Privacy Policy
Effective date: July 19, 2026
Information we collect
- Account information. Your email address, which you provide to sign in via a one-time "magic link." We do not use passwords.
- Content you submit. The brand names, product categories, competitor names, and product-page URLs you enter to run a diagnosis, and the results we generate for you.
- Payment information. If you subscribe to a paid plan, payment is processed by Stripe. We receive your plan, subscription status, and billing metadata, but we never receive or store your full card number — Stripe handles that directly.
- Usage and device data. Through Google Analytics, we collect pages viewed, actions taken, approximate location (derived from IP), and device/browser information, using cookies and similar technologies.
- Log data. Standard server logs, including IP address and request information, for security and reliability.
How we use your information
- To provide the service — running diagnoses, generating reports, and maintaining your account and history.
- To process payments, manage subscriptions, and send transactional email (such as sign-in links).
- To understand usage, improve the product, and prevent abuse or fraud.
- To secure the service and comply with legal obligations.
We do not sell your personal information.
How diagnoses are processed
When you run a diagnosis, the brand, category, competitor, and URL information you provide is sent to our AI provider (Anthropic) and used with automated web search to generate results. If you provide a product-page URL, our servers fetch that public page to ground the findings. Please do not submit confidential information or personal data of others in these fields.
Service providers we share data with
We share limited data with vetted providers who process it on our behalf:
| Supabase | Database, authentication, and hosting of your account and diagnosis data |
| Stripe | Payment processing and subscription billing |
| Anthropic | AI processing of your diagnosis inputs to generate results |
| Google Analytics | Usage analytics and product improvement |
| Hostinger | Application hosting and transactional email delivery |
Each provider has its own privacy practices. We may also disclose information if required by law or to protect our rights, users, or the public.
Cookies and tracking
We use essential storage to keep you signed in, and Google Analytics cookies to measure usage. Depending on your location, you may have the right to decline non-essential cookies; where required, we will provide a consent mechanism. You can also block cookies in your browser, though this may affect functionality.
Data retention
We keep your account and diagnosis data for as long as your account is active. You may request deletion of your account and associated data at any time by contacting us; we will delete it except where we must retain records to meet legal, tax, or security obligations.
Your rights
Depending on where you live (for example under GDPR or the CCPA), you may have the right to access, correct, delete, or export your personal information, and to object to or restrict certain processing. To exercise these rights, email hello@shelfanalyzer.com. We will not discriminate against you for exercising them.
Security
We use industry-standard measures including encryption in transit and access controls to protect your data. No method of transmission or storage is perfectly secure, so we cannot guarantee absolute security.
International users
Shelf Analyzer is operated from the United States, and your information is processed there. By using the service, you understand your information may be transferred to and processed in the United States.
Children
The service is not intended for anyone under 16, and we do not knowingly collect information from children.
Changes to this policy
We may update this policy from time to time. If we make material changes, we will update the effective date above and, where appropriate, notify you.
Contact
Questions or requests: hello@shelfanalyzer.com.