Privacy Policy

Last updated: 16 September 2026

1. Introduction

This Privacy Policy explains how Shopfront handles personal information when you use our websites, cross-listing platform, browser-based Lens price checks and Shopfront Lens mobile app (together, the Application). It also explains your choices and how to contact us about privacy. The Lens mobile app is currently in private beta; some features are available only to invited testers.

2. Information collection and use

2.1 Personal information

We may collect personal information that you voluntarily provide to us when you register for an account, subscribe to our services, or use certain features of the Application. This information may include, but is not limited to:

Name
Email address
Billing and payment information
Shipping address
Telephone number

We use this information to provide and improve our services, process payments, communicate with you, and personalise your experience on the Application.

2.2 Automatically collected information

When you access or use the Application, we may automatically collect certain information about your device and usage patterns. This information may include, but is not limited to:

IP address
Browser type and version
Operating system
Referral source
Length of visit
Page views
Website navigation paths

We use this information to analyse trends, administer the Application, track user movements around the Application, and gather demographic information for aggregate use.

2.3 Saved finds in Shopfront Lens

In the native Lens app, you can save item photos, names, descriptions, condition notes, measurements, price-check results and collections. You can also record a shop, stall or event name, source type, address, date found, advertised price and currency, and a location pin.

The saved-item library, place details and collections are stored on your device for the account and workspace you are using. Lens does not automatically back up or sync this library between phones. Price checks can still upload and store item photos and results as described in Section 2.5; saved place fields are not part of those check requests. Maps and sharing involve the separate processing described in Section 3.

2.4 Optional location capture

When you take a new item photo, Lens asks for foreground location permission if needed. Once permission is granted and Save capture location is on, Lens can automatically save latitude, longitude, estimated accuracy and the time the location was recorded with the item. This helps you remember where you found it. You can also request your current location or choose a pin manually when editing a place.

Lens does not request background location access, track your trips or automatically identify shops. Photos imported from your photo library are not assigned your current location.

You can turn off Save capture location in Lens Account settings or revoke location permission in your phone settings. You can still save items without location access. Turning capture off does not remove existing pins; edit or remove those details on the saved item.

2.5 Photos and online features

Capturing or importing a new item through Lens’s item capture flow queues a price check. When the check runs, the submitted photo and request details are sent to Shopfront services for image analysis and comparable-listing searches. Check photos and results can be stored against your account or workspace for history and related listing workflows. Assisted measurement scans send the captured image for analysis to identify measurement points; the scan itself does not create a saved server-side item or listing.

If you send items to Shopfront as listing drafts, their selected photos, measurement images and listing details are uploaded and stored in your Shopfront workspace. Saving a local find alone does not publish a listing. These online features use hosting, image-analysis and search providers, including Google’s Gemini services. Avoid including personal information in photos or listing details that you do not intend to submit.

2.6 Lens analytics and diagnostics

The native app uses PostHog for usage analytics and error reporting. This can include app lifecycle events, device and app information, operation identifiers, feature timings, success or failure information and crash diagnostics. Account and workspace identifiers associate these events with use of the service; they are not anonymous records.

Saved coordinates, place names, private notes and item photos are not included in Lens’s product analytics events. IP-based geolocation enrichment is disabled for native Lens analytics. This does not prevent network providers from receiving an IP address when a request is made, and it is separate from map-provider processing. We use these diagnostics to understand reliability and improve the app.

3.1 Third-party service providers

We use third-party services for functions such as hosting, account authentication, payments, image analysis, search, analytics and support. The information disclosed depends on the feature you use. Some providers process information on our behalf; map services and apps you choose to share with also process information under their own policies. The Lens-specific disclosures below explain these data flows.

3.2 Online marketplaces

When you use the Application to generate and post listings on online marketplaces, certain personal information, such as your name and shipping address, may be shared with those marketplaces to facilitate the listing and transaction process. We recommend reviewing the privacy policies of the respective online marketplaces to understand how they handle your personal information.

3.3 Legal requirements

We may disclose your personal information if required to do so by law or in the good faith belief that such action is necessary to:

Comply with a legal obligation
Protect and defend the rights or property of the Company
Prevent or investigate possible wrongdoing in connection with the Application
Protect the personal safety of users of the Application or the public
Protect against legal liability

3.4 Maps and directions in Lens

Lens uses Apple Maps on iOS and Google Maps on Android. Displaying or interacting with a map makes requests to the map provider for the area being viewed, which may be centred on saved coordinates. Providers can process network and device information, identifiers, map interactions and diagnostics according to their services and settings. Turning off automatic capture location does not disable requests made when you open a map.

Choosing Directions sends the saved destination coordinates to Apple Maps or Google Maps. Shared location links can also open Google Maps when a recipient follows them. These providers handle that processing under their own policies: Apple Maps & Privacy and Google Privacy Policy.

Lens lets you preview an item or saved-place message before opening your phone’s share menu. The message can contain item names, dates found, selected photos, advertised prices and currency, estimates and place details.

When sharing an individual item, location and prices are off by default. You choose whether to include them.
Sharing a saved place includes that place’s location, which can contain its name, address and a coordinate link. You can select which items and optional prices go with it.
Private item/source notes and your intended selling price are excluded from these find and place messages. This is separate from submitting listing details to Shopfront.
Find-sharing photos are re-encoded to remove original embedded metadata. Information visible in the image itself remains visible.

The receiving app and recipients receive a copy of the selected information, not access to your Lens library. Later edits or deletion in Lens do not change that copy. The receiving service’s privacy policy and the recipient’s actions govern further storage and sharing. Measurement images you export to Photos or another app are also copies outside the Lens library.

3.6 Overseas processing

Some service providers process information outside Australia. For example, native Lens analytics is sent to PostHog’s US service. Google, Apple and other providers may process requests in countries described in their privacy policies. You can contact us for information about the providers involved in a particular feature.

4. Data security and retention

4.1 Security

We take reasonable measures to protect your personal information from unauthorised access, alteration, disclosure, or destruction. We use industry-standard security technologies and procedures to safeguard your data. However, please note that no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

4.2 Retention and local deletion

Lens keeps your saved library on the device until you remove the data or sign out. Signing out clears local saved items, places, collections, measurement styles and cached app data. Lens does not provide automatic backup or restoration of that library on another phone.

Deleting a local item or signing out does not by itself delete price-check records or listing drafts already stored by Shopfront, photos exported to your photo library, or copies sent to another app or person. Manage server-side records through the relevant service or contact us under Section 5. We retain server-side information as needed to provide the service, handle support and security issues, and meet applicable legal obligations.

Lens temporarily prepares local files for find sharing. These are scheduled for removal after about one hour; older files are cleaned up when the app next starts, and prepared share files are cleared on sign-out. This does not remove copies retained by receiving apps.

5. User rights and choices

5.1 Accessing and updating personal information

You have the right to access, update, and correct your personal information stored by us. You can do so by logging into your account on the Application and making the necessary changes. If you are unable to access or update your information, please contact us using the information provided in Section 10.

5.2 Deleting personal information

You may request the deletion of your personal information by contacting us using the information provided in Section 10. We will promptly process your request in accordance with applicable laws. However, please note that some information may be retained for legal, regulatory, or business purposes.

5.3 Device permissions and saved details

You can manage camera, photo-library and location permissions in your phone settings. Lens requests permissions for the features you use. You can edit saved place details, remove pins and delete saved items in the app. Disabling a permission stops future access governed by that permission; it does not erase information already saved or shared.

5.4 Privacy enquiries and complaints

To request access or correction, ask about deletion, or make a privacy complaint, email contact@shopfront.app. Describe the issue and the account or feature involved; do not send your password. We may need to verify your identity before providing or changing personal information. We will review the request, explain the steps we can take and respond within a reasonable period, or a period required by applicable law.

If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner about the options available to you.

6. Cookies and tracking technologies

We use cookies and similar tracking technologies to enhance your experience on the Application. Cookies are small text files placed on your device to collect standard internet log information and visitor behaviour information. You can set your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some parts of the Application.

7. Third-party links and services

The Application may contain links to third-party websites or services that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party websites or services. We encourage you to review the privacy policies of those third parties before providing any personal information.

8. Children’s privacy

The Application is not intended for use by individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe that your child has provided personal information to us, please contact us using the information provided in Section 10. If we become aware that we have collected personal information from a child under 13 without parental consent, we will take steps to remove that information from our servers.

9. Changes to the privacy policy

We reserve the right to update or change this Privacy Policy at any time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the date at the top of the Privacy Policy. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

10. Contact information

If you have any questions, concerns, or suggestions regarding this Privacy Policy, please contact us at:

Shopfront Level 5, 111 Cecil St, South Melbourne VIC 3205 contact@shopfront.app