← Back

Privacy Policy

Updated October 17, 2026.

Your advertising choices

Meta privacy policy

What this app collects

Photos you choose to submit — used only to analyze your collection.

Collection details produced by that analysis: what we identified, our recommendations, and your selling plan.

Basic context you select in the flow (like "cleaning out the attic") and simple usage events (like which step you reached).

An anonymous session identifier stored in your browser — a random code, not your name, email, or account. We have no account system in the current version. We never ask you to send it to us: support uses the short support code shown below instead.

When you start a Founding 50 checkout, whether or not you then pay, two small first-party cookies: one holds a random code (not readable by page scripts) that lets this browser get back to its own session if its storage is cleared, and one only notes that such a code exists. They last at most 90 days from when they are set; after a purchase they are only ever renewed up to the end of your Early Access. They are never used for advertising.

How your photos are handled

When you tap analyze, your photos are sent over an encrypted connection (HTTPS) to an external artificial-intelligence service that identifies what is in them.

We do not permanently store your photos in the current version. They are processed to build your results and are not saved to our database or any storage bucket.

We do keep a fingerprint of each photo you scan: a short code calculated from the photo that cannot be turned back into the photo. We store it together with the list of items we read from that photo, so scanning the exact same photo again gives the same result without sending it to our AI provider again. A fingerprint is used for up to 30 days; after that it is never used again and becomes eligible for cleanup, and an expired record may remain until the next cleanup. The original photo is not kept for this purpose.

While you use the app, downscaled copies of your photos live in your own browser’s session storage on your device; closing the tab or clearing browser data removes them.

Your browser also keeps, on this device only: a pointer to your latest collection and a copy of your eBay listing answers (the listing queue, without any photo) in local storage, so a closed tab does not lose your work; and photos you take for an eBay listing in the browser’s own database (IndexedDB). Clearing site data for this site removes them; they are never sent anywhere except when you publish a listing.

If you connect eBay and approve a listing, the photos you selected for that listing are uploaded to eBay under your own account and kept by eBay under its policy.

Connected eBay account (optional)

If you choose to connect eBay, you sign in on ebay.com; your eBay password never touches this app. eBay gives us three permissions: to create and manage the listings you approve (sell.inventory), to read and set your selling policies — payment, shipping and returns (sell.account), and to read your eBay account identifier (commerce.identity.readonly), which we store only as a one-way hash. We do not request access to your messages, buyers or payouts.

The resulting access token is stored encrypted on our server, linked to your anonymous session identifier, and used only for the listing actions you take. Nothing is published to eBay without your explicit per-listing approval.

Disconnecting in the app deletes the stored connection immediately. You can also revoke access on eBay under Account settings → Third-party app access. If eBay notifies us that your eBay account was closed, we match that notice against the hashed account identifier and delete the connection.

What we store

Collection metadata and analysis results are stored in our database, hosted by Supabase: the category and situation you selected, item names we identified, pricing signals, your selling plan, listing drafts and edits, photo quality notes (never the photos themselves), and usage events — all linked to your anonymous session identifier.

Photo fingerprints (codes that cannot be turned back into photos) and the item lists read from those photos, used for up to 30 days so the exact same photo gives the same result when scanned again, then eligible for cleanup.

To enforce usage allowances, we also keep daily request counts under a protected version of your session code. These counters contain no photos, item names, or IP addresses. Older counters are removed as the service processes new requests or during routine cleanup.

What we never do

We do not sell your personal data. Not to anyone, not in any version.

We do not use your photos for anything other than analyzing your collection.

How long we keep data

Each collection stays available for 90 days from creation. Founding 50 Early Access lasts 90 days from your purchase and keeps your collections available at least until it ends. Replacing a private link does not extend that period. Save a copy of your plan and drafts before access expires if you want to keep them.

Access expiry does not delete the stored records: there is no automatic deletion schedule. Collection data, usage events, and feedback remain until you ask us to delete them. You can request deletion through support at any time.

If you buy Early Access we keep a minimal payment record (the Stripe payment reference, amount, date and your Founding 50 spot number) for accounting, refunds and to enforce the Founding 50 limit. It contains no photos or item details. Stripe retains payment records according to its own requirements.

Deleting your data sooner

You can request deletion at any time — contact us (below) with the support code shown on this page, and we will delete your collections (with their analyses, items and plans), listing drafts, eBay listing jobs and publication records, private plan links, your saved eBay connection, feedback and usage events.

Some records are kept: payment records (for accounting, refunds and the Founding 50 limit) and any Early Access we granted you. None of them holds a photo.

Security practices

Data travels over encrypted connections (HTTPS). Database access requires server-side credentials that never reach your browser, and database rules block direct public access. We keep the data we hold small by design: no photos, no names, no accounts.

We do not claim any compliance certification in the current version.

Third-party processors

OpenAI processes your photos to identify items (analysis only).

Supabase hosts our database of collection metadata and results.

PriceCharting supplies market pricing data to our servers; it receives item titles we identified, never your photos or session identifier.

Vercel hosts and serves the application.

Stripe processes payments if you choose to buy Early Access, on its own secure payment page; it receives the payment details you enter and a random checkout reference, never your session identifier, your photos or your items. That page runs on our checkout address (checkout.founditnext.com), so if you allowed optional Meta measurement your browser also sends it the Meta cookie identifiers.

eBay, only if you connect it: it receives the listings you approve, the photos you select for them, and your selling-policy choices, under your own eBay account.

Advertising measurement

Optional Meta measurement starts only after you allow it. With your permission, the Meta (Facebook) pixel and server-side events receive milestones such as a visit or a purchase (with its amount) and web signals such as IP address, browser type, and Meta cookie identifiers. Meta handles those signals under its own privacy policy and may use them for personalization as well as advertising measurement.

Your photos, the items we identify, your plan, and anything you type are NEVER shared with Meta or any advertising platform.

Declining or withdrawing optional measurement does not change your free preview or paid features. Do Not Track and Global Privacy Control signals override permission. We still record limited first-party product milestones and payment records to operate the app and understand whether it works, without sending them to Meta when permission is absent.

Ad links may contain campaign tags such as utm_source. We keep only short campaign tags, not the full referral URL or private plan link. You can change your measurement choice below or clear site data.

Not an appraisal

Pricing guidance in this app is informational — honest ranges and recommendations based on market data, not a formal appraisal or a guarantee of value. For unusually valuable items, get a professional opinion before selling.

Your support code

Your support code appears here after you use the app on this device.

Contact

Questions or deletion requests: support@founditnext.com.

Terms of Service →