Privacy Policy

PepperMetrics ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data. By using PepperMetrics you agree to this policy.

1. Information We Collect

Account information. When you sign up, we collect your email address and name via our authentication provider (Clerk). We do not store your password — authentication is handled entirely by Clerk.

Competitor data you configure. We store the competitor names and URLs you add for monitoring, along with the prices, products, promotions, and shipping data we retrieve from those URLs on your behalf.

Usage and analytics data. We collect basic usage information — pages visited and features used — to improve the Service. We use Google Analytics (GA4) and Cloudflare Web Analytics for aggregate traffic measurement. These tools may collect anonymised IP addresses, browser type, and page view events. No personal data is sold to advertisers.

Payment information. Payments are processed by Stripe. We do not store your card number or payment details. We retain only the Stripe customer ID and subscription status necessary to manage your plan.

Support communications. If you contact us by email, we retain that correspondence to respond to your inquiry and improve the Service.

2. How We Use Your Information

• To operate and deliver the Service — scanning URLs, detecting changes, sending price alerts, and displaying analytics.
• To process your subscription and send billing-related communications.
• To send transactional emails (price change alerts, broken URL notifications, weekly digest reports) that you have enabled in your alert settings.
• To diagnose technical problems, measure performance, and improve service reliability.
• To comply with legal obligations where required.

We do not sell your personal data to any third party. We do not use your data to serve advertising.

3. Scraped Competitor Data

The pricing and product data retrieved by PepperMetrics is sourced from publicly accessible web pages. This data is stored on your behalf solely to power the Service. We do not share your competitor configurations or scraped data with other users or third parties.

When processing pages for price extraction, anonymised page text is sent to Anthropic's API. No personal data about you or your customers is included in these requests.

4. Third-Party Services (Sub-processors)

We use the following services to deliver PepperMetrics:

• Clerk — authentication and user identity management. Privacy Policy
• Supabase — database and backend infrastructure. Privacy Policy
• Stripe — payment processing. Privacy Policy
• Resend — transactional email delivery.
• Render — application hosting and infrastructure.
• Anthropic — AI-powered product data extraction. Only anonymised page text is processed; no personal data is included.
• Google Analytics (GA4) — aggregate website analytics. You can opt out via the Google Analytics opt-out browser add-on.
• Cloudflare Web Analytics — privacy-first traffic measurement. Cloudflare does not use cookies or fingerprinting for this product.

5. Data Security

We use industry-standard security measures including encryption in transit (TLS/HTTPS), row-level security in our database, and strict access controls to protect your data. No system is 100% secure. If you discover a potential vulnerability, please report it to [email protected].

6. Data Retention

We retain your account data for as long as your account is active. Price history and scrape data are kept for up to 12 months to power the analytics features. Error logs are automatically purged after 30 days.

When you delete your account, all associated personal data — email address, competitor configurations, and price history — is permanently deleted within 30 days.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data (right to erasure).
• Object to or restrict certain processing of your data.
• Receive your data in a portable, machine-readable format.

To exercise any of these rights, email us at [email protected]. We will respond within 30 days.

8. Cookies

PepperMetrics uses only functional cookies necessary to maintain your authenticated session, provided by Clerk. We do not use tracking cookies or third-party advertising cookies. Google Analytics uses cookies for session measurement; you can opt out using the link in Section 4.

9. Children's Privacy

The Service is intended for business users aged 18 and over. We do not knowingly collect personal data from anyone under 18. If we become aware that a child's data has been collected, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or in-app notice at least 14 days before they take effect. Continued use of the Service after that date constitutes acceptance of the revised policy.

11. Contact

Questions or concerns about this policy? Email us at [email protected].