Privacy Policy

1. Scope

This Policy applies to information we process when you access or use the Service. It does not apply to third-party websites, services, or integrations that you may access through the Service.

2. Information we collect

We may collect the following categories of information:

• Account information (for example, name, email address, authentication details).
• Workspace information (for example, team name, members, roles, invitations).
• Customer content you upload or connect (for example, manifests, spreadsheets, item lists, and related metadata).
• Integration data (for example, tokens/credentials and identifiers needed to connect third-party integrations such as Google Sheets), subject to the permissions you grant.
• Usage and device data (for example, pages viewed, actions taken, log and diagnostic data, IP address, device identifiers, browser type, and approximate location derived from IP).
• Payment data (for example, subscription status, billing history, and limited payment metadata). Payment card numbers are handled by our payment processor (e.g., Stripe), not stored by us.
• Communications (for example, messages you send via our contact forms or support channels).
• Cookies and similar technologies (see Advertising & Analytics below).

3. How we use information

We use information to:

• provide, operate, maintain, and secure the Service;
• authenticate users and manage accounts/workspaces;
• process your uploaded content to generate analysis outputs you request (including enrichment, matching, and scoring);
• process payments and manage subscriptions;
• communicate with you about the Service, updates, and support;
• monitor performance, debug errors, and prevent fraud/abuse;
• measure and improve the Service (including product analytics);
• conduct marketing, including advertising and conversion measurement, where enabled and subject to applicable law.

4. How we share information

We may share information with the following categories of recipients:

• Service providers that help us run the Service (for example: hosting/infrastructure, database and authentication, email delivery, analytics, monitoring, and payment processing).
• Third-party integrations you choose to connect (for example: Google Sheets), as required to provide the integration.
• Advertising partners (for example: Meta, Facebook, Instagram, TikTok, Google/YouTube, X, LinkedIn) for advertising measurement and retargeting, where enabled and subject to your choices and applicable law.
• Legal and compliance when we believe disclosure is necessary to comply with law, enforce our terms, or protect rights, safety, and security.
• Business transfers in connection with a merger, acquisition, financing, or sale of all or part of our business.

We may also share information between members of the same workspace/team, depending on permissions and collaboration features you use.

5. Third-party services and APIs we may use

The Service may use or integrate with third-party services to provide functionality. Depending on features you enable, we may process data with providers such as:

• Supabase (database, authentication, storage, webhooks);
• Vercel (hosting and deployment infrastructure);
• Stripe (payments and subscription billing);
• Resend (transactional email delivery);
• PostHog (product analytics), where enabled;
• Sentry (error monitoring), where enabled;
• Google services (e.g., Google Sheets integration, OAuth, and AI services such as Gemini), where enabled;
• market data and enrichment sources (e.g., eBay APIs, Keepa, SearchAPI), where enabled;
• data collection/automation tools (e.g., Apify), where enabled.

When you enable these features, some information (which may include portions of your uploaded content or derived identifiers) may be transmitted to the relevant provider to perform the requested operation.

6. Advertising, analytics, and tracking (Meta, TikTok, etc.)

We may use cookies, pixels, SDKs, and similar technologies for analytics, attribution, and advertising. These tools help us understand usage, measure campaign performance, and (where enabled) show you ads that are more relevant.

Depending on the configuration, this may involve sharing identifiers (such as cookie identifiers, device identifiers, IP address, and/or event data like page views or conversions) with advertising platforms and their partners. In some cases we may share hashed identifiers (such as hashed email) for matching, where supported and permitted.

Examples of platforms we may use include Meta (Facebook/Instagram), TikTok, Google/YouTube, and similar advertising networks.

Your choices: you can limit tracking via your browser settings, device settings, or opt-out tools provided by industry groups. If you are in a region that requires consent, we will rely on consent where required before setting non-essential cookies.

7. Data retention

We retain information for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. You may be able to delete certain content or accounts through the Service; deletion may be subject to technical and legal retention requirements (e.g., billing records).

8. Security

We use administrative, technical, and physical safeguards designed to protect information. No security measures are perfect, and we cannot guarantee absolute security.

9. Your rights

Depending on where you live, you may have rights to access, correct, delete, or export your information, and to object to or restrict certain processing.

If you are in the EEA/UK, you may have rights under GDPR (including the right to lodge a complaint with a supervisory authority). If you are in certain U.S. states (e.g., California), you may have rights to opt out of certain targeted advertising and to limit the use/disclosure of certain sensitive information, as applicable.

10. International transfers

We and our service providers may process information in countries different from your country of residence. Where required, we use appropriate safeguards for cross-border transfers.

11. Children

The Service is not directed to children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children.

12. Changes

We may update this Policy from time to time. We will post an updated version and revise the “Last updated” date above. Your continued use of the Service after changes become effective constitutes acceptance of the updated Policy.

13. Contact

For privacy questions or requests, contact us via the Contact page on our website.