This Privacy Policy explains how Heaven Lab ("we", "us") collects, uses, and protects your information when you use our website and tools, including the Bar Scanner and your account on heavenchester.com.
Information we collect
Account information — your email address, and your name and profile picture if you sign in with Google or Facebook.
Authentication data — sign-in tokens and a per-device identifier used to secure your account and enforce device limits.
Usage data — records of how many cloud scans you run, sign-in events (time, IP address, device) used to keep your account secure, and basic diagnostics.
Content you submit — images you upload for scanning are processed to return results and are not used for advertising.
Billing information — if you subscribe, payments are handled by Stripe; we do not store your card details.
How we use your information
To create and secure your account and provide the tools you request.
To process scans and return results.
To enforce plan limits and prevent abuse or account sharing.
To process subscriptions and contact you about your account.
Third-party services
We share the minimum data needed with service providers that help us run the product:
Google and Facebook — only when you choose to sign in with them, to verify your identity and retrieve your name and email.
Stripe — to process subscription payments.
AI/OCR providers — to process images you submit for scanning and return text results.
Data deletion
You can request deletion of your account and associated personal data at any time by emailing chester@heavenchester.com from the email address on your account, or by contacting us with your account email. We will delete your personal data within 30 days, except where we must retain limited records to meet legal or billing obligations. If you signed in with Google or Facebook, you may also revoke access from your Google or Facebook account settings.
Data retention & security
We keep your data only as long as your account is active or as needed to provide the service and meet legal obligations. We use industry standard measures to protect your data, including hashed passwords and encrypted secrets.