1. Introduction and Data Controller

Jewel Value ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our jewellery valuation platform.

Jewel Value is operated by JMS Dev Lab, Ireland, which is the data controller for the account, billing and usage data described in this policy. For the customer and valuation records that a jeweller enters into Jewel Value, the jeweller is the controller and we act as their processor under a data processing agreement, which is available on request from privacy@jewelvalue.app.

2. Information We Collect

We collect information that you provide directly to us, including:

Account information (name, email, password)
Business information (company name, address)
Customer data you enter for valuations
Payment information processed through Shopify
Communications with our support team

3. How We Use Your Information

We use the information we collect to:

Provide and maintain our services
Process valuations and generate certificates
Communicate with you about your account
Improve our platform and develop new features
Comply with legal obligations

4. Data Sharing and Sub-processors

We do not sell your personal information. We share it only with the service providers below, who process it on our instructions and under contracts that require confidentiality and appropriate security:

Shopify — app distribution, subscription billing and, where you install the Shopify app, store, product and order data you choose to sync.
Vercel — hosting for the website and web application.
Railway — hosting for the API, databases, file storage and cache.
Resend — transactional email delivery (account, certificate and notification emails).
Sentry — error monitoring; request URLs are redacted before capture.
Google Analytics / Tag Manager — optional website analytics, loaded only after you accept cookies (see section 9).
YouTube — training video playback on the Training Centre (see section 10).

Reference-data providers such as metal-price and exchange-rate services receive no personal data. We may also disclose information where required by law or to protect our rights, and to a successor in the event of a merger or acquisition, subject to this policy.

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal information. However, no method of transmission over the Internet or electronic storage is 100% secure.

6. Your Rights

Depending on your location, you may have the right to:

Access your personal data
Correct inaccurate data
Request deletion of your data
Object to processing of your data
Data portability

7. GDPR: Legal Bases, Transfers and Complaints

We process personal data on the basis of contractual necessity (providing the service you signed up for), our legitimate interests (securing and improving the platform, preventing abuse), legal obligation (tax and accounting records) and your consent where required (optional analytics cookies, marketing email).

Some of the providers listed in section 4 process data outside the European Economic Area, principally in the United States. Where that happens we rely on the European Commission's Standard Contractual Clauses and, where the provider is certified, the EU-US Data Privacy Framework, together with supplementary security measures.

You can exercise the rights in section 6 by emailing privacy@jewelvalue.app; we respond within one month. If you are unhappy with how we handle your data you have the right to lodge a complaint with the Irish Data Protection Commission (dataprotection.ie) or with your local supervisory authority.

8. Data Retention

We keep personal data only for as long as it is needed for the purpose it was collected:

Account, team and settings data — for the life of your account. When you delete your account, or a Shopify store uninstalls the app and Shopify sends its data-erasure request, we delete the account and its data within 48 hours.
Valuation records, photographs and issued certificates — until you delete them or your account is deleted. Issued certificates are retained unchanged so they can be verified later.
Customer-portal access codes — expire after a short period and are removed once used.
Billing records — held by Shopify and retained for as long as tax and accounting law requires.
Error and request logs — held by our monitoring provider for its standard retention period (90 days for Sentry).

We may keep limited information for longer where necessary to comply with legal obligations, resolve disputes or enforce our agreements.

9. Cookies

With your consent, we use cookies and similar technologies for product analytics and conversion measurement, provided by Google Analytics and Google Tag Manager. Advertising storage, advertising personalisation, and advertising user-data consent remain disabled, and we do not load third-party advertising or social-media tracking pixels.

You can accept or reject optional analytics when you first visit, and you can change your mind at any time using the "Cookie settings" link in the footer of any page. You can also control cookies through your browser settings.

10. Training Videos and YouTube

The Training Centre library uses click-to-load previews for videos hosted by YouTube. Dedicated lesson pages display the selected video directly and therefore connect to YouTube when the page opens. Google and YouTube may receive technical connection information and use cookies or similar technologies under their own privacy terms. All embedded playback uses YouTube's privacy-enhanced domain.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

12. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

Email: privacy@jewelvalue.app