Privacy Policy

At HerringShot, we take your privacy seriously. This Privacy Policy explains how we collect, use, and protect your information when you use our AI-powered screenshot analysis application.

1. Information We Collect

Account Information

• Email address (for account creation and communication)
• Password (encrypted and securely stored)
• Usage statistics (number of analyses performed)
• Account preferences and settings

Usage Data

• Screenshots temporarily processed for AI analysis
• Selected text content for analysis
• Custom prompts you create
• Application performance metrics

2. How We Use Your Information

We use your information to:

• Provide AI Analysis: Process your screenshots and text through Google's Gemini AI
• Account Management: Maintain your account and track usage limits
• Service Improvement: Analyze usage patterns to improve our application
• Communication: Send important updates, security notices, and support responses
• Authentication: Verify your identity and maintain account security

3. Data Processing and Storage

Screenshots and Content

• Screenshots are processed in real-time by Google's Gemini AI
• No screenshots are permanently stored on our servers
• Content is transmitted securely using HTTPS encryption
• Analysis results may be temporarily cached for performance

Account Data

• Stored securely in Firebase (Google Cloud Platform)
• Encrypted in transit and at rest
• Access limited to essential personnel only
• Regular security audits and monitoring

4. Third-Party Services

We use the following trusted third-party services:

• Google Cloud Platform: For hosting and database services
• Google Gemini AI: For processing screenshots and providing analysis
• Firebase Authentication: For secure user authentication
• Gmail SMTP: For sending transactional emails

These services have their own privacy policies and security measures. We carefully select partners who meet our high standards for data protection.

5. Data Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to third parties except:

• With your explicit consent
• To comply with legal obligations
• To protect our rights and prevent fraud
• In connection with a business transfer (with prior notice)

6. Data Retention

• Screenshots: Not stored - processed and immediately discarded
• Account Data: Retained while your account is active
• Usage Analytics: Aggregated data retained for service improvement
• Deleted Accounts: Data permanently removed within 30 days

7. Your Rights and Choices

You have the right to:

• Access: Request a copy of your personal data
• Correction: Update or correct your account information
• Deletion: Request deletion of your account and data
• Portability: Export your data in a standard format
• Opt-out: Unsubscribe from non-essential communications

8. Security Measures

We implement industry-standard security measures:

• End-to-end encryption for data transmission
• Secure password hashing (bcrypt)
• Regular security audits and updates
• Multi-factor authentication options
• Monitoring for suspicious activity

9. Children's Privacy

HerringShot is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will take steps to delete it promptly.

10. International Users

If you are accessing HerringShot from outside the United States, please note that your information may be transferred to, stored, and processed in the United States where our servers are located. By using our service, you consent to this transfer.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by:

• Posting the updated policy on our website
• Sending an email notification to registered users
• Displaying a notice in the application

12. California Privacy Rights

California residents have additional rights under the CCPA, including the right to know what personal information is collected and how it's used. Contact us to exercise these rights.