PRIVACY POLICY

LAST UPDATED: FEBRUARY 1, 2026 · FORGED LABS, LLC

The SlabShot, LLC ("we," "us," or "our") operates The SlabShot at theslabshot.com. This Privacy Policy explains how we collect, use, and protect your information when you use our Service.

1. INFORMATION WE COLLECT

Account Information: When you register, we collect your email address and a hashed password. We do not store plain-text passwords.

Images You Upload: Images you submit for scanning are processed by our AI system to identify and price collectibles. Images are not permanently stored after processing is complete.

Usage Data: We collect information about how you use the Service including scan history, items identified, and feature usage. This data is used to improve the Service and enforce subscription limits.

Payment Information: Payment processing is handled entirely by Stripe. We do not store credit card numbers or banking information. We receive a customer ID and subscription status from Stripe.

Technical Data: We collect standard server logs including IP addresses, browser type, and access timestamps for security and debugging purposes.

2. HOW WE USE YOUR INFORMATION

To provide and maintain the Service
To enforce subscription quotas and access controls
To send transactional emails (account confirmation, billing receipts)
To improve AI identification accuracy (aggregated, anonymized data only)
To detect and prevent fraud or abuse
To comply with legal obligations

3. DATA SHARING

We do not sell your personal data. We share information only with:

Stripe: For payment processing. Subject to Stripe's Privacy Policy.
Supabase: Our database provider. Data is stored encrypted at rest.
Anthropic: Images are sent to Anthropic's Claude API for AI processing. Subject to Anthropic's Privacy Policy.
Law enforcement: When required by applicable law or court order.

4. DATA RETENTION

Account data is retained for the duration of your account and for up to 90 days after deletion. Scan logs are retained for 12 months for service improvement and dispute resolution. You may request deletion of your data at any time by contacting us.

5. SECURITY

We implement industry-standard security measures including encrypted connections (TLS), hashed passwords, and access-controlled databases. However, no system is completely secure and we cannot guarantee absolute security.

6. YOUR RIGHTS

Depending on your location, you may have rights to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data
Object to certain processing activities
Data portability

To exercise any of these rights, contact us at Justonjones@theslabshot.com.

7. COOKIES

We use minimal cookies necessary to maintain your login session. We do not use tracking or advertising cookies. You can disable cookies in your browser settings, though this may affect functionality.

8. CHILDREN'S PRIVACY

The SlabShot is not directed at children under 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such data, contact us immediately.

9. CHANGES TO THIS POLICY

We may update this Privacy Policy periodically. We will notify you of material changes by email or prominent notice on the Service. Continued use constitutes acceptance of the updated policy.

10. CONTACT

For privacy questions or requests, contact us at Justonjones@theslabshot.com.

The SlabShot, LLC · The SlabShot · theslabshot.com