Skip to content
Horologe
Log inDashboard
Legal

Privacy Policy

Horologe — Privacy Policy

1. Who we are

<<Operator legal name>> ("we", "us") operates the Horologe platform (the "Platform") at https://horologe.innovations-beyond.com. This policy explains what personal data we collect, why, how long we keep it, and what choices you have. It is written for individual collectors who use Horologe to catalogue their own watch collections.

For privacy enquiries, contact [email protected].

2. What we collect

We collect only the information needed to operate the Platform.

  • Account information. Email address, display name (optional), hashed password (if password sign-up is used), Google account identifier (if Google Sign-In is used), preferences such as theme. Stored for as long as your account is active and for up to ninety (90) days after deletion to support fraud and abuse investigations. [REVIEW]

  • Catalogue content. The watch records you create — brand, model, reference number, serial number, photographs, receipts, notes, current valuation, purchase history. This is your own data. We treat it as confidential to your account and to anyone you explicitly share with via the Platform's invite or share-link features.

  • Share recipients. When you invite another user to view or edit a collection, we store their email address, the collection scope of the invitation, and the role granted (viewer or editor). When you generate a public share-link, we store the link's token, the watches it grants access to, and any expiration you set. Sensitive fields such as serial numbers are redacted from public share-link views by default.

  • Billing data. Stored and processed by our payment processor (Stripe). We retain only the subscription status, plan, and a reference identifier needed to manage your subscription. We never see or store full card numbers.

  • Operational logs. Authentication attempts, IP address at sign-in, user agent, and timestamps of administrative actions. Retained for up to ninety (90) days for security and abuse investigation. [REVIEW]

  • Error reports. When the Platform encounters an error, technical diagnostics may be sent to our observability provider (Sentry) including the request path, stack trace, and a minimal request context. We do not intentionally send catalogue content to Sentry. We have configured the integration with send_default_pii=false.

3. What we don't collect

  • We do not run third-party analytics or advertising trackers.
  • We do not sell, rent, or share your data with marketers.
  • We do not scan your catalogue content for any purpose other than serving it back to you.
  • We do not embed third-party social plug-ins (Facebook Pixel, etc.).

4. How we use it

We use your data to:

  1. Operate the Platform (display your catalogue, deliver invite emails, authenticate sessions, process subscription charges).
  2. Communicate about your account — security notices, billing receipts, service-affecting incidents, and changes to the Platform.
  3. Investigate abuse, fraud, and violations of the Acceptable Use Policy.
  4. Comply with legal obligations (tax records on payments processed; lawful government requests).

We do not profile you for advertising. We do not use your catalogue content to train machine-learning models. [REVIEW]

5. Sharing

We share information with third parties only in these specific cases:

  • <<Cloudflare>> — fronts the Platform's public URL. Cloudflare may see request metadata (IP, user agent, path). It does not see the bodies of authenticated requests except in transit.
  • <<Stripe>> — processes subscription payments. Stripe stores your card data; we store only the subscription reference.
  • <<SendGrid>> — sends transactional email (account confirmation, password reset, invite notifications). SendGrid sees the recipient address and the email body.
  • <<Sentry>> — receives error reports as described above.
  • Other users you choose to share with — only the content scoped by the share or invitation.

6. Your choices

  • Account deletion. You can delete your account from the Platform's Account page. We will remove your personal data within thirty (30) days unless retention is required by law.
  • Export. You can request a JSON export of your catalogue at any time from the Account page.
  • Communications. Transactional emails (security, billing) are required for account operation and cannot be unsubscribed without deleting the account. We do not send marketing emails.

7. Data retention

  • Active account data: for as long as the account is active.
  • Deleted-account residuals: up to ninety (90) days for fraud and abuse investigation, then permanently deleted.
  • Operational logs: ninety (90) days.
  • Billing records: seven (7) years to comply with US tax retention rules. [REVIEW]

8. International users

The Platform is operated from the United States. If you access it from elsewhere, your data is transferred to and processed in the United States. By using the Platform you consent to that transfer. The Platform is not currently certified under the EU–US Data Privacy Framework. [REVIEW]

9. Children

The Platform is not intended for anyone under eighteen (18). We do not knowingly collect data from anyone under that age. If you believe a child has provided data to the Platform, contact us and we will delete it.

10. Security

We use standard industry practice to protect your data — TLS in transit, encrypted storage at rest, hashed passwords, signed session tokens, and short-lived share-link tokens. No system is perfectly secure; if a breach occurs that materially affects you, we will notify you as soon as reasonably practicable.

11. Changes

We may update this policy from time to time. Material changes will be announced via the Platform or by email to active members.

Last updated: draft.