What stays private to you
Your research, photos and decisions are private to your account. Nothing becomes public unless you choose to share it.
Photos are kept exactly as you took them, including the location and time your camera recorded. The site reads those so your own AI can file a photo under the right place and visit. They stay private to your account; a shared page shows a copy without them.
Technical detail
Photos and notes, research, item facts, values, decisions, sessions, and export history are scoped to the account that owns them. They are not used as public examples or exposed through public Places.
Assist With Buying stores structured research in Convex. Media bytes are stored in Backblaze B2; it stores the metadata and private object reference needed to retrieve them.
Your AI is yours
This site runs no AI of its own. Your AI reaches your records only after you approve it in your own browser.
Technical detail
Assist With Buying does not run hosted AI inference and does not receive your model-provider API key. Your chosen AI client connects over MCP after browser OAuth approval. Tool calls are resolved to the account you approved.
Deliberate sharing boundaries
A share link shows only the photos and sections you pick, and you can revoke it at any time. The public Places directory takes only facts about a Place, and only when you opt in.
Technical detail
Places is a separate public directory. A contribution requires an authenticated, explicit opt-in and is limited to facts about the Place. Private item notes, prices, seller details, receipts, listing URLs, photos, and account identifiers are prohibited and scrubbed or held for review.
You can also create a read-only capability link for one piece of research. You choose an exact list of photos and sections, whether to include the safe profile summary, and whether to include the researched value range. Paid prices, offers, ownership, private notes, sessions, account identity, what your AI did, identifiers, and every other item are never available to the share projection.
Anyone holding the long-random link can read that selected view until it expires or you revoke or replace it. The site stores only a one-way token digest, serves selected media through the same capability, prevents indexing, and does not retain visitor identity for the lightweight view count.
Export and deletion
You can export everything, and you can delete your whole account yourself with Delete everything on Connect your AI.
Technical detail
You can download a versioned portable export from the private Library. It contains the canonical private data graph, share records, and metadata references, but not the B2 media bytes or recoverable raw share tokens.
Delete everything counts what will go and offers the export first, then asks you to type DELETE. It removes your research records and AI connections, your photos and files in B2, and your sign-in account, and takes your name off what you added to the public directory. You are signed out when it finishes. If you cannot sign in, use the deletion request route instead; we will verify account control and confirm the scope before execution.
Effective July 16, 2026; last reviewed October 17, 2026.