Privacy Policy

Who controls your data

[CONFIRM: controller identity and address — must match the operator named in Terms section 1, and should be settled at the same time. Also confirm the ICO registration: a controller processing personal data generally has to register and pay the data protection fee, and the registration number is normally shown on this page. A UK/EU representative or DPO is usually not required for a UK-only controller of this size.] The operator of PriceSentry is the controller of the personal data described here. Contact us at [CONFIRM: privacy contact email].

What we collect

• Account data — your name, email address, and password (stored hashed, never in readable form).
• Billing data — handled by Stripe. Card numbers never reach our servers; we hold a Stripe customer reference, your plan, and invoice history.
• Usage data — when you last used the application, and aggregate, cookie-free analytics about which pages are visited. Our analytics does not set cookies, does not track you across sites, and does not build a profile of you.
• Support data — anything you send us in a support ticket or email.
• Diagnostic data — when something errors, we record the error and the technical context around it so we can fix it.

Your catalog and the competitor pages you track are business data rather than personal data, and we do not deliberately collect personal data from the pages we retrieve.

Why we process it, and on what basis

To provide the service and take payment (performance of a contract); to keep the service secure, working and improving, and to tell you about problems with it (legitimate interests); and to meet accounting and tax obligations (legal obligation). [CONFIRM: add a consent basis here if you intend to send marketing email to customers.]

Who we share it with

We use a small number of processors, each doing one job:

• Stripe — payments and billing.
• Resend — transactional email such as verification and alerts. Mail is sent from the EU (Ireland), but Resend stores account data, delivery logs and message metadata in the United States.
• [CONFIRM: hosting provider and regions] — where the application and database run.
• Sentry — error diagnostics.
• Bright Data — retrieving competitor pages that block direct requests.
• Plausible — cookie-free analytics, self-hosted at [CONFIRM: host].

We do not sell personal data. [CONFIRM: which of these are outside the UK, and the transfer mechanism relied on for each.]

How long we keep it

[CONFIRM: retention periods — account data after cancellation, billing records (usually six years for UK tax), support tickets, and diagnostic data.]

Your rights

You can ask for a copy of your personal data, ask us to correct or delete it, object to or restrict how we use it, and ask for it in a portable form. Write to [CONFIRM: privacy contact address] and we will respond within one month. If you are not satisfied you can complain to the Information Commissioner's Office at ico.org.uk.

Cookies

We set a session cookie to keep you signed in and a cookie to protect forms against cross-site request forgery. Both are strictly necessary and neither is used for advertising or tracking. Our analytics sets no cookies at all, which is why you are not asked to accept any. [CONFIRM: keep this accurate if any third-party script is ever added.]