This Privacy Policy explains how Say Adios LLC, doing business as Zozy (“Zozy,” “we,” “us,” “our”) collects, uses, discloses, and safeguards information when you use our websites, mobile applications (iOS and Android), and related services that link to this Policy (collectively, the “Services”).

By using the Services, you agree to this Policy. This Policy is incorporated into our Terms of Use.

Company & Contact

Say Adios LLC (d/b/a Zozy)

Phone: (512) 920-0405

Email (Support): support@zozy.app

Email (Privacy Requests): privacy@zozy.app

Table of Contents

1. Notice at Collection

2. Information We Collect

3. Sources of Information

4. How We Use Information

5. Sharing & Disclosures

6. Cookies, Analytics & Tracking (Website)

7. AI & Model Improvement

8. Your Choices & Controls

9. Data Retention

10. Your Privacy Rights (U.S. State Laws)

11. International Users (GDPR/EEA/UK)

12. Security

13. Children’s Privacy

14. Changes to This Policy

15. Contact Us

1) Notice at Collection

We collect information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked with a particular person or device (“Personal Information”). The categories of Personal Information we collect, why we collect it, whether it is “sold” or “shared” for cross-context behavioral advertising, and our retention approach are summarized below and described in more detail throughout this Policy.

Categories we collect

• Identifiers: name, email, phone number, zip code, account IDs

• User Content / Inventory Data: photos, item details, serial numbers, receipts or warranty documents you choose to upload, and notes you enter about items

• Transaction & Subscription Data (if applicable): plan tier, billing status (payment card details are processed by payment processors; we do not store full card numbers)

• Usage & Device Data: app/website interactions, IP address, device identifiers, browser/app version, timestamps, crash logs

• Approximate Location: general location inferred from IP address (not precise GPS unless you enable it and we implement it)

• Communications: messages you send to us (support requests, feedback)

Purposes

• Provide the Services (inventory management, valuation estimates, claim/resale exports you request)

• Customer support

• Security and fraud prevention

• Analytics and product improvement

• Marketing communications (if you opt in or subscribe; you can opt out anytime)

Selling / Sharing

• We do not sell Personal Information.

• We do not share Personal Information for cross-context behavioral advertising in the sense used by certain state laws. If we add any, we will update this Policy and provide appropriate controls.

• We may disclose Personal Information to service providers who help us operate the Services and, only at your direction, to third parties such as insurance carriers or resale platforms when you choose to export or send your information.

Retention

We retain Personal Information as described in Data Retention below, generally for as long as your account is active and as needed for legitimate business and legal purposes.

2) Information We Collect

A. Information you provide to us

Account Information

• Name

• Email address

• Zip code

Inventory Information (User Content)

• Photos you upload (items, receipts, warranties, appraisals, and other documentation you choose to attach)

• Item attributes you enter (brand, model, category, condition, age/purchase date, quantity, serial number)

• “Additional notes” you write about items

• Values you enter (e.g., price paid), if you choose to provide them

Requests you initiate

• If you choose to generate an insurance claim packet or otherwise share your inventory externally, we will process the necessary item information and attachments to produce the export(s) you request.

• If you choose to prepare for resale/liquidation, we may package item data for export to the destination you select.

B. Information we collect automatically

Usage & Device Information

• App interactions (screens viewed, features used, clicks/taps)

• Device and browser information, operating system, app version

• IP address, timestamps, log data

• Crash reports and performance diagnostics (where enabled)

Approximate Location

• General location inferred from IP address (city/region). We do not need precise GPS location for core inventory features unless we add a feature that requires it.

C. Valuation-related information

Zozy may generate valuation estimates (e.g., fair market value ranges, replacement-cost style estimates) using:

• Item information you provide (category, condition, age, model/serial)

• Market pricing sources and internal logic

These estimates are primarily output we provide to you. If you input your own “price paid” or other values, that information is treated as Personal Information.

D. De-identified and aggregated data

We may create de-identified or aggregated data (e.g., “average household inventory value” or “typical categories added”) to understand product performance and improve the Services. We do not attempt to re-identify de-identified data except as permitted by law.

3) Sources of Information

We collect Personal Information from:

• You directly (when you sign up, upload items, enter item details, contact support)

• Authentication tokens are handled via your selected login provider and Apple relay email addresses are supported.

• Your devices automatically (usage analytics, logs, device data)

• Service providers who support our operations (hosting, analytics, email delivery, payments)

• Third parties at your direction (e.g., if you connect an account or choose to export/send inventory data)

4) How We Use Information

We use Personal Information to:

Provide and operate the Services

• Create and manage accounts

• Store and organize inventory

• Generate valuation outputs and summaries

• Produce exports you request (e.g., claim packets, inventory reports)

Support

• Respond to questions, troubleshoot issues, and provide customer support

Improve and protect the Services

• Analyze performance and usage

• Debug, repair, and improve features

• Prevent fraud and abuse, enforce our Terms, and secure accounts

Communications

• Send operational messages (account verification, feature updates, support replies)

• Send marketing emails if you opt in (you can unsubscribe anytime)

Legal and compliance

• Comply with applicable laws, lawful requests, and legal processes

• Maintain records required for business, tax, accounting, and dispute resolution purposes

5) Sharing & Disclosures

We do not sell Personal Information.

We may disclose Personal Information in the following situations:

A. Service providers / contractors

We use the following third-party services that may process your data:

• Supabase: Database hosting, authentication, and file storage (PostgreSQL, Auth, Storage)

• AI image classification and analysis: OpenAI GPT-4o, Google Cloud Vision, and the eBay browse APIs.

• Railway/Render: Backend API hosting (if deployed to production)

• Vercel/Netlify: Frontend hosting (if deployed to production)

These service providers are authorized to use Personal Information only as needed to provide services to us, under contractual protections.

B. Sharing at your direction (insurance and resale)

Insurance: If you choose to use Zozy to prepare a claim packet or transmit your inventory information to an insurer, we will share the information you select (items, documentation) with the destination you choose. We do not send your inventory to insurers automatically.

Resale/Liquidation: If you choose to export item information to a resale platform or other third party, we will share the item information you select with the destination you choose. We do not list or sell your items automatically.

C. Legal, safety, and business transfers

We may disclose information:

• To comply with law or valid legal process

• To protect rights, safety, and security of Zozy, users, or the public

• In connection with a merger, acquisition, financing, or sale of assets (subject to appropriate protections)

6) Cookies, Analytics & Tracking (Website)

Our website may use cookies and similar technologies to operate and understand website performance. You can control cookies in your browser settings, and where applicable, via a cookie preference tool.

If we implement advertising pixels or cross-context behavioral advertising on the website in the future, we will provide appropriate notice and choices and update this Policy.

7) AI & Model Improvement

Zozy may use automation and AI-like techniques to power features such as categorization, organization, and valuation estimates.

Training on user content (inventory photos/documents/notes)

Default position: We do not use your private inventory content (photos, receipts, warranties, notes) to train generalized AI models unless you opt in (for example, via an in-app setting or explicit consent flow).

If you opt in, we may use your content to help improve valuation accuracy, categorization, and related functionality. We will describe the opt-in scope and provide a way to withdraw consent.

De-identified/aggregated learning

We may use de-identified and aggregated information (e.g., statistical patterns across categories) to improve the Services without identifying you.

Google Cloud Vision Processing

• Item photos are sent to Google's API for classification

• Google's API processes images according to their Data Usage Policy.

• As of our last review, they do not use API data for model training (per their API terms)

• We do not control Google's data handling; please review their privacy policy

Data Minimization

• We only send necessary data to third parties (e.g., images to Gemini, not your email)

• Authentication tokens are not shared with third parties

• We use the minimum data necessary for each service

8) Your Choices & Controls

Depending on your account and feature availability, you may be able to:

• Access and update your account and inventory information

• Delete individual items or uploaded attachments

• Delete your account (subject to retention notes below)

• Opt out of marketing emails via the unsubscribe link

• Request access/portability of your information by emailing support@zozy.app

Exports

Zozy may offer different export formats (e.g., claim-ready exports) depending on product configuration. Regardless of plan, you can request access to personal data we maintain about you through a privacy request.

9) Data Retention

We retain Personal Information for as long as necessary to:

• Provide the Services (typically for as long as your account remains active)

• Maintain security and prevent abuse

• Comply with legal obligations

• Resolve disputes and enforce agreements

If you delete your account, we will delete or de-identify Personal Information consistent with our operational and legal requirements. Some data may persist for limited periods in backup systems; we will protect it and delete it when feasible.

Storage Location

• Database: Supabase (PostgreSQL) - Cloud hosted

• Images: Supabase Storage - Private bucket, access-controlled

• Backups: Managed by Supabase with their standard retention policies

10) Your Privacy Rights (U.S. State Laws)

Depending on where you live, you may have rights to:

• Know the categories and specific pieces of Personal Information we collected

• Access/port your information

• Correct inaccurate information

• Delete information (subject to legal exceptions)

• Opt out of certain processing in some states (where applicable)

• Not be discriminated against for exercising your rights

How to exercise rights: Email support@zozy.app with subject “Privacy Request.” We will verify your request (which may include confirming control of the account). Authorized agents may submit requests where permitted by law (we may require proof of authorization).

Selling/sharing: We do not sell Personal Information. We do not share Personal Information for cross-context behavioral advertising as defined by certain state laws (unless we implement optional website ad tracking and you enable it).

Additional Notice for California Residents (CCPA/CPRA)
If you are a California resident, the California Consumer Privacy Act as amended by the California Privacy Rights Act (“CCPA/CPRA”) provides you with specific rights regarding your Personal Information. Zozy does not sell or share Personal Information as those terms are defined under California law. We also do not use or disclose sensitive personal information for purposes beyond providing the Services and as otherwise permitted by law. California residents may exercise their rights to know, access, correct, or delete Personal Information by contacting us at support@zozy.app. We will not discriminate against you for exercising your privacy rights.

11) International Users (GDPR / EEA / UK)

If you access the Services from outside the United States, your information may be transferred to and processed in the United States or other jurisdictions where our service providers operate.

Legal bases (where GDPR applies)

Where GDPR applies, we process personal data based on:

• Contract necessity (to provide the Services you request)

• Legitimate interests (security, product improvement, analytics)

• Consent (marketing communications; optional AI training on user content; optional cookies where required)

• Legal obligation (compliance and recordkeeping)

Cross-border transfers

Where required, we use appropriate safeguards for international transfers, such as Standard Contractual Clauses.

GDPR rights

Where applicable, you may have rights to access, correct, delete, restrict processing, object, and data portability, and to withdraw consent where processing is based on consent. You may also lodge a complaint with your local supervisory authority.

12) Security

We maintain reasonable administrative, technical, and physical safeguards designed to protect Personal Information. However, no system can be guaranteed 100% secure.

Security Measures

• Passwords are hashed and encrypted

• API communications use HTTPS/TLS encryption

• Row-level security (RLS) policies ensure users only access their own data

• JWT token-based authentication

• Private storage buckets with access controls

• Rate limiting to prevent abuse

13) Children’s Privacy

Zozy is not directed to children under 13, and we do not knowingly collect Personal Information from children under 13. If you believe a child has provided Personal Information, contact support@zozy.app and we will take appropriate steps to delete it.

14) Changes to This Policy

We may update this Policy from time to time. We will update the “Last Updated” date at the top. If changes are material, we will provide additional notice where required.

15) Contact Us

For questions or requests regarding privacy, contact:

support@zozy.app

Say Adios LLC (d/b/a Zozy)

2900 N Quinlan Park Rd, Ste 240 PMB 5017, Austin, TX 78732-6085