Privacy Policy

This Privacy Policy explains how Shopping Rescue ("we", "us") processes personal data when you use our website and diagnostic services. We act as the data controller for the processing described below.

1. Data we collect

• Scan inputs: store URL, optional platform/country metadata, and email address when you start a free scan.
• Crawl results: publicly available page content, HTTP status codes, structured data, and derived findings — associated with your scan.
• Payment data: processed by Stripe; we receive customer ID, payment status, and billing metadata, not full card numbers.
• Technical data: IP address, browser type, and request logs for security and operations.
• Account data: if you create an account — name, email, organization settings.

2. How we use data

• Run storefront scans and generate diagnostic reports.
• Send transactional emails (scan ready, purchase confirmation).
• Process payments and manage subscriptions.
• Improve rules, reliability, and fraud prevention.
• Comply with legal obligations.

Legal bases (GDPR): contract performance, legitimate interests (security, product improvement), consent where required (e.g. marketing cookies), and legal obligation.

3. Retention

• Free scan data: retained for the period shown in your plan (typically 30 days for free scans), then deleted or anonymized.
• Paid report data: retained while your account is active and as needed for support.
• Billing records: retained as required by tax and accounting law.

4. Processors and sharing

We use trusted subprocessors, including:

• Hosting / database — infrastructure providers for app and data storage.
• Stripe — payment processing (privacy policy).
• Resend — transactional email delivery.

We do not sell your personal data. We may disclose data if required by law or to protect our rights and users' safety.

5. International transfers

If data is transferred outside the European Economic Area, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

6. Your rights

Depending on your location, you may have the right to:

• Access, rectify, or erase your personal data.
• Restrict or object to certain processing.
• Data portability.
• Withdraw consent where processing is consent-based.
• Lodge a complaint with your local supervisory authority.

To exercise these rights, contact nova.flow.app@gmail.com. We respond within one month where GDPR applies.

7. Cookies

We use essential cookies for session and security. Analytics or marketing cookies, if introduced, will be disclosed in a cookie notice with consent options where required.

8. Children

Our service is not directed at children under 16. We do not knowingly collect their data.

9. Changes

We may update this policy. Material changes will be posted on this page with an updated date.

10. Contact

Data protection inquiries: nova.flow.app@gmail.com