Every fraction. Every source.

Privacy policy

Last updated: 28 October 2026

This notice describes how ValueReclaim handles information when you use its recycling workflow application. ValueReclaim is operated by Mads Svantesson. Contact: mads@valuereclaim.com.

Information we handle

• Account information, such as your email address, account identifier, workspace membership and role, and customer or team invitation details such as the approved email and invitation expiry.
• When you sign in with Google, your Google account identifier, email address and basic profile information, such as your name and profile image when provided by Google.
• Records you enter or upload: business and contact details, material receipts, weights, batches, jobs, work time, notes, photos, stock, prices, sales and collection records.
• Technical information needed to operate and protect the service, such as request and authentication logs, IP addresses and browser information.

How we use information

We use this information to authenticate you, match invitations to your email address, apply workspace permissions, save and display your business records, provide requested account emails, resolve support requests and maintain the service.

Google account data

Google sign-in is used to identify and authenticate your account. ValueReclaim does not request access to your Gmail messages, Google Drive files, calendar or contacts. We do not sell Google user data, use it for advertising, or use it to train AI models. We share it only as needed to provide authentication and hosting, comply with law or act on your instructions.

ValueReclaim’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Service providers and workspace access

Supabase provides authentication, database and file storage. Vercel hosts the application. Account emails are delivered through the configured email service, Resend. Google handles Google sign-in. GitHub Actions prepares automatic workspace backups and retains independent copies in private repository artifacts for 30 days. These providers process the information needed for their services under their own terms and privacy notices. The primary Supabase database and registered-photo storage are configured in Frankfurt, Germany. Providers may also process information in the United States and other countries, including for authentication, email, support and independent backups. GitHub describes its international processing and transfer arrangements in its privacy statement.

Records in a workspace are available to its authorised members according to their roles. Workspace administrators manage membership. Do not upload personal information or photos you are not authorised to share.

Workspace backups and recovery

Workspace owners can download a ZIP containing their company’s business records, team identifiers and email addresses, and registered photos. They can also enable daily or weekly automatic backups. Hosted copies are private and are kept for 30 days; automatic backups include an independent copy with GitHub. Recovery is support-assisted. Passwords, login sessions, platform secrets and measurements that have not yet synced from a device are excluded.

Downloaded workspace ZIPs contain readable business data and are not password-encrypted. Keep them in a secure location. They are separate from encrypted offline-device recovery files.

Cookies and browser storage

Authentication cookies keep you signed in. Browser storage also remembers preferences, such as material language. ValueReclaim does not currently include advertising trackers. Google’s sign-in pages and service providers may use their own cookies.

If you prepare offline receiving, this browser stores an encrypted workspace snapshot and saved delivery records. The workspace owner can enable a trusted browser profile, which keeps a local encryption key and opens its offline records automatically. A recovery copy of the key is stored with the service and is available only to the assigned authorised account or its workspace owner. Anyone using that trusted browser profile can access its prepared records; use a dedicated device and an operating-system screen lock. Older offline records may still require their previous device passphrase until upgraded. Records sync only through an authorised account when connected. New offline backup downloads are encrypted using the device key; the key is not included in the file. Restoring a trusted-device backup requires authorised workspace recovery and support assistance. Older downloads may contain readable business records and must be stored securely. Clearing browser data removes local records, including unsynced measurements.

Retention, security and deletion

Account and workspace records are retained while needed to provide the service, preserve business traceability and meet applicable obligations. Removing a worker’s access does not automatically delete historical job or transaction records. Backup copies and technical logs may remain for the applicable provider retention period.

Access is restricted through authentication and workspace permissions, and connections use HTTPS. No online service can guarantee absolute security.

To request access, correction, export or deletion of your personal information or account, email mads@valuereclaim.com. We may verify your identity and coordinate with the workspace administrator. Some business records may need to be retained where required by law. You can also revoke ValueReclaim’s Google access in your Google account settings; revoking access does not itself delete records stored in ValueReclaim.

Changes and questions

We will update this page when our data practices change. Contact us at the address above with privacy questions.