Privacy Policy

We collect the following categories of personal data:

• Account data: Email address and display name when you create an account.
• Search history: Product search queries used to retrieve price results. Stored only when you are signed in.
• Saved products: Products you bookmark, including name, price at time of saving, and store.
• Location data: If you grant permission, your approximate location is used to show nearby stores. We do not persistently store GPS coordinates — only the derived postal code used for flyer lookups.
• Subscription status: Your plan tier (Free, Saver, or Pro) and the associated Stripe customer ID.
• Preferences: Notification settings and selected store/category preferences.
• Usage data: Standard server logs (IP address, browser type, pages visited) retained for security and debugging.

• To operate and improve the Where 2 Buy service.
• To return product search results from third-party price sources.
• To send price-drop notifications if you have opted in.
• To process subscription payments via Stripe.
• To display nearby store locations and current flyers.
• To authenticate your account and maintain session security.
• We do not sell your personal data to third parties.

The following services may process your data under their own privacy policies:

• Supabase — database, authentication, and backend infrastructure.
• Stripe — payment processing and subscription management. We never see your full card details.
• Google Maps — map display and location services.
• SerpAPI — product price data retrieval. Your search query is sent to SerpAPI servers.
• Flipp — weekly store flyer data. Your approximate postal code is sent to retrieve relevant flyers.

• Essential cookies: Session tokens set by Supabase Auth to keep you signed in. Required for the service to function.
• localStorage (functional): Onboarding preferences, guest session state, and postal code stored locally in your browser.
• Optional analytics cookies: May be introduced in future; you will be asked for consent before these are set.

Cookie preferences can be managed via the banner shown on first visit.

We retain your account data for as long as your account is active. Saved products and preferences are retained until you delete them or delete your account. Server logs are retained for up to 90 days.

• Access: View the data we hold about you in account settings.
• Correction: Update your display name and preferences at any time in account settings.
• Deletion: Permanently delete your account and all data from the danger zone in account settings. This action is irreversible.
• Portability: Contact us to request a copy of your data in a machine-readable format.
• Opt-out of notifications: Toggle notification settings off at any time in your account.

Where 2 Buy is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with data, please contact us and we will delete it.

We may update this policy from time to time. Material changes will be communicated by updating the "Last updated" date above. Continued use of the service constitutes acceptance of the updated policy.

For privacy-related questions or requests, contact us at hello@where2buy.app.