Privacy Policy
Last updated: October 3, 2026
The short version
- ✓ We collect only what running the service needs: your email, optional Telegram handle, and the competitor URLs you ask us to watch.
- ✓ We never ask for, and never touch, your store admin panel, your API keys, or your customers' data.
- ✓ We don't sell personal data. Ever. We don't run third-party ad trackers.
- ✓ Email us and we delete your account and everything attached to it, usually within 72 hours.
1. Data we collect from you
- Account data: email address; optionally a Telegram username/chat ID and a delivery-channel preference.
- Monitoring configuration: the competitor product/collection URLs you submit, your own reference prices (if you choose to store them for comparison), and plan/tier.
- Billing data: plan, amount, invoice history, and payment status. Card payments are processed by our payment processor — we receive a confirmation and the last-four digits; we never see or store full card numbers or CVCs. Crypto payments record only the wallet/transaction reference.
- Support correspondence: emails you send us.
2. Data collected automatically
- Technical logs: server access logs (IP address, user-agent, timestamp) used for security and debugging, retained short-term.
- Scan metadata: per-URL scan success/failure timestamps, so we know what to retry and what to tell you about coverage.
- Cookies: this website uses no advertising or cross-site tracking cookies. Any cookies are strictly functional (e.g., keeping a pilot form state).
3. What we do NOT collect
Your store backend, sales data, inventory database, customer lists, employee information, or anything behind a login on any site. Our crawlers only read pages that are publicly viewable in a normal browser.
4. How we use your data
Exclusively to: run your monitoring jobs, judge and deliver digests to your chosen channel, bill you, keep the service secure, and respond to your support requests. Aggregating for product improvement is limited to anonymized technical metrics (e.g., "scan success rate on platform X") — not your business data, not your competitor list tied to your identity.
5. AI processing — honestly explained
Drafts of digests are generated with the help of an AI model service. The model sees the public competitor page data we collected (prices, stock status, page snippets) — not your card details and not your store's internal data. Our AI providers are bound by terms prohibiting training on customer inputs. A human reviews escalations and anything unusual before it reaches you.
6. Who we share data with
Only processors we need to operate, under contract, minimum data required:
- Website and database hosting (cloud infrastructure providers).
- Email delivery infrastructure (for transactional digests).
- The Telegram API (when you choose Telegram delivery — your Telegram ID and message content pass through their platform under their own policy).
- Payment processing (card charges) and, for crypto, the respective public networks.
- AI summarization provider, as described in section 5.
We never sell personal data, and we only disclose it to law enforcement if compelled by valid legal process — and we tell you when legally permitted.
7. Retention and deletion
- Account, configuration, and digest history are kept while your account is active.
- On cancellation or on request, we delete your monitoring config, digest history, and correspondence within 72 hours, except billing records we are legally required to keep (retained for the period required by tax law).
- Security logs are rotated on a short schedule (up to 30 days).
8. Your rights
Wherever you live, you may request access to your data, correction, export, or deletion by emailing alertsnaildesk@gmail.com from your account email. We honor GDPR and similar regimes voluntarily because it's the right baseline — no dark patterns, no "call to cancel" games.
9. Security
Data is encrypted in transit (HTTPS everywhere) and access to production systems is restricted and logged. No system is unbreakable; if a breach ever affects your data, we will notify affected customers promptly and publicly on our status page.
10. International transfers
Our infrastructure and providers may be located outside your country. We use providers that offer standard contractual clauses or equivalent safeguards for cross-border data transfer.
11. Children
AlertSnail is a business tool. We do not knowingly accept users under 16 and delete any such accounts we discover.
12. Changes and contact
Material changes to this policy are announced by email and dated on this page. Operator: AlertSnail, [PO_BOX_ADDRESS]. Data questions: alertsnaildesk@gmail.com.