MarginLens Privacy Policy

Who we are

Focalward LLC provides MarginLens, a tool for researching resale items and preparing listings. Contact support@focalward.com for privacy questions or account-deletion requests. MarginLens is currently in development; available processing depends on the build and features you use.

Photos, item details, and saved work

MarginLens uses photos you take or choose, item descriptions and notes, asking and selling prices, condition details, verdicts, listing drafts, publication receipts, sourcing sessions, budgets, sales records, and selling preferences.

Save item is an explicit account-cloud action: the completed verdict and up to three app-prepared item photos with a cover thumbnail stay with your signed-in account until you remove them or delete your account. Saved items and sourcing sessions are available across your signed-in devices.

Your current unsaved analysis, unfinished Quick Capture and Scout queue work, and Listing Studio drafts remain on this device; running a cloud analysis is a separate action. Camera access is requested when you use the camera; the photo picker gives access to images you select. Avoid including people, addresses, documents, or other personal information in item photos or notes.

In an approved full-feature store beta, analysis, Scout, Quick Capture review and analysis-origin Scene Studio can run without account sign-in after platform verification and processing consent. Guest cloud work is temporary. Signing in alone does not import it: Save item copies only the analysis, selected item photos and chosen kept Scene set you explicitly save into your account. Device-only unfinished drafts are not guaranteed to survive reinstall or appear on another device.

Cloud analysis and AI processing

Offline sample analysis uses labeled example results and does not upload photos for analysis. When you approve live item analysis or Scout Scan, selected photos, crops and item details are sent to the configured MarginLens service. Cloud services use Amazon Web Services for authentication, storage, and processing. Live analysis and Scout can send inputs to OpenAI and Google Gemini under their service terms and data-handling rules. Scout examines visible objects in a shelf or table photo; its inspection priorities and relative-value hints are uncertain, not appraisals or authenticity checks.

The currently connected AWS Scene Studio workflow uses separate processing consent for cutout processing and deterministic composition, placing original item pixels into prepared staging scenes without sending each item to an image-generation provider. Other supported Scene provider configurations, if enabled, can send selected photos and details to OpenAI, Google Gemini, Black Forest Labs (FLUX), or Adobe Firefly. Check the processing disclosure for the workflow you use; provider data-handling rules apply when that provider receives inputs.

Saving item photos, inspecting images, or reopening an existing Scene set does not start a new analysis. Buying guidance, performance reports, and Ask about this item use recorded data and calculations; the item guide does not perform a new web search or send a new AI request. Review the disclosure before submitting; cancel to avoid the upload. Approvals may be remembered for the current guest or account on this device. Guest approval does not grant account photo-sync approval. Account shows remembered approvals and lets you revoke analysis-upload approval for future requests; revocation does not erase past uploads. AI output and cutouts can be inaccurate and should be reviewed before relying on or sharing them.

Account and billing information

Cloud sign-in uses Amazon Cognito and may process your email address, account identifier, and authentication information. The app stores authentication tokens in the device's secure storage. When billing is enabled, RevenueCat processes your app account identifier and purchase, entitlement, and transaction information together with Google Play or the applicable app store. MarginLens verifies purchases on its server and stores subscription status, monthly analysis usage, and purchased credit balances. Payment details are handled by the store. Store test purchases are separate from real charges; check the payment screen before confirming a purchase.

Approved store betas use Google Play Integrity on Android or Apple App Attest and a verified AppTransaction on iOS to verify a legitimate installation. The service uses minimized platform-verification evidence to derive pseudonymous MarginLens beta identifiers, check request freshness and prevent replay or allowance resets. It records verification keys, counters and beta usage separately from a paid subscription; raw receipts, integrity evidence and tokens are not written to application logs. Guest session credentials are stored in device-only secure storage. This does not create a Cognito account or a paid subscription. Ordinary full-feature beta checkout is disabled; designated Sandbox billing builds retain separate purchase-test behavior.

Content reports and support

When you submit a content report, we receive your description, the reported content reference, report identifier, submission time, and signed-in account identifier so we can investigate and improve safeguards. The reporting form does not attach photos automatically. Information you email to support is used to respond to your request. Please avoid including unrelated sensitive information.

Sharing, security, and diagnostics

We use service providers to deliver the functions described here. Cloud infrastructure may process connection information, including IP addresses, request timing, errors, and security records. We do not sell your personal data. When you copy, share, or export a listing or image, the destination you choose receives that content under its own policies. Cloud connections use encrypted transport and access controls; no storage or transmission system can be guaranteed completely secure. Device-local records rely on your device's security and may be affected by its backup settings.

Retention

Saved items have no automatic expiry. Their details, saved verdicts, and attached item source photos and thumbnails remain private with the account item until you remove the item or photo or delete your account. A saved verdict remains with its item beyond analysis job expiry. Account-owned retained Scene sets and kept images remain available until you delete the set or account; independent Scene sets created directly from an analysis remain when a saved item is removed, and their source copies are not erased by removing an item photo.

Incomplete item-photo uploads expire after one day; unsuccessful temporary Scene previews expire after seven days. Unsaved analysis records/jobs remain subject to the existing 90-day schedule, while analysis-upload photos have a separate 30-day schedule. Expiration processing is asynchronous.

Account and entitlement records remain until deletion or an applicable service requirement ends. After account deletion, we retain the former account identifier and a deletion marker to prevent later billing notifications from recreating deleted records or issuing duplicate credits. This marker does not contain your email, photos, analyses, or purchase details and remains while needed to reject those notifications.

Operational logs generally expire after one month, and administration service logs after three months. Staff administrative audit records have a one-year retention schedule. Provider usage and cost receipts, including analysis and provider-response references, provider/model, token or search counts, duration, outcome and estimated cost, have a 90-day schedule and are not removed by account deletion. These receipts do not store the item photos or analysis text.

Database recovery copies can retain earlier records for up to 35 days. AI providers, app stores, and RevenueCat have separate retention practices. Support correspondence is retained as needed to resolve and document the request or meet legal obligations.

Guest-only cloud photos and Scene images expire 30 days from creation, including kept guest images; keeping or retrying does not extend that deadline. Guest analysis/job metadata follows the 90-day schedule. Reads are denied at the image deadline while physical erasure is asynchronous. Explicitly saved account copies have no automatic expiry and remain until item/photo/Scene removal or account deletion. After beta access is disabled, a fixed seven-day recovery window can allow the verified owner to read, keep, explicitly save or discard existing work; it allows no new processing and never extends image retention. Pseudonymous beta eligibility, usage and replay-protection records are retained while needed to enforce limits; discarding work does not reset the allowance.

Your deletion choices

You can remove an item or an item photo in its My Items editor. Removing an item deletes its account record, attached account photos and thumbnails, and Scene Studio sets created from that saved item; independent Scene sets created directly from an analysis and their kept images remain available. Removing a photo deletes that source and thumbnail but does not delete independent retained Scene sets; delete those sets separately.

Delete account and cloud data requests deletion of the signed-in MarginLens account and associated active cloud records, item media, pending uploads, sourcing sessions, and Scene sets. After successful cloud deletion, the app attempts to clear current analysis work, unfinished queue captures and photos, local listing drafts, preferences, and remembered approvals on this device. Local work on other devices and previously exported copies must be reviewed separately. Cloud cleanup must finish before account identity deletion. Cloud cleanup failures can leave some data already removed; follow the error message and retry while still signed in. If local cleanup reports an error after the account is deleted, contact support.

You can also email support@focalward.com with the subject MarginLens account deletion from your account email address. We may ask you to verify account ownership. Do not send your password. Uninstalling alone does not delete cloud data. Copies you exported and data held by independent services may require separate deletion.

The minimal billing deletion marker and the operational receipts, logs, staff audit records and recovery copies described above can remain after deletion for their stated schedules. Other necessary legal or security retention will be explained when applicable. Deleting an account does not itself cancel an app-store subscription; manage subscriptions through the store. Purchases stay linked to the original MarginLens account and do not automatically transfer to a new account. Contact support before deleting an account with an active subscription or unused credits.

For temporary guest work, use the guest Discard action or Remove capture and its cloud-cleanup disclosure before signing out or reinstalling. Guest discard fences processing and requests retryable deletion of that work’s cloud media; account-owned copies are separate. Removing local-only drafts does not erase unrelated accepted jobs. Account deletion covers account-owned records, not every unimported guest draft or separately pseudonymous eligibility record. Discard does not reset your beta allowance. Uninstalling cannot request cloud erasure, and lost local guest credentials can prevent immediate recovery; the fixed guest expiry still applies.

Optional beta website feedback

If you choose to send feedback through the invited beta website, Focalward receives your self-reported name, device and build details, checklist answers and comments, plus any screenshots with their comments and optional voice note you attach. Files stay in your browser until you send the report. Feedback is stored separately from your app records and account in private Amazon Web Services storage for troubleshooting by authorized staff. Beta voice notes are not transcribed or sent to an AI provider. Reports and attachments become unavailable after 180 days; temporary staged uploads are scheduled for removal after one day. Database and object-storage cleanup is asynchronous, and protected backups may retain copies longer. In-app account or device deletion does not identify or delete a separate beta report; contact support@focalward.com for help requesting its deletion. Use fictional information and remove health details, names, messages, passwords and other sensitive information before sending.

Children and policy changes

MarginLens is intended for adults researching resale items and is not directed to children under 13. Contact us if you believe a child has provided personal information. We will update this policy when our data practices change and provide additional notice or consent where required.

MarginLens resources

App guide and tutorials · Beta tester instructions · Product page