Stowed LLC
Privacy Policy
Draft for pilot use — subject to legal and compliance review.
Effective date: October 20, 2026
InsureMyStuff.ai is operated by Stowed LLC, based in Miami, Florida. This policy describes the information we handle when you use InsureMyStuff.ai to create and manage Asset Passports for watches and fine jewelry, use subscription features, or use the insurance-request workflow.
1. Contact
For privacy questions or requests, email founder@stowed.io. Our initial-response target is within 3 business days.
2. Information we handle
- Account information: email address, account identifier, authentication information, and profile details you provide.
- Asset records and files: photos, item descriptions, serial numbers, purchase information, user-declared values, receipts, appraisals, and other supporting documents you upload or enter.
- Requests and consent: contact details provided for a request, the selected asset information, consent wording and version, timestamps, request status, and related history or notes.
- Billing information: subscription plan and status, and customer and subscription identifiers returned by Stripe. Card details entered into Stripe's payment forms are handled by Stripe; we do not store complete card numbers.
- Technical information: usage event names and an anonymous session identifier, security and audit records, and service diagnostics.
Please do not upload documents or photographs containing unnecessary information about other people.
3. How we use information
We use information to authenticate you, create and display Asset Passports, store and retrieve files, provide optional AI suggestions, administer accounts and subscriptions, record request consent and history, answer support requests, prevent misuse, troubleshoot the service, and meet applicable legal obligations. Asset Passports and user-declared values are organizational records, not authenticated ownership certificates or professional appraisals.
4. AI photo analysis
When you choose to analyze an uploaded photo, the photo content is processed through an external AI model provider to generate suggested item details. Processing is not confined to servers operated by Stowed LLC. Review and correct suggestions before saving them. Suggestions may be inaccurate and are not authentication, proof of ownership, valuation, insurance advice, or a determination of coverage eligibility.
5. Service providers
Information needed to operate the service is processed by our hosting, authentication, database and file-storage providers, AI providers when analysis is requested, and Stripe for subscription billing. Authorized personnel may access information for support, administration, security, or compliance. We may disclose information when legally required or when reasonably necessary to respond to unlawful activity or protect rights and safety, subject to applicable law.
6. Insurance requests and demonstration mode
The insurance integration currently runs in synthetic demonstration mode. Demonstration requests are not real insurance applications, quotes, or coverage, and no request is sent to an insurer. The app stores your uploaded asset records, contact information, request history, and consent selections while you use the demonstration workflow.
Before any future real handoff to a licensed insurance partner, the workflow will identify the partner and require your separate, explicit consent for the specific asset and contact information to be shared. Consent wording and timestamps are recorded. A partner receiving information may be subject to its own privacy policy and legal retention duties. Withdrawing a request does not necessarily retrieve information already lawfully shared.
InsureMyStuff.ai is not an insurance carrier. Coverage is subject to approval by licensed insurance providers.
7. Browser storage and analytics
The app uses browser storage to support authentication and an anonymous session identifier for first-party usage events when you allow analytics. Our first-party event calls contain event names and that session identifier — not asset photos, serial numbers, receipts, or names.
Google Analytics and Microsoft Clarity load only after you select Allow analytics, and only on public informational pages. They do not load on sign-in, photo capture, Vault, Asset Passport, billing, support, admin or partner pages. These tools may collect device, browser, interaction and public-page session-recording information. Optional analytics are disabled when your browser sends Global Privacy Control or Do Not Track. You can refuse or withdraw consent at any time through Privacy choices in the footer without losing access to the service.
8. Security
Asset files are stored in private storage and served through time-limited signed links. Account access controls restrict ordinary users to their own records. Anyone who obtains a valid signed file link may be able to use it until it expires, so do not share such links unnecessarily. Security measures reduce risk but cannot guarantee that loss, misuse, or unauthorized access will never occur.
9. Retention, export, and deletion
My Vault includes record export and deletion tools. The account export is a structured data export; download supporting files separately when needed. Account deletion removes your uploaded files, assets, local subscription records, and authentication account. Certain consent, request, status-history, audit, backup, or third-party records may be retained where we have a lawful reason to keep them. Deleting your account does not cancel a Stripe subscription — cancel through billing first or contact support.
10. Your rights
Email founder@stowed.io to request access, correction, export, deletion, or clarification about processing. We may need to verify your identity before acting. Available rights, exceptions, and response deadlines depend on applicable law; statutory rights are not limited by this policy.
You can also select Privacy or data request on our Support form. Depending on where you live and which laws apply, rights may include access, correction, deletion, portability, restrictions or objections to processing, withdrawal of consent, and an appeal or complaint to the relevant supervisory authority. We do not sell personal information or use optional analytics for targeted advertising. We honor applicable opt-out rights and do not discriminate against you for exercising privacy rights.
Where the GDPR applies, processing must have an applicable legal basis, such as performing our contract, your consent for optional analytics, legal obligations, or proportionate legitimate interests in security and service operation. Service providers may process information outside your country; where required, appropriate transfer safeguards must apply. The applicability of GDPR, California and other state privacy laws, processor agreements, transfer safeguards and retention requirements requires legal review; this policy is not a certification of compliance.
11. Changes
If we make a material change to how we process information, we will update this policy and provide any notice or obtain any consent required by applicable law.