Privacy Policy

One policy, applied to everyone

State privacy laws differ in who they cover and when. Rather than give you a different set of rights depending on which state you live in, we apply the strongest obligation we found anywhere to every member. Where a right below is described without qualification, you have it.

This is a person-to-person service

When you claim or rent an item, the other member learns your first name, your rating and enough location to meet you. What they do with it afterwards is not something we control. Treat a handoff as you would any meeting with a neighbor.

What you give us

• Your name, email address and the password or sign-in method you chose.
• Photographs of items, and whatever else is incidentally in the frame. See section 3.
• What you tell us about an item, and what you say to our assistant or to support.
• Messages and condition reports exchanged with another member around a handoff.

What we produce about you

• An appraisal: the item we think it is, its condition, a confidence score and a Share Value.
• A trust tier, computed from your listings, how many of them clear and your defect rate. It is set automatically and it changes what you are paid. Section 6.
• An append-only credit ledger. Entries are never edited or removed — corrections are made by adding a reversing entry, which is what makes the balance auditable.

What we collect automatically

• Precise location, treated as sensitive information. Section 7.
• Device and browser information, IP address, and pages viewed.
• Sales-tax records we are required to keep as a marketplace facilitator.

What happens to a photograph

• It is sent to our AI vendors to identify the item and grade its condition. Section 4.
• If you publish the listing, it is shown publicly — to anyone browsing, not only to signed-in members, and search engines may index it.
• It stays attached to the listing and to the appraisal record behind it.

What to keep out of the frame

Please photograph the item, not the room. Specifically, keep out of frame: other people, and children in particular; documents, mail and anything with an account number; screens; keys; and anything that identifies your address.

We ask rather than enforce, because the honest position is the next paragraph.

What we do not do

We do not screen photographs for people or for children. No automated system of ours looks for a face, and no person reviews every upload. We would rather say this plainly than imply a protection we do not provide.

If you appear in someone else's photograph

You do not need a ShareHouse account, and you do not need to explain who you are. Write to privacy@sharehouse.one with a link to the listing and we will take the image down. We treat these ahead of ordinary support. A parent or guardian may do the same for an image of their child.

The vendors, by name

• Anthropic, PBC — reads your photographs to identify the item and grade its condition, and powers the assistant. Contractually barred from training on what we send.
• Perplexity AI, Inc. — searches the live used market for comparable prices. Receives a description of the item, not your photographs.
• Neon — the database. Vercel — hosting. cred.diy — the credit ledger of record, which receives your email address. Google Maps — the map, which receives approximate coordinates to draw it.

How long the AI vendor keeps a photograph

We would rather give you the real numbers than a reassuring sentence. Our appraisal vendor deletes inputs on a 30-day default. Content flagged by their automated safety systems may be kept for up to two years, and the scores those systems produce for up to seven. Those periods are the vendor’s, not ours, and we cannot shorten them for content that has been flagged.

The other reasons we would disclose something

To comply with law or a valid legal demand; to establish or defend a legal claim; to a tax authority where we are required to report; and, if we are ever acquired or merged, to the counterparty — in which case this policy travels with the data until you are told otherwise.

The appraisal

A model identifies the item from your photographs, grades its condition and produces a confidence score. A separate search finds what comparable items are selling for. Share Value is computed from those, discounted for how quickly items like it tend to find a neighbor. High values, low confidence and disagreement between the two sources are held for a person to look at before credits are issued.

The trust tier

Your tier is computed from how many items you have listed, what share of them were claimed, your defect rate and how long you have been a member. Nothing else. It is set automatically, without a person involved, and it changes two things: how much of an appraisal you receive up front (25%, 40% or 50%) and how deep a haircut the appraisal takes.

What moves you up is published, not discretionary:

• New — Your first listings
• Established — 3 listings, 2 of them claimed, no defects
• Trusted — 10 listings, over half claimed, under 2% defects, 90 days

Asking a person to look again

You can appeal any appraisal or tier decision to a human reviewer by writing to support@sharehouse.one. A person — not a model — reviews the inputs and can change the outcome. You can also ask us what inputs produced a particular decision, and we will tell you.

What we hold and what we show

We treat precise location as sensitive personal information. We use it to show you what is nearby, to compute distance and to arrange a handoff.

We display only a neighborhood and an approximate distance. We never show your street address, and a map pin is deliberately approximate.

What we do not do with it

We do not use your location to infer anything about you — not your income, your habits, your health, your religion, your politics or your associations. We do not sell it, we do not share it for advertising, and we do not build or sell a location profile. We do not use geofencing to detect visits to any place.

What you can ask for

• Know and access — what we hold, where it came from, why we have it and who we gave it to. You may ask for more than the last 12 months, and our request form offers that option.
• Delete — subject to the limits in section 11, which we would rather you read now than discover in a denial.
• Correct — see section 11 for what happens when the record is a transaction.
• Take it with you — a portable copy in a machine-readable format.
• Opt out of sale or sharing — there is nothing to opt out of; we do neither.
• Limit the use of sensitive information, and contest a decision made about you by a system, including your tier.

How to make a request, and when we answer

Write to privacy@sharehouse.one. We confirm receipt within 10 business days and answer within 45 days, extendable once by a further 45 where the request is complex — we will tell you before we take the extension.

Verification. We match the request against information already in your account; we do not ask for a government ID for an ordinary request. Where a request covers sensitive information or would be harmful if we answered the wrong person, we ask for more — proportionate to the risk, and we explain why.

An authorized agent may act for you with written permission signed by you; we may still verify with you directly.

Browser signals

We honor the Global Privacy Control. Because we do not sell or share personal information, the signal changes nothing about what we do — but we recognize it, we treat it as a valid request, and we do not require you to have an account for it to count.

What is erased

Your account, your profile, your photographs, your listings, your appraisals, your saved items, your messages and your support history. We pass the deletion on to the vendors in section 4 and record their confirmations.

What survives, and why

A completed handoff is a fact about two people. We sever your identity from the transaction and replace it with a token that cannot be traced back — but the entry itself survives, because:

• the ledger must stay balanced for the credits everyone else holds to mean anything;
• tax law requires us to keep the record for seven years;
• the other member keeps their own record of the swap. Afterwards they see the amount, the date and their own condition report, attributed to a former member rather than to you.

We also keep anything subject to a legal hold. We will tell you specifically what was kept and under which exception — not “some data retained for legal reasons.”

Correcting a record rather than deleting it

A ledger entry recording something that happened is not inaccurate, so we correct it by adding a reversing entry rather than rewriting history. Where the disputed record is something another member said — a condition report filed within 24 hours of a handoff — we store it as their statement, not as our finding, because what is verifiable is that they said it. You can always add your own account alongside it.