Privacy Policy

1.1 Account Information

When you create an account, we collect:

• Name and email address
• Profile photo (from your sign-in provider or uploaded by you)
• Username and bio (optional, for your public profile)
• Password (hashed and encrypted — we never store or see your actual password)
• Social media handles (optional, for your public profile)
• Referral source (if you signed up via a referral link)
• Notification preferences and app settings

1.2 Email Data (Optional)

If you choose to connect your Gmail account, we access your inbox using read-only permissions. We cannot send, delete, or modify your emails.

We scan your emails to find:

• Order confirmations and receipts
• Shipping and delivery notifications
• Discount codes and promotional offers
• Return and refund confirmations

We only search for emails from known retailers and carriers. We do not read personal correspondence, and we do not store the full content of your emails. We extract structured data (vendor name, order number, items, prices, tracking numbers) and discard the raw email content. We do retain email metadata (sender address, subject line, date, and a short preview snippet) for deduplication and search purposes.

You can disconnect your Gmail at any time from the Integrations page. When disconnected, we stop accessing your inbox immediately.

1.3 Purchase and Shipping Data

We store information about your purchases, including:

• Vendor name, order numbers, and purchase category
• Items purchased (names, prices, quantities, images, product identifiers like Amazon ASINs)
• Shipping carrier, tracking numbers, and delivery address (when available from emails)
• Delivery status, estimated delivery dates, and approximate delivery location coordinates
• Order amounts, refund amounts, and return deadlines
• Purchase type classification (physical, digital, subscription, or service)

1.4 Wishlist and Shopping Data

When you create wishlists and add items, we store:

• List titles, descriptions, and settings
• Item URLs, titles, prices, and images
• Tags, notes, sizes, colors, and priorities you assign
• Reservation information (who reserved an item for gifting)
• Collaborator information (who you've invited to edit your lists)

If a non-registered visitor reserves a gift on a public list, we collect their name and email address (provided voluntarily) to facilitate the reservation. This data is stored with the reservation record and deleted when the list owner deletes their account.

1.5 Receipt & File Uploads

When you upload receipt images or PDFs:

• Files are stored in encrypted private cloud storage (Vercel Blob) and are not publicly accessible
• Only you (the authenticated account owner) can view or download your receipts
• Receipt URLs cannot be shared — all access requires authentication
• Image metadata (EXIF data including GPS coordinates and device information) is automatically stripped before storage
• Files are validated for type integrity (magic byte verification) to prevent malicious uploads
• Uploads are scanned using AI to verify they are legitimate receipts or purchase documents — non-receipt content and inappropriate material is automatically rejected
• When you delete a purchase, all associated receipt files are permanently deleted from storage
• We do not use your receipt images for training, advertising, or any purpose other than displaying them back to you

1.6 Analytics Data

We collect basic, anonymized usage data to improve the Service:

• Pages visited (URL paths only — no personal data in query parameters)
• Anonymous visitor counts using hashed IP addresses — we never store your actual IP address

We use two complementary, privacy-preserving systems. First, our own first-party analytics (hashed-IP visitor counts, as above). Second, Vercel Web Analytics and Vercel Speed Insights, provided by Vercel Inc. (our hosting provider): these are cookieless, set no identifiers on your device, do no cross-site tracking, and receive only anonymized page-view and page-performance (Core Web Vitals) events. We strip query strings from every event before it leaves your browser, so share tokens and invite codes are never included. Because these tools use no cookies and no persistent identifiers, they are not gated by the Analytics cookie toggle in Section 5. We do not use Google Analytics, Meta Pixel, or any cross-site tracking pixels.

1.7 Affiliate Click Data

When you click a shopping link on WantHave, we record:

• The destination URL (the product page you're visiting)
• Which affiliate program was used
• The wishlist or page you clicked from
• A hashed visitor identifier (not your IP address or personal information)

1.8 Waitlist Signups

While WantHave is invite-only, you can join the waitlist with just an email address. We store your email, where on our site you signed up from, and the referring page. We use this only to send you your invite and waitlist-status updates — we won't send marketing without separate consent, and we never share or sell the list. Waitlist records are kept until you receive an invite and create an account (after which your account record takes over) or until you ask us to delete you — email privacy@wanthave.app.

1.9 Group Gifting & Shipping Addresses

When you join a group gift, we store your name, optional email, and the amount you've pledged. Pledge amounts and participant names are visible to everyone in that gift group— that's the point. Pledges are informational only: WantHave never collects, holds, or processes any money (see our Terms of Service).

If you save a shipping address so a gift buyer can ship to you, every field of it is encrypted at rest (AES-256-GCM) and is never shown on any public page. It is revealed only to the designated, email-verified buyer of your gift through a gated, audited reveal — and you can revoke access instantly at any time.

1.10 Browser Extension

If you install the WantHave browser extension for Chrome, it works with the following data:

• A connection token is stored locally in your browser to keep you signed in to your WantHave account. This authentication information stays on your device.
• As you shop, the extension reads product and checkout page content locally— page text, displayed prices, and discount codes — to detect products, prices, and savings on the page you're viewing.
• When you take an action (such as saving an item) or when a price check runs on a product page while you are signed in, the extension sends the product-page URL to wanthave.app to power saving and price-drop alerts — together with the displayed price for non-Amazon stores. For Amazon, the extension never reads or sends the price; Amazon price data comes from a licensed third-party provider (Keepa). We send this only for the items you act on, not for every page you browse.

The extension never reads your cookies and never modifies, redirects, or overrides affiliate links on the pages you visit.

4.1 Authentication Providers

Google, Apple, and Microsoft process your sign-in credentials. We receive your name, email, and profile photo from them. We do not share your WantHave data back to them.

4.2 Google / Gmail — Limited Use Compliance

If you connect Gmail, Google processes our read-only API requests (scope: gmail.readonly) to fetch your emails. Our use of Gmail data is governed by the following commitment, required by Google:

In practice, this means for your Gmail data specifically:

• The data is used only to provide the user-facing features of WantHave (purchase tracking, receipt archiving, discount-code organization).
• The data is not transferred to any other party except as necessary to provide the service (see Section 4.5 for the one AI processor we use, where only email body text is sent without any identifier tying it back to you).
• The data is not used for serving advertisements of any kind, including retargeting, personalized, or interest-based advertising.
• Humans at WantHave do not read your Gmail data except where required to investigate a specific abuse report or to honor a user-initiated support request.

Raw email content (subject, sender, body snippet) is automatically deleted 90 days after receipt by a daily cron job. Parsed derivatives (your purchase history, shipment tracking, discount codes) are user-owned and retained until you delete them.

4.3 Shipping Carriers

We send tracking numbers to USPS, UPS, FedEx, DHL, and Amazon Logistics APIs to fetch delivery status. No personal information is sent — only the tracking number.

4.4 Affiliate Networks

When you click a shopping link, the destination retailer or affiliate network (such as Skimlinks, Impact, Rakuten Advertising, CJ Affiliate, Awin/ShareASale, eBay Partner Network, and Amazon Associates) may set cookies on your browser to track the purchase for commission purposes. This is standard across affiliate-driven services. You can opt out via our cookie settings.

This includes our own curated and editorial lists: lists published by the WantHave team may contain affiliate links, and pages that contain them carry a visible disclosure. See the Affiliate Links section of our Terms of Service for the full disclosure, including our promise to never override your existing affiliate tags.

4.5 AI Processing (AWS Bedrock)

We use Anthropic's Claude model, run inside Amazon Web Services (AWS) Bedrock, to parse receipt emails into structured data. When we make an API call, we send only the email body text — we do not send your Gmail address, your WantHave user ID, the Gmail message ID, or any other identifier that would let AWS or Anthropic correlate the content back to you.

No training on your data. AWS Bedrock's terms explicitly exclude customer inputs from any model-training corpus. Anthropic, as the underlying model provider, operates as a sub-processor under AWS's Bedrock contract and receives no separate retention rights.

No AWS-side retention. AWS Bedrock's optional model-invocation logging is not enabled in our AWS account — no CloudWatch or S3 logging destinations are configured. That means AWS does not retain a copy of your prompts or completions either. Even if logging were ever enabled, our prompts contain no user identifiers, so any retained payload could not be tied back to a specific WantHave account.

We previously routed these calls through Anthropic's direct API. We requested enrollment in Anthropic's Zero Data Retention (ZDR) program on 2026-04-16; the request was denied. We migrated to AWS Bedrock on 2026-05-20 as the pre-committed fallback — this gives us a contract path (AWS's standard Data Processing Addendum + AWS Bedrock terms) and a verifiable no-retention posture inside our own AWS tenancy.

The Service automatically falls back to deterministic regex parsing when the AI call is unavailable or rate-limited.

4.6 Infrastructure

Our Service is hosted on Vercel (compute, file storage, and the cookieless Web Analytics / Speed Insights described in Section 1.6), Neon (database), and Upstash (caching). These providers process data on our behalf under their data-processing agreements and do not use your data for their own purposes.

For All Users

• Access — View all your data within the app at any time
• Update — Edit your profile, wishlists, and purchases
• Delete — Delete your account and all data from Settings
• Disconnect — Disconnect Gmail to stop email scanning
• Cookie control — Manage cookie preferences at any time

California Residents (CCPA)

Under the California Consumer Privacy Act, you have the right to:

• Know what personal information we collect and how it is used
• Request deletion of your personal information
• Opt out of the "sale" of personal information — we do not sell your data
• Not be discriminated against for exercising your privacy rights

EU/EEA Residents (GDPR)

Under the General Data Protection Regulation, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase your data ("right to be forgotten")
• Restrict or object to processing
• Data portability (export your data)
• Withdraw consent at any time

Our legal basis for processing: (a) your consent (email scanning and optional cookies), (b) contract performance (providing the Service), and (c) legitimate interest (improving the Service and preventing abuse).