Privacy Policy

1. What We Collect

We collect only what is necessary to provide the Service:

• —Account information — your email address and display name, collected when you sign up via Clerk.
• —Usage data — which features you use, search queries, and general interaction patterns. Used to improve the product. Not sold.
• —Payment metadata — subscription status, plan type, and billing dates, processed via Stripe. We never see or store your card number, CVV, or full billing address.
• —Card photos — images you upload to the fake-detection tool (Real Check — Photo Mode) are sent to our inference provider for analysis and then deleted. They are not stored unless you explicitly save the card to your watchlist.
• —Watchlist and portfolio data — cards you save, price alerts you set, and portfolio entries you create. Stored in your account and visible only to you.

2. How We Use It

• —To provide and operate the Service — including running checks, displaying price data, and managing your account.
• —To send transactional emails — account creation, trial reminders, billing receipts, and price alerts you have opted into.
• —To improve the product — understanding which features get used and where users get stuck.
• —To comply with legal obligations and enforce our Terms of Service.

We do not sell your data. We do not use your data to train AI models without your explicit consent.

3. Who We Share With

We use the following subprocessors to operate the Service. Each processes only the data necessary for their function:

• —Clerk — authentication and account management. Stores your email and session tokens.
• —Stripe — payment processing. Handles all card data directly; we receive only subscription status and anonymized billing metadata.
• —Resend — transactional email delivery. Receives your email address to send receipts, alerts, and notifications.
• —Vercel — hosting and infrastructure. Processes request data (IP, user agent) as part of normal web hosting.
• —Hugging Face — AI inference for the fake-detection tool. Card photos are sent for analysis and not retained by Hugging Face beyond the request.

We do not share your data with advertisers, data brokers, or any third party not listed above.

4. Data Retention

• —Account data is retained while your account is active.
• —After you cancel or delete your account, your data is retained for 90 days (to allow for reactivation or dispute resolution), then permanently deleted.
• —Card photos uploaded for fake detection are deleted immediately after analysis unless you save them to your watchlist.
• —Anonymized, aggregated usage data may be retained indefinitely for product analytics.

5. Your Rights

You have the right to:

• —Access — request a copy of the personal data we hold about you.
• —Deletion — request that we delete your account and associated data. We will comply within 30 days, subject to any legal retention obligations.
• —Export — request a machine-readable export of your watchlist, portfolio, and account data.
• —Correction — ask us to correct inaccurate data we hold about you.

To exercise any of these rights, email privacy@priceslap.app. We will respond within 30 days.

6. Cookies

We use essential cookies only:

• —Authentication session cookies (managed by Clerk) to keep you signed in.
• —Theme preference (soft/pro mode) stored in your browser's local storage.

We do not use tracking pixels, advertising cookies, or third-party analytics networks. We do not participate in cross-site tracking.

7. Children

Priceslap is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has created an account, please contact us at privacy@priceslap.app and we will delete the account promptly.

8. Changes to This Policy

We may update this Privacy Policy as the Service evolves. For material changes, we will notify you by email before the change takes effect. The current version will always be posted at this URL.

9. Contact

Privacy questions or data requests: privacy@priceslap.app.