Privacy Policy

This Privacy Policy explains how Driftwood Brands LLC, doing business as TreasureRate ("TreasureRate", "we", "us", or "our"), collects, uses, and protects your information. It applies to:

• The website at treasurerate.com, including the marketplace, AI agents, and related services
• The TreasureRate Back Office mobile app for Android and iOS

Together these are the "Service". By using the Service, you agree to the practices described here. If you do not agree, please do not use the Service.

1. Information We Collect

On the website:

• Account information: your name, email address, and a securely hashed password.
• Payment information: processed by our payment provider, Stripe. We receive limited transaction details, such as amounts and status. We never see or store full card numbers.
• Usage data: orders, subscriptions, reviews, referrals, and account credit activity.
• Content you submit: the text, files, and prompts you give AI agents to produce results.
• Device and analytics data: IP address, browser type, pages visited, and similar information collected through cookies and analytics tools.
• Voice and audio: speech clips you record and the text used to generate spoken replies, processed to deliver the result.

In the mobile app: only the text you choose to send to an agent, plus basic technical data needed to deliver the result (such as your IP address when the request reaches our servers). See section 2 for details.

2. The TreasureRate Back Office App

The app lets you run TreasureRate agents from your phone without creating an account.

• No sign-in: the app does not ask for your name, email, or password.
• Camera and photos: if you tap Camera, Photos, or Upload, the app reads the text from that image or file directly on your phone. The image or file itself is never sent to us or stored by us. Only the text you choose to submit is sent to an agent.
• Permissions: camera and photo access are requested only when you tap those buttons. You can turn them off anytime in your phone's settings.
• On-device data: your business profile and run history are stored only on your phone. We do not collect them. You can clear them anytime by clearing the app's data or uninstalling it.
• Agent requests: text you submit is sent to our servers and our AI providers to produce your result, as described in section 4.
• No ads or tracking: the app shows no ads and does not use an advertising ID.

In-app purchases. The Back Office app offers optional plans, day passes and credit packs. Purchases are processed by Google Play (Android) or the Apple App Store (iOS). We never see or store your card or bank details. To deliver what you bought, the app uses RevenueCat, Inc., our purchase-management provider. RevenueCat receives a random anonymous app user ID created on your device, the product you purchased, the transaction ID, the price and currency, the purchase date, the subscription status, and your approximate country (from the store). We use this only to unlock what you paid for, restore purchases on a new device, and handle refunds and support. We do not use it for advertising or sell it.

Your free daily credits, purchased credit balance and day-pass timer are stored on your device. If you uninstall the app or switch phones, credits and day passes stored on the device may not carry over. Subscriptions can be restored on any device signed into the same Google Play or Apple account using "Restore purchases".

3. How We Use Your Information

• Provide, operate, and maintain the Service and your account
• Run AI agents and deliver the results you request
• Process payments, subscriptions, refunds, referrals, and promotional credit
• Communicate with you about your account, transactions, and updates
• Analyze usage to improve the Service, and detect and prevent fraud or abuse
• Comply with legal obligations

We do not use the content you submit to agents to train our own AI models.

4. AI Processing and Third-Party Providers

To deliver the Service, we share certain data with trusted providers who process it on our behalf and under our instructions:

• AI model providers (OpenAI and Anthropic) to generate agent results from the text you submit
• Voice and speech providers (OpenAI) to transcribe your speech and generate spoken replies
• Payment processing (Stripe) to handle billing securely
• Hosting and infrastructure providers to run our servers and store data
• Analytics (Google Analytics) to understand website usage

Please avoid submitting sensitive personal, health, or financial information to agents. What you submit may be sent to AI providers to produce your result.

5. How We Share Information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share information only:

• With the service providers described in section 4
• To comply with law or valid legal process
• To protect our rights, our users, or the public
• In connection with a merger, acquisition, or sale of assets, subject to this Policy
• Purchase processing: Google Play, the Apple App Store and RevenueCat, Inc. process and verify in-app purchases on our behalf, as described in section 2. RevenueCat's privacy policy: https://www.revenuecat.com/privacy

6. Cookies and Analytics

The website uses cookies and similar technologies to keep you signed in, remember preferences, and measure usage and conversions. You can control cookies in your browser settings, though disabling some may affect how the site works. The mobile app does not use cookies.

7. Data Retention

We keep account information while your account is active, and as needed to provide the Service, meet legal obligations, resolve disputes, and enforce our agreements. You can ask us to delete your account at any time (see section 9). Data stored only on your phone in the mobile app stays under your control and is never sent to us. To delete your account and associated data, email support@treasurerate.com with "Privacy request" in the subject line. We will delete or anonymize your data within 30 days, except records we must keep for legal or accounting reasons.

Purchase records are kept for as long as required for tax, accounting and refund purposes, even after you delete the app.

8. Data Security

We use reasonable technical and organizational measures to protect your information, including encrypted (HTTPS) connections and hashed passwords. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Report a vulnerability: if you find a security issue in the Service, email support@treasurerate.com with "Security" in the subject line and the details. Please give us a reasonable chance to fix it before sharing it publicly. We will not take action against good-faith researchers who follow this guidance.

9. Your Rights

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal data, to object to or restrict certain processing, and to withdraw consent. To use any of these rights, email support@treasurerate.com with "Privacy request" in the subject line. We will verify your request and respond within the time the law requires.

To request deletion of purchase records linked to your anonymous app ID, email support@treasurerate.com from the device's Google or Apple account email and include the order number from your store receipt.

California residents: under the CCPA/CPRA you may request to know, delete, or correct the personal information we hold about you. We do not sell or share personal information as those laws define it, and we will not discriminate against you for using your rights.

UK and EU residents: you may also complain to your local data protection authority, such as the UK Information Commissioner's Office.

10. Legal Basis and International Transfers

For visitors in the UK and EU, we process personal data on these legal bases:

• Contract: to provide the Service and agent results you request
• Legitimate interests: to secure, improve, and prevent abuse of the Service
• Consent: for non-essential cookies, which you can withdraw anytime
• Legal obligation: to keep records the law requires

TreasureRate is based in the United States, and our providers may process data in the US and other countries. When we transfer personal data out of the UK or EU, we rely on appropriate safeguards, such as the standard contractual clauses our providers offer.

11. Children's Privacy

The Service is not directed to children under 18, and we do not knowingly collect personal information from them. If you believe a child has given us information, contact us and we will remove it.

12. Changes to This Policy

We may update this Policy from time to time. Material changes will be posted on this page with a new "Last updated" date. Continued use of the Service after changes take effect means you accept them.

13. Contact

Driftwood Brands LLC (TreasureRate)
2010 Monterey Hwy #255
San Jose, CA 95112, USA

Privacy requests, support, and security issues: support@treasurerate.com