How we handle your data

Preview document: This operational overview is not a finalized legal privacy policy. The business operator must supply legal identity, contact information, retention terms and applicable legal notices before public commercial launch.

Feed uploads

CSV uploads are analyzed in server memory. The app does not persist raw uploaded CSVs, filenames, product IDs, URLs, or individual report messages in its database. An optional live check contacts the public product and image URLs within your feed when explicitly selected; destination sites may log those requests.

Accounts and saved history

We store the account email, a password hash, revocable session-token hashes, anti-abuse counters, and only the aggregate scan summaries you explicitly save. Accounts can download their saved-history CSV or a JSON copy of their account information and saved summaries, delete individual scans and delete the account. JSON exports include the account email and should be kept private. Browser-local history is separate and stays in your browser.

Optional services

If email features are enabled, transactional recovery/verification emails are sent using a third-party email provider. If paid subscriptions are enabled, Stripe processes payment information; we store subscription identifiers and status, never card numbers. Your browser and hosting platform may also process technical logs for security and operation. Feedback submitted through the form is stored as text; do not include personal or product-level data.

Contact and correction

A dedicated privacy/support contact will be published before commercial launch. For now, manage saved account data in My Account.