Your product data, explained clearly.

1. Who controls your information

Serrhub LLC operates MyCover.me in the United States. For your MyCover.me account, account security, universal product wallet, privacy requests, and direct app operations, Serrhub LLC acts as controller. For a participating merchant’s order, warranty, coverage, or support workflow, that merchant generally acts as controller and MyCover.me processes the relevant records on its behalf. The merchant remains responsible for its warranty terms and decisions. External manufacturers or support providers control information you send to their services.

2. Information we process

• Account: name, email, verification state, optional phone number, SMS consent, notification preferences, and account status.
• Products and purchases: merchant or manufacturer, product, model, purchase date, order reference, price where supplied, masked serial or IMEI, receipt, ownership source, and verification provenance.
• Ownership recovery: claim-code status, scan or attempt metadata, order number, account details, buyer name, shipping-address match, serial, receipt availability or evidence, verification outcome, and the relevant merchant’s response.
• Coverage: issuer, type, policy or terms source, start and end dates, status, verification level, eligibility evidence, and explanations.
• Support: issue descriptions, messages, photos, videos, documents, requested evidence, status, repair, replacement, refund, shipment, external case references, and service history.
• Device and security: installation and push identifiers, session activity, request IDs, IP-derived security signals, app version, network status, and limited diagnostic logs.

3. Where information comes from

Information may come from you; a participating merchant or retailer; an authorized commerce integration; a QR, secure claim link, or order record; a document you upload; a support agent; a shipping or repair provider; and security or infrastructure services. When information was not obtained directly from you, we use the displayed source and verification label to explain its provenance.

4. Why we use it

The current consumer app does not offer AI issue analysis. If we introduce optional third-party AI assistance, we will identify the recipient and data involved and obtain your permission before sharing it. Declining will not prevent you from requesting support. People and deterministic rules remain responsible for coverage and refund decisions.

5. Who can see it

A participating merchant can see only the products, orders, coverage, messages, evidence, claim activity, and service events connected to its tenant relationship. For a disputed or unavailable QR, the relevant merchant may see the verification details needed to match its own sale, including order, buyer name, address match, serial, receipt evidence, and successful claimant identity. It cannot see your unrelated products from another merchant or external manufacturer. We disclose information to the relevant issuer or support provider and hosting, database, email, push, storage, security, shipping, repair, and professional service providers as needed to operate the service. Providers handling information on our behalf must protect it and use it only for the contracted purposes. We do not sell personal information or share it for cross-context behavioral advertising.

6. Notifications, SMS, and device storage

We use secure device storage for authentication and may cache authorized product and support information so previously loaded records remain useful offline. Push notifications are optional and can be changed in the app or device settings. SMS is optional, is not a condition of using the product, and can be stopped through settings or the instructions in a message; carrier rates may apply. We do not currently use advertising cookies or third-party behavioral analytics in the consumer app.

7. Your privacy rights

Depending on where you live, you may request access, a portable copy, correction, deletion, restriction, or objection; withdraw consent; and complain to a data-protection authority. You may have rights concerning solely automated decisions that significantly affect you. California residents may also have rights to know, correct, delete, limit certain sensitive-data uses, opt out of sale or sharing, and receive equal service. MyCover.me does not currently sell or share personal information for cross-context behavioral advertising.

In the app, open Me → Privacy & data, or email privacy@mycover.me. We verify sensitive requests. Exports exclude passwords, codes, tokens, merchant-internal notes, fraud controls, and information about other people. Where a merchant controls the record, we may forward the request or direct you to that merchant.

8. Retention and deletion

• Authentication challenges: up to 30 days; expired or revoked sessions: normally up to 90 days.
• Application request logs: normally 30 days, subject to active security investigations and provider lifecycle.
• Support attachments: normally 24 months after case closure unless the issuer policy, active request, legal hold, warranty obligation, or law requires a different period.
• Product, ownership, coverage, support, audit, and service-history records: for the contractual or legal life of the record, then deleted or de-identified where appropriate.

A verified account-deletion request immediately ends access and notifications. We review and complete deletion within one calendar month and email you the outcome. This includes deletion or de-identification of your profile, login identities, personal wallet records, and saved wallet files. Specific merchant-controlled warranty, support, security or legal records may need to be retained; we review the basis and explain retained categories and reasons in the outcome. Contact privacy@mycover.me to ask about or challenge that decision. Closing MyCover.me does not cancel a warranty maintained by its issuer. Backups expire through the provider’s documented lifecycle; restored data remains subject to deletion requests.

9. Security and international transfers

Controls include account verification, tenant and consumer authorization, encrypted transport, secure platform storage, private object storage, signed attachment access, rate limits, masked identifiers, audit events, and secret management. No online service is risk-free. Providers may process information outside your country. EEA transfers require an adequacy decision or appropriate safeguards such as Standard Contractual Clauses, a transfer assessment, and supplementary measures where required.

10. Children, availability, and changes

MyCover.me is currently offered in the United States and is not directed to children under 13. We do not offer the service in the EEA. Material changes will use a new version and an appropriate in-app or email notice.