Privacy Policy

1. Data We Collect

We collect the following categories of data:

• Account data: Your email address, name (if provided via OAuth), and account preferences.
• Tracking data: The competitor product URLs you submit for monitoring.
• Monitoring data: Publicly available competitor product information (prices, stock status, product titles) retrieved from e-commerce pages.
• Usage data: Login timestamps, feature usage, and technical logs necessary for operating the Service.
• Billing data: Subscription plan, billing cycle, and payment status. Your full card details are handled by our payment processor and are not stored by Priceopia.

2. How We Use Your Data

We use your data to:

• Provide the Service: tracking competitor products, sending alerts, and displaying analytics
• Process subscription payments and manage your account
• Send transactional emails (alerts, account notifications, billing receipts)
• Maintain and improve the Service, including debugging and error monitoring
• Comply with legal obligations

We do not sell your data to third parties. We do not use your data for advertising purposes.

3. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA) and United Kingdom, we process your personal data under the following legal bases:

• Performance of a contract: Processing necessary to deliver the Service you subscribed to (Article 6(1)(b) GDPR).
• Legitimate interests: For service improvement, security, and fraud prevention (Article 6(1)(f) GDPR).
• Consent: For optional features like OAuth sign-in (Article 6(1)(a) GDPR).
• Legal obligation: For tax records and regulatory compliance (Article 6(1)(c) GDPR).

4. Data Storage & Security

Your data is stored on servers hosted in the EU. Database backups are encrypted and stored on a separate provider. We use industry-standard practices to protect your data, including encrypted connections (TLS), hashed authentication tokens, and restricted access controls. We do not store your full payment card details — these are handled exclusively by our payment processor.

5. Data Retention

We retain your data for as long as your account is active. If you delete your account, we permanently remove your personal data within 30 days. Aggregated, anonymised data (e.g., platform-level statistics) may be retained indefinitely. Billing records are retained for the period required by applicable tax laws (typically 5–7 years).

6. Cookies & Authentication

We use essential cookies for authentication and session management. We do not use tracking cookies, third-party advertising scripts, or analytics trackers. OAuth providers (Google, GitHub) may set their own cookies during the sign-in flow, governed by their respective privacy policies.

7. Third-Party Services

We use the following third-party services that may process limited personal data:

• Payment processor (Merchant of Record): Handles payment processing, billing, and tax collection. Processes your name, email, billing address, and payment details. Priceopia does not store your full card details.
• Resend: Transactional email delivery. Processes your email address.
• Sentry: Error monitoring. Processes anonymised technical data.
• Google & GitHub (OAuth): Authentication. Processes your email and profile name as authorised by you.

Each service operates under its own privacy policy and acts as an independent data controller or processor as applicable.

8. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of your personal data.
• Rectification: Request correction of inaccurate data.
• Erasure: Request deletion of your account and associated data.
• Restriction: Request that we limit processing of your data.
• Portability: Receive your data in a structured, machine-readable format.
• Objection: Object to processing based on legitimate interests.
• Withdraw consent: Withdraw consent for optional processing at any time.

To exercise any of these rights, email us at support@priceopia.com. We will respond within 30 days. If you are in the EEA or UK and believe we have not addressed your request adequately, you have the right to lodge a complaint with your local data protection authority.

9. Children's Privacy

Priceopia is not intended for use by individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a minor, please contact us and we will promptly delete it.

10. International Data Transfers

Your data is stored on servers in the EU. However, some third-party services (e.g., OAuth providers) may process data in other regions. For transfers outside the EEA/UK, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) where applicable.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes via email or in-app notification at least 30 days before they take effect. Continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact

Privacy questions or data requests? Email us at support@priceopia.com.