Intake privacy policy

Operator: John Peterson · Effective October 18, 2026

Intake helps consignment stores collect seller submissions, review items, send responses, and arrange appointments. Contact johnbp13@gmail.com about privacy, access, correction, export, or deletion.

Information we handle

We process store identity and contact information; seller names, email addresses and optional phone numbers; item photos, descriptions and asking prices; batch reviews, store notes, correspondence records and appointment details. Shopify provides installation and authentication information. Sellers provide their submission information directly through the store’s intake form.

Why we use it and who receives it

We use this information to operate the intake, review, email and appointment features, provide support, protect the service and comply with applicable obligations. The store receiving a submission can access its information. Stores are responsible for how their staff use seller data.

DigitalOcean provides hosting, database infrastructure and private photo storage. Mailtrap processes transactional email, including relevant submission details and item thumbnails; email-open tracking may be enabled. Google processes connected calendar data and invitations. Emails and calendar invitations are also retained in recipients’ accounts under their providers’ settings. We do not sell personal information or use submission or Google Calendar data for advertising.

Google Calendar

With the store’s authorization, Intake accesses account identity, calendar names, calendar availability, and appointment events. Selected calendars are checked for conflicts. With additional permission, Intake creates and updates or cancels consignment appointment events and adds the seller as a guest. We store connection identifiers, encrypted authorization credentials and appointment records to provide these features. We do not use Google data to train general-purpose AI models. Access by people is limited to authorized support, security or legal needs.

Intake’s use of information received from Google Workspace APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Disconnect Google in Appointment calendar or revoke access through your Google account. Disconnecting stops future use of that connection; it does not erase events or emails already in external accounts.

Storage, retention and deletion

We keep submission records and photos while a store uses Intake to support review and follow-up. After uninstall, we remove the store’s app-held personal data and photos within 30 days. Contact us to request earlier deletion or an export. We verify requests before releasing or deleting information, and may need the store’s instructions when handling a seller request. Necessary legal records may be retained where required by law; we will explain any applicable exception. Deleting app records does not remove copies already delivered to email recipients or retained in a store’s external calendar. We retain minimal request audit metadata (store, request type, dates and completion status) after removing request payloads. Privacy requests are reviewed and fulfilled by the operator.

Security and your device

Intake uses HTTPS, private photo storage, store-scoped access checks and encrypted calendar credentials. No system guarantees absolute security. The seller form may save unfinished uploads and optional remembered contact profiles in browser storage on the seller’s device. Sellers can remove saved profiles in the form or clear their browser’s site data.

Changes and questions

We will update this page when practices change and provide additional notice or consent where required. For help, contact johnbp13@gmail.com. If you submitted items to a store, include the store name and batch reference, but never send passwords or API credentials.