Overview

Attic Inc. ("Attic", "we", "us") operates a personal storage service in Denver, Colorado. This policy describes what information we collect when you use attic.it.com, app.attic.it.com, or our driver and warehouse apps — and what we do with it.

The short version: we collect what we need to pick up, store, and return your things — plus what's necessary to run the business. We don't sell personal data and we never share the contents of your bins.

What we collect

You give us

Name, email, phone, billing address, and service address.
Payment card details, handled by our PCI-compliant payment processor (Stripe). We don't store card numbers on our servers.
Bin labels, descriptions, and optional photos you attach to bins in the app.
Messages you send to support.

We collect automatically

Device info (OS, browser, IP address) and app analytics events.
Chain-of-custody records: QR scans of bins at pickup, arrival, shelf placement, and return.
Approximate location when tracking an active delivery (drivers only while on a route).

Why we collect it

To provide the service: schedule pickups, deliver bins, show you where your stuff is.
To bill you: apply the flat $12/bin/month and handle refunds.
To keep things safe: investigate any claim, loss, or dispute.
To improve the product: understand which features help and which don't.

We share personal information only with:

Service providers who help us run the business: Stripe (payments), Twilio (SMS notifications), HarperDB (database), Vercel (hosting), Sentry (error tracking).
Authorities if legally required, and only the minimum necessary.

We never sell your data or share it for advertising.

Your choices

You can access, correct, or delete your account data by emailing privacy@attic.it.com.
You can opt out of non-essential notifications in the app settings.
Colorado residents have additional rights under the Colorado Privacy Act — we honor all of them.

Retention

We keep account data for as long as you're a customer, plus three years after you close your account (to satisfy tax and legal obligations). Chain-of-custody scan records are retained for seven years. Bin photos you upload are deleted 90 days after a bin is returned or removed.

Security

We encrypt data in transit (TLS 1.3) and at rest. Access to customer data inside Attic is role-based and audit-logged. Drivers and warehouse staff see only the information they need to do their job — never your billing details or bin contents beyond what you've labeled.

Children

Attic isn't for children. We don't knowingly collect information from anyone under 13. If you think a child has signed up, email us and we'll remove the account.

Changes

If we change this policy in a material way, we'll email account holders at least 14 days before it takes effect.

Contact

Questions? privacy@attic.it.com — a real human at Attic reads these.