Legal
Privacy Policy
Effective October 9, 2026
HaulyGrail is an app that helps resellers track the items they buy, prepare, and sell. It is operated by Tyler Siegrist, an individual based in Washington State, USA ("HaulyGrail", "we", "us"). This policy explains what information HaulyGrail collects, how we use and share it, and the choices you have. It covers the website at haulygrail.com and the app at app.haulygrail.com.
Questions? Email help@haulygrail.com.
Information we collect
When you create an account
- With an email and password: your email address and your password. We store only a secure hash of your password, never the password itself.
- With Google: see Information from Google below.
What you put in HaulyGrail
The records you and the other people in your Business enter: Businesses and their names, hauls, inventory items, where and when you bought them, costs, expenses, sales, notes, and the photos and videos you attach. We call this your Business content.
Information created as you use the service
- Sign-in information: cookies and tokens that keep you signed in, and the records of your active sessions.
- Diagnostic information: technical details such as request times, errors, performance measurements, and the kind of browser or device you use, which help us keep the service running and fix problems.
- Usage counts: for example, how many AI searches a Business has made in a day, so we can apply daily limits.
Information kept on your device
The app saves some information in your browser so it works quickly and offline: hauls you are working on, your theme setting, and, if you check Remember me when you sign in, your email address. Remember me never saves your password. This information stays on your device until you clear it or sign out where applicable.
We do not use advertising cookies or third-party analytics or tracking tools.
Information from Google
If you choose Sign in with Google, we ask Google only for the basic sign-in permissions: openid, email, and profile. With your permission, Google shares with us:
- your Google account identifier, which is a number that tells us it is you signing in again;
- your email address and whether Google has verified it;
- your name.
How we use it: only to create your HaulyGrail User, sign you in, show your name and email in the app and to the other people in Businesses you belong to, and contact you about your account.
How we store it: in our database hosted on Microsoft Azure in the United States, protected as described in Security.
How we share it: we do not sell it, use it for advertising, or share it with anyone except the people in your Businesses and the service providers listed below that host and run HaulyGrail. We do not use it to train AI models.
We do not access your Gmail, Google Drive, contacts, calendar, or any other Google data.
HaulyGrail's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.
You can remove HaulyGrail's access to your Google account at any time from your Google Account connections. That stops new Google sign-ins; to delete the information we already have, see Keeping and deleting information.
How we use information
- To provide HaulyGrail: sign you in, store and show your Business content, and calculate your reports.
- To provide AI features: when you add photos or use AI search, we send that photo or search text to Google's Vertex AI (see below) to find matching items and to suggest items that may be duplicates.
- To send account emails, such as verifying your email address and resetting your password.
- To keep HaulyGrail secure: preventing abuse, limiting sign-in attempts and AI searches, and investigating problems.
- To maintain and improve the service and fix errors.
- To answer you when you contact us.
- To meet legal obligations.
We do not sell your information, use it for advertising, or share it so others can advertise to you.
Who we share information with
- People in your Business. Owners and Employees of a Business can see that Business's content and the name and email of each person in it.
- Microsoft Azure hosts the app, the database, and attached photos and videos, sends our account emails, and collects diagnostic information. Our Azure services run in the United States.
- Google Cloud provides Sign in with Google and Vertex AI. Photos and AI search text are sent to Vertex AI to create the search data behind photo search, AI search, and duplicate suggestions. Google processes this content for us as a service provider. Vertex AI may process it outside the United States.
- When the law requires it, or when it is necessary to protect the rights, safety, or property of HaulyGrail, our users, or others.
- If HaulyGrail is sold or transferred, information may transfer to the new owner, who will be bound by this policy for information collected under it.
These service providers may use your information only to provide their services to us.
Keeping and deleting information
We keep your information for as long as your account or the Business it belongs to exists.
- Closing your account: email help@haulygrail.com from the address on your account. We will disable your User so it can no longer sign in. Because a Business's records are shared by the people in it and may be needed for things like taxes, your User record, including your name and email, stays with that Business's records until the Business is deleted.
- Deleting a Business: an Owner can delete a Business from the Businesses page, which removes it from the app for everyone right away. To have a deleted Business's content, photos, and videos permanently erased from our systems, along with the User records of people who belong to no other Business, an Owner can email help@haulygrail.com and we will erase them within 30 days.
- Leaving a Business: an Owner can remove you from a Business; past records you entered stay with that Business.
- Backups: deleted information may remain in our backups for up to 30 days before it is overwritten.
Your choices and rights
- You can see and change your account details on your User page, and your Business content in the app.
- You can ask for a copy of your information, or ask us to correct or delete it, by emailing help@haulygrail.com. We may need to confirm your identity first, and we will respond within 30 days.
- You can clear information saved on your device through your browser settings.
Depending on where you live, you may have additional rights under local law. Contact us and we will honor them as the law requires.
Security
Information travels to and from HaulyGrail over encrypted HTTPS connections and is encrypted where it is stored. Passwords are stored only as secure hashes, and access to our systems is limited. No system is perfectly secure, but we work to protect your information and will notify you if a breach affects it, as the law requires.
Children
HaulyGrail is a business tool for adults and is not directed to children under 13. We do not knowingly collect information from children under 13. If you think a child has given us information, contact us and we will delete it.
Changes to this policy
We may update this policy. When we do, we will change the effective date above, and for significant changes we will let you know in the app or by email before they take effect.
Contact
Tyler Siegrist, HaulyGrail
Washington State, USA
help@haulygrail.com