Privacy Policy

local shopping information and preferences

Saved products, saved shared product links, recent searches, comparison selections, language and other app preferences are stored locally on your device where those features are used. They are not a cross-device cloud wishlist. Removing an item or clearing history with the available app controls removes that local record. Clearing app storage or uninstalling the app can also remove local records, subject to your device's backup and restore settings.

A saved product or shared link may contain a title, retailer URL, image URL, price, and details you supplied. When you use that information for a search or open a retailer link, it can leave your device as described below. Do not include passwords, payment details, or other sensitive information in shopping requests.

search requests and backend processing

Typed requests, reviewed voice transcripts, product links and search or image context used for discovery are sent to Le Client's backend to find, identify, compare and rank products. Requests use app-generated session identifiers. The backend keeps temporary session and discovery state to support follow-up requests; this is separate from your device-local saved list and history.

The backend calls supported shopping sources, including eBay Browse, and uses OpenRouter for AI-assisted web-shopping retrieval and product-image analysis where those features are invoked. Search text and relevant product or image context can be sent to these services. Public retailer pages and product images may also be fetched to verify product information. Product and price observations may be kept server-side for comparisons; these records describe listings, prices, availability and timestamps, not payment credentials.

voice recording and transcription

Voice search records audio when you choose to record and grant microphone permission. The app sends the recording through Le Client's backend to OpenRouter's transcription service to turn it into text. The resulting transcript is returned to the app and may be used as a shopping request or context after your review.

Le Client's transcription endpoint processes uploaded audio in memory rather than writing an audio archive to its database. The app attempts to delete its temporary recording after processing or cancellation, but device cleanup is best-effort. Le Client does not keep the recording as a server-side audio archive. OpenRouter and the model providers it uses have their own processing and retention practices; this policy does not promise that those services immediately delete every copy.

photos and product identification

If you choose a photo or take one using the app, the selected image is prepared for upload and sent to Le Client's backend with any accompanying shopping context. The backend sends image content and relevant text to OpenRouter and its configured vision model to identify a product. Later matching may also analyze reference images and retailer product images to compare visual features.

The photo-identification upload endpoint processes images in memory and releases its request-local image buffers after processing. The app attempts to remove temporary converted upload files; it does not delete the original photo from your photo library. Local or temporary discovery state may retain the selected reference for your current flow. Do not upload images containing information you do not want the processing services to receive. Those services' own retention practices apply.

shopping connections and authorization

When you choose a supported shopping connection, the provider handles sign-in and authorization. Le Client uses session or connection identifiers and authorization credentials to associate the connection with your app session and make authorized provider requests. Le Client does not ask you to give it your retailer password or payment-card credentials.

Supported OAuth connections have server-side records. In particular, eBay access and refresh tokens are encrypted before storage in the backend database; associated connection identifiers and timestamps are also stored, without a claim that every field is encrypted. Tokens are used to check or maintain the authorized connection. Temporary authorization-flow records also exist during sign-in. Connection records can remain until they are removed or become unusable; they are not deleted just because you uninstall the app.

Disconnecting removes the relevant stored connection. In Profile, 'remove stored shopping connection data' requests removal of supported shopping connection records, pending authorization flows and stored tokens for your current app identity, plus associated local connection information. This requires explicit confirmation and reports completion or incomplete removal. It is not a general account-deletion or erase-all-data control: saved items, shared links, history, preferences, temporary search state, product/price records, support and hosting records are not erased by it. For eBay, the backend also attempts token revocation, but removal from Le Client is not a guarantee that the provider has revoked every authorization or deleted its own records. You can manage authorization in the provider's settings. These controls do not delete your retailer account, orders, or the retailer's own data.

retailer links, third parties and personal-information sales

When you open a product listing, Le Client hands you off to the retailer's website or app. The retailer then controls checkout, payments, accounts, orders, returns, cookies and its own privacy practices. Le Client does not receive confirmation that you completed a purchase from an ordinary retailer-link handoff.

Le Client does not sell your personal information. Eligible product links may be affiliate links and may generate a commission under the relevant affiliate program. This does not change the disclosures above about sending requests to shopping and AI processing services. OpenRouter, its model providers, eBay, retailers, email providers and hosting services apply their own policies to information they process.

support, contact and the public website

You can contact Le Client at help@leclient.ai for support or privacy questions. If you send an email, the recipient and email services receive your address, message and any attachments you choose to include. The app's configured email composer may include help-topic context. Review the message before sending and do not include passwords or payment details.

The backend and website hosting systems process network requests and operational request/error information to serve pages, run the app and diagnose failures. The public site's Google Fonts resources and any external links you open also make requests to their providers. This policy does not claim that hosting or email systems have no logs or backups.

retention, deletion and your choices

Manage local saved items and history with the app's available controls or your device's app-storage settings. Microphone, camera and photo access can be changed in device permissions. Declining media access does not require you to use voice or photo search.

Backend sessions and sign-in flows have expiration checks; temporary discovery state is not a permanent cloud copy of your saved list. Server-stored connection records are removed through the connection controls described above. Product/price observations and operational logs are not covered by clearing your device-local history. No single automatic deletion period is implemented for all server records, hosting logs, backups, support correspondence or third-party records.

For a privacy inquiry or a request concerning server-side information, email help@leclient.ai and describe the relevant feature or connection without sending passwords or secret tokens. We may need enough information to locate the record and confirm that the request is yours. Do not assume that uninstalling the app deletes server-side or third-party information. Records held by retailers, OpenRouter/model providers or email services are also subject to their own policies and request processes.

security

The production app communicates with its backend and configured AI/provider services over HTTPS. Media endpoints check the app session and enforce upload limits. Stored supported OAuth credentials are encrypted by the backend before database storage; eBay token encryption uses AES-256-GCM. These are specific safeguards, not a claim that every local record, log, email, backup or third-party system is encrypted in the same way.

No service can guarantee absolute security. Protect access to your device and connected retailer accounts, and avoid submitting unnecessary sensitive information. Le Client does not offer end-to-end encryption of shopping or media requests: its backend and the processing providers must access the content to perform the requested feature.

policy updates and privacy contact

The current public policy is available at https://leclient.ai/privacy-policy and the app contains privacy-policy text. This policy may be updated when implemented practices change; the last-updated date identifies this version. For questions or privacy requests, contact help@leclient.ai.