documents, organize purchase information, watch for rules and events, and suggest next actions. Automated results can be incomplete or wrong, so check important dates and merchant requirements before acting. Ecroo is not the merchant, manufacturer, regulator, bank or card issuer, insurer, claims administrator, or your legal representative.

If we change this policy we will update the effective date above, and we will describe anything significant in the app.