Privacy Policy

1. Information We Collect

We collect the following types of information:

• Account information: Email address, name, and password hash when you register
• Usage data: Pages visited, features used, sellers tracked, and products saved
• Payment information: Processed securely by Stripe. We do not store your credit card number
• Device information: Browser type, IP address, and device type for analytics and security

2. How We Use Your Information

• Provide and improve the Service
• Send email notifications about new products and price changes
• Process payments and manage subscriptions
• Send transactional emails (welcome, billing, account changes)
• Detect and prevent fraud or abuse
• Analyze usage patterns to improve the product (via Plausible, a privacy-friendly analytics tool)

3. Third-Party Services

We use the following third-party services that may process your data:

• Stripe: Payment processing — see Stripe's Privacy Policy
• Resend: Email delivery — processes your email address to deliver notifications
• Apify: Data collection from publicly available Amazon pages
• Plausible: Privacy-friendly analytics — no cookies, no personal data collected
• Railway: Infrastructure hosting — servers located in the US

4. Cookies

We use essential cookies only for authentication (session tokens). We do not use tracking cookies or third-party advertising cookies. Our analytics provider (Plausible) does not use cookies.

5. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will anonymize your personal data within 30 days. Scan data and product snapshots may be retained in anonymized form for analytics purposes.

6. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your account and associated data
• Export your data (CSV export feature)
• Opt out of marketing emails

To exercise these rights, visit Settings or contact us at support@storestalker.com.

7. GDPR (European Users)

If you are in the European Economic Area, you have additional rights under GDPR including the right to data portability and the right to restrict processing. Our legal basis for processing is legitimate interest (providing the Service) and consent (for email notifications).

8. California Privacy Rights (CCPA)

California residents have the right to know what personal information we collect, request deletion, and opt out of the sale of personal information. We do not sell personal information.

9. Security

We use industry-standard security measures including encrypted connections (TLS), hashed passwords (bcrypt), and secure payment processing (Stripe PCI compliance). However, no system is 100% secure.

10. Contact

For privacy-related questions, contact us at support@storestalker.com.