Privacy Policy

LarqShield ("we", "our", "us") operates the LarqShield platform — an Amazon seller protection tool for warranty tracking, claim management, and document storage.

This Privacy Policy explains how we collect, use, share, and protect your personal data when you use our Service at larqshield.com.

Contact: privacy@larqshield.com

Account data: When you register, we collect your name, email address, company name (optional), and an encrypted password.

Profile data: You may optionally upload a profile photo, which is stored in our secure cloud storage.

Business data: Product details (name, ASIN, SKU, warranty dates, supplier info), claim records (type, status, amounts, notes), and uploaded documents (invoices, certificates, warranties).

Subscription data: Your plan tier, billing history, and Stripe customer ID. We do not store full payment card numbers — these are handled directly by Stripe.

Usage data: We log basic usage events (page views, feature interactions) to improve the Service. We may also collect IP addresses, browser type, and device information for security and analytics purposes.

Email notifications: Your email notification preferences and the emails we send you (alerts, reports, transactional messages).

We use the data we collect to:

• Provide and maintain the Service
• Authenticate your identity and manage your account
• Process payments via Stripe
• Send you transactional emails (password reset, email confirmation)
• Send you alerts and reports based on your notification preferences
• Improve and personalise the Service
• Investigate and prevent fraud, abuse, or security incidents
• Comply with legal obligations

We will never sell your personal data to third parties, and we will never use your business data (products, claims, documents) for any purpose other than operating the Service on your behalf.

If you are located in the European Economic Area, we process your personal data under the following legal bases:

• Contract performance: Processing necessary to deliver the Service you have subscribed to (account management, billing, feature delivery)
• Legitimate interests: Security monitoring, fraud prevention, service improvement, and sending transactional communications
• Consent: Marketing communications (you may withdraw consent at any time)
• Legal obligation: Tax and financial record-keeping as required by law

We share your data only with:

• Supabase: Our infrastructure provider, which hosts our database and file storage. Data is stored on servers in the EU.
• Stripe: Our payment processor. Stripe processes billing data under its own Privacy Policy.
• Resend: Our transactional email provider, used to deliver alert digests, monthly reports, and system notifications.
• Anthropic: We use Claude AI to power the AI claim assistant feature (Pro/Team plans). Claim descriptions you submit for AI generation are sent to Anthropic's API and are subject to Anthropic's data usage policy. We do not send other personal or business data to Anthropic.

We may disclose your data if required by law, court order, or regulatory authority, or to protect the rights, property, or safety of LarqShield, our users, or the public.

If you are a team member invited to a workspace, the workspace owner can see your name, email, and role within their workspace. The workspace owner can revoke your access at any time. You are responsible for the data you add or modify within a workspace you join.

We retain your account data for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within 90 days, except where we are required to retain it by law (e.g., financial records required for tax compliance).

Uploaded documents are deleted when you delete them or when your account is closed. You may request a full export of your data at any time from your account settings.

Under GDPR and other applicable privacy laws, you have the right to:

• Access: Request a copy of the personal data we hold about you
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your personal data ("right to be forgotten")
• Portability: Receive your data in a structured, machine-readable format
• Restriction: Ask us to limit the processing of your data in certain circumstances
• Objection: Object to processing based on legitimate interests
• Withdraw consent: Where processing is based on consent, withdraw it at any time

To exercise any of these rights, email us at privacy@larqshield.com. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

We use essential session cookies to maintain your authentication state and preferences (e.g., dark mode). We do not use advertising cookies or track your activity across third-party websites.

You can control cookies through your browser settings. Disabling cookies may prevent some features of the Service from working correctly.

We implement industry-standard security measures including:

• All data transmitted over HTTPS (TLS encryption)
• Passwords hashed using bcrypt via Supabase Auth
• Row-level security on all database tables
• File storage with signed URLs and access controls
• Regular security reviews and dependency updates

No system is completely secure. In the event of a data breach that affects your rights and freedoms, we will notify you and the relevant supervisory authority as required by law.

Your data is stored on Supabase infrastructure in the EU. Some of our service providers (e.g., Stripe, Anthropic) may process data in the United States. Where applicable, transfers are governed by Standard Contractual Clauses (SCCs) or other appropriate safeguards approved by the European Commission.

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by a prominent notice on the Service at least 14 days before the change takes effect. Your continued use of the Service after the effective date constitutes acceptance of the updated policy.

For any privacy-related questions or to exercise your rights, contact us at:

LarqShield — Data Protection
Email: privacy@larqshield.com