Privacy Policy

Data We Collect

We collect information necessary for authentication and providing our service:

• Email Address: Used to identify your account and send you important notifications.
• Authentication Information: Provided by your login provider (e.g., Google) to secure your access.
• User Preferences and Configuration: We store your application preferences, user settings, and integration details (such as Watchcrunch username) to provide a personalized experience across sessions.
• Images: We store images you upload to the service.

Note on Image Privacy: While we secure your account data, images uploaded to our service are accessible to anyone who has the direct URL to the image. These URLs are signed and time-limited to enhance security.

How We Use Your Data

We use your email and authentication information solely to manage your account, provide access to the application, and send you important notifications. We may also log interaction data (such as page views or feature usage) to improve our service. This data is anonymized and does not include personally identifiable information.

Google API Data

Our service integrates with Google Photos to allow you to import images for your watch collection. When you connect your Google Photos account:

• Data Accessed: We only access photos that you explicitly select through the Google Photos Picker. We do not have access to your entire photo library or any other data in your Google account.
• Purpose: Selected photos are downloaded and processed to be imported as watch images into your personal collection within the application.
• No Data Sharing: We do not share information received from Google APIs with third parties except as necessary to provide the service (e.g., storage on Cloudflare) or if required by law. Specifically, we do not sell this data or use it for advertising.
• Storage: Imported photos are stored securely using Cloudflare Images with signed URLs.
• Your Control: You can disconnect Google Photos at any time from Settings. Previously imported images remain in your collection unless you delete them.

The use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Data Sharing and Selling

We do not sell or license your personal data or uploaded images to third parties. We do not share your data except when required by law or to use reputable third-party service providers (such as Cloudflare for infrastructure and image storage) strictly to provide the essential functions of the service.

Data Retention

We retain your personal information and uploaded images for as long as your account is active or as needed to provide you with the service. If you choose to delete your account, we will remove your personal data from our active databases and storage systems within 30 days, unless we are required to retain it to comply with legal obligations or resolve disputes.

Your Rights and Data Deletion

You have the right to access, correct, or delete your personal data at any time.

• Self-Service Deletion: You can delete your account and all associated data through the Settings menu within the application.
• Requests: Alternatively, you can request the deletion of your data by contacting us at support@justasec.app. We will respond to your request within a reasonable timeframe.

Security

We implement industry-standard security measures to protect your data:

• Encryption: Sensitive information, including OAuth tokens, is encrypted at rest using AES-GCM-256 encryption.
• Session Security: We use secure, HttpOnly cookies for session management to protect against cross-site scripting (XSS) attacks.
• Secure Storage: Images are stored with signed, time-limited URLs to prevent unauthorized access.

While we strive to protect your personal information, no method of transmission or storage is 100% secure, and we cannot guarantee its absolute security.

Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at support@justasec.app.