Privacy Policy

1. Introduction

LostKeyGuard ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our key recovery service.

Privacy is central to our service design. We built LostKeyGuard specifically to enable key recovery without exposing owner identity to finders or third parties.

2. Information We Collect

From Key Owners (Account Holders)

When you create an account and use our service, we collect:

• Account Information: Email address, name, and encrypted password
• Return Address: Shipping address for key returns (stored securely and never shared with finders)
• Tag Information: Tags registered to your account and their nicknames
• Payment Information: Payment details processed securely through Stripe (we do not store full card numbers)
• Recovery History: Records of recovery cases associated with your tags

From Finders (Non-Account Holders)

When someone reports a found key, we collect:

• Contact Information: First name, last name, email address, and phone number
• Shipping Address: Address for return kit delivery
• Payment Method: PayPal email or Venmo handle for reward disbursement
• Photos: Images of the found key for verification purposes

3. How We Use Your Information

We use the information we collect to:

• Facilitate key recovery coordination between finders and owners
• Process payments for tags and recovery services
• Ship return kits to finders and recovered keys to owners
• Disburse finder rewards
• Send service-related notifications (recovery alerts, shipping updates)
• Maintain audit trails for custody verification
• Improve and optimize our service
• Respond to customer support inquiries
• Comply with legal obligations

4. Privacy Architecture

Our service is designed with privacy-first principles:

• Anonymous QR Codes: Tag codes are cryptographically signed tokens that cannot be reverse-engineered to reveal owner information
• No Owner Exposure: Finders never see owner names, addresses, phone numbers, or any identifying information
• Indirect Communication: All communication between finders and owners is facilitated through our platform
• Secure Hub Processing: Keys are shipped to our verification hub, not directly between finders and owners

5. Information Sharing

We do not sell your personal information. We share information only in the following circumstances:

Service Providers

• Stripe: Payment processing
• Shipping carriers: Return kit and key delivery (address information only)
• PayPal/Venmo: Finder reward disbursement
• Cloud hosting providers: Secure data storage

Legal Requirements

We may disclose information if required by law, court order, or government request, or to protect our rights, property, or safety.

6. Data Retention

We retain your information for as long as necessary to provide our services and comply with legal obligations:

• Account data: Retained while your account is active and for 3 years after deletion
• Recovery records: Retained for 7 years for legal and audit purposes
• Finder information: Retained for 2 years after recovery completion
• Photos: Retained for 1 year after recovery completion, then deleted

7. Data Security

We implement industry-standard security measures to protect your information:

• Encrypted data transmission (TLS/SSL)
• Encrypted database storage
• Secure password hashing (bcrypt)
• Access controls and audit logging
• Regular security assessments

No method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

8. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal information
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your account and associated data
• Portability: Request your data in a portable format
• Opt-out: Unsubscribe from marketing communications

To exercise these rights, contact us at privacy@lostkeyguard.com

9. Cookies and Tracking

We use essential cookies to:

• Maintain your login session
• Remember your preferences
• Ensure security and prevent fraud

We do not use third-party advertising cookies or sell data to advertisers.

10. Children's Privacy

Our Service is not intended for children under 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

11. International Data Transfers

Your information may be transferred to and processed in the United States. By using our Service, you consent to such transfers. We ensure appropriate safeguards are in place to protect your information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. Your continued use after changes constitutes acceptance of the updated policy.

13. California Privacy Rights

California residents have additional rights under the CCPA:

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of sale of personal information (we do not sell your data)
• Right to non-discrimination for exercising privacy rights

14. Contact Us

For privacy-related questions or to exercise your rights, contact us at:

Email: privacy@lostkeyguard.com