Privacy Policy

This Privacy Policy is issued by INVOICENOW LIMITED ("we," "us," or "our"), a company incorporated in Hong Kong, operating the Antique Identifier: Scan AI mobile application (the "App").

We are the data controller in respect of personal data collected through the App, meaning we determine the purposes and means by which your personal data is processed.

Contact

support@picksai.vip

Jurisdiction of Incorporation

Hong Kong Special Administrative Region

2.1 Information You Provide

2.2 Information Collected Automatically

2.3 Information We Do Not Collect

We do not collect your precise GPS location, payment card numbers (handled entirely by Apple/Google), biometric data, or the content of your camera roll beyond images you explicitly select to scan.

We use collected information for the following purposes:

• Service Delivery: Processing image scans through our AI engine and returning identification results.
• Account Management: Creating and managing your user account and subscription entitlements.
• AI Model Processing: Transmitting images to OpenAI for analysis via their API. Images are temporarily cached on our servers (up to 30 days) and transmitted to OpenAI subject to OpenAI's Privacy Policy. OpenAI does not use API-submitted data to train its models by default.
• App Improvement: Analyzing usage patterns to improve features, fix bugs, and enhance the AI model's accuracy over time (using aggregated/anonymized data only).
• Customer Support: Responding to inquiries and resolving technical issues.
• Security: Detecting and preventing fraud, abuse, and unauthorized access.
• Legal Compliance: Fulfilling obligations under applicable law.
• Communications: Sending service-related notifications (e.g., subscription renewal reminders, material policy updates). We do not send marketing emails without your explicit opt-in.

We process your personal data on the following legal bases under the General Data Protection Regulation (GDPR) and UK GDPR:

We do not sell, rent, or trade your personal information. We may share your data only in the following limited circumstances:

• AI Service Providers: Images you submit are transmitted to OpenAI to generate identification results. OpenAI acts as a data processor under our instruction and, per their API usage policy, does not use submitted content to train their models by default. Images are temporarily cached on our servers for up to 30 days for quality assurance purposes before being permanently deleted.
• Analytics Providers: Aggregated, anonymized usage data may be shared with analytics platforms (e.g., Firebase, Mixpanel) to help us understand App performance.
• App Distribution Platforms: Apple and Google receive transaction data necessary to manage your subscription or purchase.
• Legal Requirements: We may disclose information if required by law, court order, or governmental authority, or to protect our rights, safety, or the rights of others.
• Business Transfer: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of the transaction. We will notify you via email or in-app notice prior to any such transfer.

The App may incorporate third-party software development kits (SDKs) and services. These may include, but are not limited to:

Each third party's data practices are governed by their own privacy policies. We encourage you to review them.

INVOICENOW LIMITED is incorporated in Hong Kong. By using the App, you acknowledge that your data may be transferred to, stored in, and processed in countries other than your country of residence, including Hong Kong, the United States, and other jurisdictions where our service providers operate.

We retain your personal data only for as long as necessary to fulfill the purposes described in this Policy, or as required by applicable law:

When data is no longer required, we securely delete or anonymize it.

You have the following rights with respect to your personal data:

• Right of Access (Art. 15): Request a copy of the personal data we hold about you.
• Right to Rectification (Art. 16): Request correction of inaccurate or incomplete data.
• Right to Erasure / "Right to be Forgotten" (Art. 17): Request deletion of your personal data under certain conditions.
• Right to Restriction of Processing (Art. 18): Request that we limit how we process your data in certain circumstances.
• Right to Data Portability (Art. 20): Receive your data in a structured, machine-readable format.
• Right to Object (Art. 21): Object to processing based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent (Art. 7(3)): Where processing is based on consent, withdraw it at any time without affecting prior processing.
• Right to Lodge a Complaint: File a complaint with your local supervisory authority (e.g., your national Data Protection Authority).

To exercise any of these rights, contact us at support@picksai.vip. We will respond within 30 days. We may need to verify your identity before processing your request.

As a California resident, you have the following rights:

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you in the past 12 months.
• Right to Delete: Request deletion of personal information we have collected, subject to certain exceptions.
• Right to Correct: Request correction of inaccurate personal information.
• Right to Opt-Out of Sale or Sharing: We do not sell or share your personal information as defined under the CCPA. No opt-out action is required.
• Right to Limit Use of Sensitive Personal Information: We do not use or disclose sensitive personal information for purposes beyond those permitted under the CPRA.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

To submit a CCPA request, contact us at support@picksai.vip with the subject line "CCPA Privacy Request." We will verify your identity and respond within 45 days (extendable by 45 days with notice).

Categories of Personal Information Collected (Past 12 Months)

The App is not directed at children under the age of 13. We do not knowingly collect personal data from children below this age threshold.

If you are a parent or guardian and believe that your child has provided personal information to us without your consent, please contact us immediately at support@picksai.vip. We will promptly investigate and, if confirmed, delete such information from our systems.

We implement commercially reasonable technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or disclosure. These measures include:

• Encryption of data in transit (TLS/HTTPS)
• Access controls and authentication requirements for internal systems
• Regular security reviews and vulnerability assessments
• Limited employee access on a need-to-know basis

However, no method of electronic transmission or storage is completely secure. While we strive to protect your data, we cannot guarantee absolute security. In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and relevant authorities as required by applicable law.

As a mobile application, Antique Identifier: Scan AI does not use browser cookies. However, we and our third-party partners may use mobile analytics SDKs and device identifiers (including Apple's IDFA and Google's Advertising ID) to:

• Measure App usage and engagement
• Track installs and subscription conversions
• Improve App performance and stability

You can limit ad tracking at the device level:

• iOS: Settings → Privacy & Security → Tracking → Disable "Allow Apps to Request to Track"
• Android: Settings → Privacy → Ads → Opt out of Ads Personalization

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will:

• Update the "Last Updated" date at the top of this Policy;
• Notify you through an in-app notification or, where required by law, by email.

Your continued use of the App after the updated Policy's effective date constitutes your acceptance of the changes. If you do not agree with the updated Policy, please discontinue use of the App.

For any questions, concerns, or requests related to this Privacy Policy or your personal data, please contact us:

Company

INVOICENOW LIMITED

Privacy Inquiries

support@picksai.vip

Jurisdiction

Hong Kong Special Administrative Region

We aim to respond to all privacy-related inquiries within 30 days. EU/UK residents who are not satisfied with our response may escala