Privacy Policy

Last updated: October 9, 2026 · Effective: October 9, 2026

DealSense ("we", "us", "our") operates the DealSense Chrome extension and the DealSense website and API service (collectively, the "Service"). This Privacy Policy explains what data we collect, how we use it, and your rights.

1. Information We Collect

1.1 Information you provide directly

• Email address — when you register an account or subscribe to email notifications.
• Password — stored only as a bcrypt hash; we never store plaintext passwords.
• Google account info (if you sign in with Google) — your email address and Google account ID, used solely for authentication.
• Payment information — handled entirely by Creem (our merchant of record). We do not receive or store your card details. We receive only a Creem customer ID and subscription status.

1.2 Information collected automatically

• Device identifier — a randomly generated ID stored in your browser's extension storage, used to associate your wishlist and settings with your device before you sign in.
• Product browsing activity — when you visit a supported Amazon product page with the extension enabled, we record the ASIN, product title, price, and timestamp. This powers the price history charts and price-drop alerts.
• Usage data — counts of AI analysis calls and price check calls. Used for quota enforcement and service quality monitoring.
• IP address — used for rate limiting and abuse prevention. Not stored beyond the request lifetime.
• Website analytics — our website uses privacy-friendly, cookieless analytics to count page views. No personal identifiers are stored.

1.3 Information we do NOT collect

• We do not read your Amazon password or login credentials.
• We do not track browsing activity on non-Amazon domains.
• We do not collect precise location, contacts, or files.
• We do not sell your personal data to third parties.

2. How We Use Your Information

• Provide the core Service: price tracking, alerts, AI product analysis.
• Authenticate your account and secure your session.
• Enforce free-tier quotas and prevent abuse.
• Send price-drop notifications and weekly briefings (only if you opt in).
• Process subscriptions via Creem.
• Respond to support requests.
• Improve the Service through aggregated usage statistics.

3. Third-Party Services

We share limited data with the following processors, each bound by their own privacy policy:

• Creem — merchant of record for all subscription payments. Handles payment processing, tax compliance, and invoicing.
• OpenAI — product titles and review text you view may be sent to OpenAI to generate AI analysis. Not linked to your account.
• Keepa — receives ASIN queries to fetch public price history. No personal data sent.
• Bright Data — receives ASIN queries to fetch public product/review data. No personal data sent.
• Resend — sends transactional and notification emails on our behalf.
• Google — provides OAuth identity verification if you choose Google Sign-In.

4. Data Retention

• Account data — retained while your account is active. Deleted within 30 days of account deletion request.
• Price history — aggregated anonymized price records are retained indefinitely (they contain no personal identifiers).
• Usage logs — retained for 12 months for quota and abuse analysis.
• Payment records — retained by Creem as long as legally required (typically 7 years for tax purposes).

5. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access — request a copy of your personal data.
• Correct — update inaccurate data via the extension settings.
• Delete — request deletion of your account and associated data.
• Export — download your data via the extension's "Backup" feature.
• Object / Restrict — opt out of email notifications at any time via settings.
• Portability — receive your data in a machine-readable format (JSON).

To exercise these rights, email support@dealsense.cn. We respond within 30 days.

6. Cookies and Local Storage

Our website does not use tracking cookies. Our Chrome extension uses local browser storage to store your session token, wishlist, preferences, and cache. This data stays on your device and is not accessible to other websites.

7. Security

• Passwords hashed with bcrypt (cost factor 10).
• API communication over HTTPS with TLS 1.2+.
• JWT tokens with short expiry (1 hour for free tier).
• Refresh tokens stored in Redis with per-user revocation.
• Payment data never touches our servers — handled entirely by Creem.

8. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect data from children under 13. If you believe we have, contact us for immediate deletion.

9. International Transfers

Your data may be processed in the United States and other countries where our service providers operate. We rely on standard contractual clauses for international transfers where applicable.

10. Changes to This Policy

We may update this Privacy Policy. Material changes will be notified via email or in-app notice at least 14 days before they take effect. Continued use after the effective date constitutes acceptance.

11. Contact

For privacy questions or data requests: support@dealsense.cn