Privacy Policy
Last updated: Launch version
This policy explains what FindBack collects, how it is used, and how we protect private recovery information.
Private proof stays private
Private proof details are used for verification and are not shown publicly.
Account information
We collect the details you provide when creating or using an account, such as your name, email address, password credentials, profile information, role, organization membership, and basic account settings.
Item posts and images
Lost and found posts may include item titles, descriptions, category, approximate location, dates, photos, and status updates. Public posts should avoid sensitive personal information.
Claim proof details
Private proof details are used for verification and are not shown publicly. These details can help item owners, finders, and organizations review claims more safely.
Messages and chat
Messages sent through FindBack are used to support recovery conversations, safety review, abuse prevention, and dispute handling where needed.
Organization data
For verified organizations, we may store profile details, location information, staff assignments, collection instructions, handover policies, QR code settings, and dashboard activity.
Service providers
Payments are handled by Stripe, uploads may be handled by Cloudinary, and emails may be handled by Resend. These providers process data needed to deliver those services.
Your rights and contact
You can contact us to request help accessing, correcting, or deleting account information where the law allows. Some records may be retained for safety, fraud prevention, legal, or operational reasons.
Data security basics
We use practical safeguards such as access controls, authentication, private verification fields, and moderation processes. No online service can promise perfect security, so users should avoid posting sensitive details publicly.
Stripe
Payment processing
Cloudinary
Image and upload handling
Resend
Transactional email delivery
Contact us if you need help with privacy, account access, moderation concerns, or data requests.