Privacy Policy

1. Data Controller and Contact

PCLift is the data controller for personal information collected through the service. Privacy questions can be sent to privacy@PCLift.com.

2. Data We Collect

• Account data — email, display name, and Firebase Auth identity.
• Lead data — anonymous lead tokens, consent flags, query slug, and source.
• Rig data — current parts, target hardware, budget, urgency, and used/refurb preferences you enter.
• Analytics events — page views, intake steps, plan deliveries, buy-route clicks, outcome submissions.
• Cookies — preferences, session identifiers, and analytics (see the Affiliate Disclosure and the cookie banner).
• Optional uploads — screenshots, receipts, and trade-in photos stored in private Firebase Storage buckets.

3. How We Use Data

We use the data above to generate and deliver upgrade recommendations, run compatibility and price checks, support trade-in and assisted listing flows, send outcome follow-ups (with your consent), improve product quality, and meet legal obligations.

4. Legal Bases (GDPR Art. 6)

• Consent — email follow-ups, partner handoff, cookies.
• Contract — providing the recommendation service you requested.
• Legitimate interest — product analytics, fraud prevention, and quality assurance.

5. Cookies and Similar Technologies

PCLift uses a small set of cookies and local-storage keys to maintain your session, remember your cookie preferences, and capture analytics events. The cookie banner (LegalCookieConsentBanner) lets you accept or decline non-essential categories.

6. Sharing with Partners

When you opt in to a partner handoff, we share a scoped subset of your data: a hashed lead identifier, the partner-relevant part details, condition preferences, and a region. We do not share raw email addresses or full rig history without your explicit consent.

7. International Transfers

We use Google Cloud Platform and Firebase for hosting, which may process data in the United States or other regions. Where required, we rely on Standard Contractual Clauses and equivalent safeguards.

8. Retention Windows

• Lead and rig data: retained for 24 months of inactivity, then anonymized.
• Outcome reports: retained for 36 months for product improvement.
• Analytics events: retained for 18 months in raw form, longer in aggregated form.
• Optional uploads: deleted within 30 days of account deletion or upon request.

9. Your Rights

You can request access, correction, deletion, portability, or opt-out of sale/targeted advertising (where applicable). Do Not Track signals are respected for non-essential cookies. Email privacy@PCLift.com to exercise any of these rights.

10. Deletion Workflow

From the in-app account settings, choose Delete account to start a soft-delete. Alternatively, email privacy@PCLift.com and we will action your request within 30 days. Soft-deleted records are purged from active systems within the windows above; backups roll off on the standard schedule.

11. Children's Privacy

PCLift is not directed at children under 13 (or under the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us data, contact privacy@PCLift.com and we will delete it.

12. Changes to This Policy

We will post material changes on this page and notify active account holders by email. The "Last updated" date at the top of this policy reflects the most recent revision.

13. Contact / DPO

For privacy questions, data requests, or to contact our Data Protection Officer, email privacy@PCLift.com.