PRIVACY & PHOTO HANDLING
Your collection stays private.
We collect only the information needed to review a collection, contact the seller, and prepare a human-reviewed purchasing decision.
What we collect
Seller contact details, city, state, ZIP code, collection details, optional notes, and up to ten JPG or PNG collection photos. We do not collect a street address. Images are checked, decoded, resized, rebuilt as JPEG files, and stripped of metadata before private storage.
Location verification
The server sends only the five-digit ZIP code to Google Geocoding and compares the returned city and state with the form. We store the standardized city, state, ZIP code, verification status, provider name, and time—but not Google’s raw response, coordinates, or place identifier.
Who can see it
Seller records and photos are available only through the protected Timeless Trove administrator portal. A submission ID is a reference—not a password—and does not grant access to a record or its photos.
AI-assisted review
An authorized administrator may send the submitted collection details and private photos from the Timeless Trove server to OpenAI for an internal estimate. Provider credentials never go to the browser, API response storage is disabled with store: false, applicable provider policies still apply, and every result requires human review before any offer.
Retention and deletion
Incomplete upload sessions expire after one hour. Rejected or withdrawn submissions should be deleted within 30 days; completed purchase records may be retained for up to 180 days unless tax, fraud-prevention, dispute, or other legal requirements require longer. An authorized administrator can permanently delete a submission and its stored photos from the live application.
Operational records
Security audit events use hashed actor and network identifiers. AI audit records retain provider response IDs, model and prompt versions, token totals, and analyzed image IDs; raw provider responses are not retained by the application.
Questions or deletion requests
Contact Timeless Trove through the same email or phone conversation used for your collection review and include your submission ID. We will verify the request before changing or deleting a private record.