Privacy policy

What we collect

• Account information — your name and email address, so you can sign in and we can reach you.
• Inventory content — the items, photos, values, and notes you add to your household.
• Receipts from connected email — when you connect a mailbox, we look for purchase receipts and store the ones we find, plus limited metadata about the messages we scan.
• Usage information — how our public website is used, such as the pages visited, the buttons pressed, and whether a visit led to a sign-up or a booked walkthrough. We use it to improve the site, to see which of our ads work, and to show our ads to people who visited. We don't collect it inside your account.

Connected email — we only read

If you connect an email account, Indemnia only reads it, and only to find purchase receipts. For Gmail and Outlook we request read-only access; for Yahoo you create an app password for us. Either way, we never send, change, or delete anything in your mailbox. You can disconnect an account at any time, which stops all future access.

How we use your data

• To build and maintain your household inventory and generate loss reports.
• To detect and extract receipts from connected email and turn them into item suggestions you confirm.
• To operate, secure, and improve the service, and to contact you about your account.

How your data is shared

We don't sell your personal information. On our public website, we let Google use your visits to show you Indemnia ads on other sites, which California law counts as sharing. You can turn this off on the Your privacy choices page, and a Global Privacy Control signal from your browser turns it off too. Nothing inside your account is ever shared this way.

Beyond that, we share your information only with service providers that help us run Indemnia, under contract and only as needed:

• Supabase — our database, authentication, and file storage.
• Vercel — hosting for our web application, which serves your inventory and receipts back to you.
• Anthropic (Claude) — AI processing to identify items in photos, extract receipt details, read an insurance policy you upload as a PDF, and turn any policy you add into a plain-language summary. It also reads descriptions of your items to price them and sort them into categories, and answers messages you send our support team. Content sent for processing is not used to train models.
• Voyage AI — reads your item names and the text of receipts we find in your email, so we can tell when two descriptions mean the same thing and match a receipt to the right item.
• OpenRouter — a gateway that hands some of this work to other AI companies. Descriptions of your items, the lines of a claim, messages you send our support team, receipts that arrive as PDFs, photos you take of your policy's declarations page, and photos you take of your belongings go through it. We send those receipts and photos only to companies that agree not to keep them or train on them. The companies it works with for us are Google, OpenAI, DeepSeek, TypeSafe, Meta, xAI, Xiaomi, Qwen (from Alibaba) and Z.ai.
• Email and delivery providers — to receive receipts you connect (e.g. Gmail) and to send transactional email (e.g. account and invitation messages).
• Brevo — our customer-relationship and email platform. We send it your email address, whether you're a homeowner or an adjuster, how you signed up, what brought you to Indemnia, and the dates you reached setup steps like adding your first room, so we can send you emails that help you get started. Nothing from your receipts or inventory goes to Brevo.
• Google — Google Analytics on our public website, which sets its own cookies there, counts visits and sign-ups, tells us which of our Google ads led to them, and lets Google show Indemnia ads to people who visited. It never runs inside your account. It doesn't load at all if you turn it off on Your privacy choices, or if your browser sends a Global Privacy Control signal.
• Calendly — scheduling, if you book a walkthrough with us. The booking form is theirs, so the name, email and answers you give it go to Calendly. Nothing from your Indemnia account is sent to them, and you never have to book one.

Retention

We keep your account and inventory data for as long as your account is active. When we store a copy of an email to read a receipt from it, a scheduled job deletes that copy after 90 days. We also keep a short note of each message we check (the sender, subject and date) so we don't read it twice. That note stays until you delete your account, or until you delete what we found in that mailbox. When you scan a full insurance policy, we store that document privately so you can re-read it. You can delete it any time from the policy, and we delete it if you ask. A declarations-page scan is deleted as soon as we've read it. When you delete your account, we delete or de-identify your data, except where we're required to keep it.

Security

We check who is reading each record where your data is stored. Your household's data can be read by:

• the members of your household
• anyone you share a claim with, for that claim only
• apps you connect under Connected apps, within what you allowed, including the sender and subject of each email we checked if you connected a mailbox
• Indemnia staff, when they need to look into a problem with your account

Access to your email is stored encrypted and used only on our servers: to fetch your mail, and to cancel that access when you disconnect or delete your account. No system is perfectly secure, but we work to protect your data.

Your choices

• Access or correct your information from within the app.
• Disconnect any connected email account at any time.
• Stop us sharing your visits to our website with Google for ads, on Your privacy choices.
• Download a copy of everything we hold about you from Settings → Account on the website.
• Delete your account from Settings → Account on the website or Settings in the mobile app, or by emailing us.

Children

Indemnia is not directed to anyone under 18, and we don't knowingly collect their data.

Changes & contact

We'll update this policy as the product evolves and note the date above. Questions or requests? Email privacy@indemnia.ai.