LotJitsu Privacy Policy

Version: 1.2.1 Effective date: November 14, 2026 Status: Final

This Privacy Policy explains how LotJitsu, L.L.C. ("LotJitsu," "we," "us") collects, uses, and shares information when you visit lotjitsu.com or use the LotJitsu application and related services.

1. What we collect

Account information. Your name, email address, and phone number, provided when you register or edit your profile. Your phone number is used only by support to reach you about your account.

Your catalog content. The photographs you upload and the listing text you write or generate. Embedded location data (GPS coordinates) is stripped from every photograph on upload, so the location where a photo was taken does not travel with it.

Payment information. Payments are processed by Stripe. Your card number goes to Stripe and never reaches our servers. We see that your plan is paid, the card brand, and the last four digits, not the full card number.

Usage information. Standard server logs (IP address, request times, errors) used to run and secure the service, and analytics about which pages and features get used: on for visitors in the United States, and elsewhere only if you opt in.

Sign-in provider information. If you sign in with Apple or Google, the provider sends us your name, your email address (or, with Apple's Hide My Email, a relay address), and an identifier for your account with them. We use it to create or recognize your LotJitsu account. We never receive your Apple or Google password.

Support conversations. The messages you send to support, by email, through the Support form, or through Support Chat in the app, together with the name, email address, account identifier, plan and app version that let us help you.

Information from the mobile app. The app asks for camera access only when you take a photo of a lot, and photo library access only when you choose an existing photo or save one. It does not read your other photos. If you turn on notifications, the app stores a device token so we can deliver them; the token identifies the app installation, not your location. The app does not collect your location.

Address lookups. When you type an address into an address field, the text you type is sent to a lookup service to suggest matches.

2. How we use it

• To run the service: storing your photos, building your export packages, syncing your work to your account.
• To write your listings: when you use AI generation, your lot photographs are sent to our AI provider for processing. That is how the title and description get written; the model has to see the item. Your photos are not published anywhere by us and are not shared with other LotJitsu customers.
• To bill you, through Stripe.
• To send you transactional email you need: verification links, password resets, invitations, and service notices.
• To improve the product, using analytics: for visitors in the United States, and elsewhere only if you consented to them.
• To measure our own advertising: when you verify your email or start a paid plan, we tell Google Ads, so we can see which of our ads bring in customers.

We do not sell your personal information, and we do not use your data for third-party advertising.

3. Who we share it with

Only service providers we use to run LotJitsu, and only what each needs:

• Amazon Web Services hosts the application, stores your photographs and export packages, delivers our transactional email, and provides address lookup.
• Stripe processes payments. It receives your email address and your card details; we never receive the full card number.
• Anthropic is our AI provider. When you use AI generation, your lot photographs and listing text are sent to Anthropic to draft titles and descriptions.
• Help Scout runs our support help desk and the Support Chat in the app and on the website. It receives your name, email address, the messages you send, and the account identifier, plan and app version we attach so we can help you.
• Apple and Google verify your identity when you sign in with Apple or Google, and deliver push notifications to your device if you turn them on.
• Cloudflare provides the bot protection on our sign-up and password forms; it receives the challenge response and your IP address.
• Google Analytics, for visitors in the United States, and elsewhere only if you accepted analytics cookies.
• Google Ads, to measure our own ads, for people in the United States. When you verify your email or start a paid plan, we send Google the time, the plan amount and a scrambled (hashed) copy of your email address, so Google can tell whether one of our ads brought you. If you arrived from one of our ads, we also send that ad's click identifier. We ask Google not to use any of it to personalize ads. In the LotJitsu phone app on iPhone, this happens only if you tap Allow on Apple's tracking prompt. On Android, if you install the app from one of our ads, the Google Play Store passes us that ad's click identifier.

Each provider is bound to use the information only to provide its service to us.

We may also disclose information if the law requires it, or to protect the service and its users from abuse or fraud.

4. Cookies and analytics

Essential cookies keep you signed in and are always on. If you are in the United States, analytics cookies are on as well, and we do not ask you to choose. Everywhere else, analytics cookies are off until you accept them, and you can decline or change your choice at any time from the Cookie Policy link in the site footer. We tell where you are from your IP address, looked up on our own servers; that lookup is not stored and is not shared. Analytics, when on, tells us which pages get read and which features get used. It does not follow you around other websites.

In the United States, if you arrive from one of our ads, we also keep the ad's click identifier in a cookie for up to 90 days, for the measurement described in section 3.

5. Who can see your catalogs

Your catalogs are private to your account and the people you authorize to access them. Authorized LotJitsu personnel and service providers may access catalog content as needed to operate, support, or secure the service. We do not make your catalogs publicly available. Other LotJitsu customers cannot access your catalogs unless you grant them access.

6. How long we keep things

• Account data: for as long as your account is open.
• Deleted folders, catalogs, and lots: recoverable for 30 days, then permanently removed.
• Built export packages: kept in your export history for one year.
• Backups and logs: kept on rolling schedules and then removed.

7. Security

Traffic between your device and LotJitsu is encrypted with TLS. Passwords are hashed and never stored in a readable form. No system is perfectly secure, and we do not promise otherwise, but we design for the failure cases we can foresee.

8. Your rights and choices

• Access and portability: you can download your data from the account settings page, and your export packages are standard files that work without us.
• Correction: you can edit your account information at any time.
• Deletion: you can delete your account at any time, in the app (Settings, then Delete account) or on the website (account settings). You do not need a password to do it. If you can no longer sign in, email support@lotjitsu.com from the address on the account, or use lotjitsu.com/delete-account, and we will delete it for you.
• What deletion does: your name and email address are removed from the account at once and every sign-in is ended, so nobody can use the account again. Your folders, catalogs, lots and photographs are removed on the schedule above. We keep invoices and payment records, and the record of which Terms you accepted, for as long as tax and accounting law requires, and support conversations for up to two years; none of these can be used to sign in.
• Depending on where you live, you may have additional legal rights, for example to access, correct, port or delete your information, or to object to how it is processed. Residents of California and of the European Union and United Kingdom have such rights by law. Contact us and we will respond to any request the law gives you.

9. Children

LotJitsu is a business tool. It is not directed at children and may not be used by anyone under 18.

10. Where data lives

LotJitsu is operated from the United States, and your information is stored and processed there.

11. Changes to this policy

Each version of this policy is numbered, dated, and published in our public documents repository at github.com/chenryrepos/lotjitsu-public-docs, so you can see exactly what changed and when. If a change meaningfully affects your rights, we will notify you in the app or by email.

12. Contact

Privacy questions: support@lotjitsu.com