YOUR DATA. YOUR RULES.

1. What we collect and why

We collect information you provide directly — your name, email address, company name, job title, and billing details when you create an account or purchase a subscription.

We collect information about how you use pricepul: pages you visit, features you use, queries you run, and alerts you configure. This helps us improve the product and provide support.

We collect technical information automatically: IP address, browser type, device information, and cookies. We use this for security, fraud prevention, and analytics.

We do not collect or store the contents of your competitors' pricing pages beyond what is needed to detect changes and notify you. Snapshot data is encrypted at rest and subject to your workspace's retention settings.

2. How we use your information

To provide and operate the pricepul service, including scraping competitor URLs you designate, processing diffs, generating AI summaries, and delivering alerts through your configured channels.

To communicate with you about your account, including confirmations, security notices, and product updates you've opted into.

To improve our service by understanding usage patterns, diagnosing issues, and informing product decisions. We aggregate and anonymize data for this purpose.

To comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information to third parties. We do not use your data to train AI models without explicit consent.

3. Data retention

We retain your account information for as long as your account is active, plus a 30-day grace period after cancellation.

Snapshot and change log data is retained according to your plan: 7 days (Starter), 30 days (Growth), 1 year (Pro), or custom (Enterprise). You can request earlier deletion at any time.

Usage logs are retained for up to 90 days for security and debugging purposes.

Backup data may persist for an additional 30 days after deletion from primary storage.

4. Who we share data with

Service providers: We use infrastructure providers (AWS, Neon, Upstash), payment processors (Stripe), email delivery (Resend), and monitoring services (Sentry) to operate pricepul. Each is contractually bound to process your data only as directed.

AI services: Change summaries are generated using Anthropic's Claude API. Diff content is sent to Anthropic for this purpose. No identifiable personal information is included. Anthropic does not retain this data for training per our Data Processing Agreement.

Legal requirements: We may disclose information if required by law, subpoena, or court order. We will notify you unless prohibited by law.

Business transfers: If pricepul is acquired or merges, your data may transfer to the acquiring entity. We will notify you in advance.

5. Security

We encrypt all data in transit using TLS 1.3 and at rest using AES-256. Access to production systems is restricted to authorized engineers, requires multi-factor authentication, and is logged.

We conduct regular penetration testing and vulnerability assessments. We participate in responsible disclosure — see security@pricepul.io.

Stripe handles all payment processing. We never see or store raw card numbers.

We maintain SOC 2 Type II certification. Reports are available to Enterprise customers under NDA.

6. Your rights

Access: You can export all personal data from Settings → Account → Export Data at any time.

Correction: You can update your profile information directly from the Settings page.

Deletion: You can delete your account and all associated data from Settings → Account → Delete Account. Processing takes up to 30 days.

Portability: You can export your competitor list, change history, and alert configurations as JSON or CSV.

For GDPR rights or CCPA requests, email privacy@pricepul.io. We respond within 30 days.

7. Cookies

We use cookies for authentication (session token), preferences (sidebar state, theme), and analytics (Plausible — privacy-preserving, no cross-site tracking).

We do not use third-party advertising cookies. We do not participate in ad networks.

You can control cookies through your browser settings. Disabling authentication cookies will prevent you from staying logged in.

8. Changes to this policy

We will notify you by email at least 14 days before making material changes to this policy. Non-material changes (typos, formatting, clarifications) may be made without notice.

The current version's effective date is listed below. Previous versions are available upon request at privacy@pricepul.io.