1. Introduction
StackedUp ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered product comparison service ("Service"). Please read this policy carefully. By using the Service, you consent to the practices described in this Privacy Policy.
2. Information We Collect
2.1 Information You Provide
- Account Information: Email address, name, and password when you create an account
- Profile Information: Optional information you add to your profile
- Payment Information: Billing details processed securely by our payment provider (Stripe)
- User Content: Product URLs you submit, comparison preferences, and use case descriptions
- Communications: Messages you send to our support team
2.2 Information Collected Automatically
- Usage Data: Pages visited, features used, comparison history, and interaction patterns
- Device Information: Browser type, operating system, device identifiers
- Log Data: IP address, access times, referring URLs
- Cookies and Tracking: Session cookies, analytics cookies (see Section 6)
2.3 Information from Third Parties
- Social Login: If you sign in with Google, we receive your name and email
- Product Data: We fetch publicly available product information from retailers (Amazon, Walmart, Target)
3. How We Use Your Information
We use collected information to:
- Provide, maintain, and improve the Service
- Process your comparisons and generate AI-powered analysis
- Manage your account and subscription
- Process payments and prevent fraud
- Send transactional emails (confirmations, receipts, notifications)
- Send marketing communications (with your consent)
- Respond to your inquiries and provide customer support
- Analyze usage patterns to improve user experience
- Enforce our Terms of Service and protect against misuse
- Comply with legal obligations
4. How We Share Your Information
We do NOT sell your personal information. We may share information with:
- Service Providers: Third parties that help us operate the Service (cloud hosting, payment processing, analytics)
- AI Providers: We use AWS Bedrock for AI processing; product data is processed but not stored by AI providers
- Business Transfers: In connection with a merger, acquisition, or sale of assets
- Legal Requirements: When required by law, court order, or government request
- Protection of Rights: To protect our rights, privacy, safety, or property
5. Data Retention
We retain your information as follows:
- Account Data: Retained while your account is active and for 30 days after deletion request
- Comparison History: Retained for 90 days, then automatically deleted
- Cached Product Data: Retained for 7 days to improve performance
- Payment Records: Retained as required by tax and accounting laws (typically 7 years)
- Analytics Data: Aggregated and anonymized data may be retained indefinitely
6. Cookies and Tracking Technologies
We use the following types of cookies:
- Essential Cookies: Required for the Service to function (authentication, security)
- Analytics Cookies: Google Analytics to understand how users interact with the Service
- Preference Cookies: Remember your settings and preferences
You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the Service.
7. Your Rights and Choices
Depending on your location, you may have the following rights:
- Access: Request a copy of your personal data
- Correction: Update inaccurate or incomplete information
- Deletion: Request deletion of your personal data
- Portability: Receive your data in a portable format
- Opt-Out: Unsubscribe from marketing communications
- Restrict Processing: Limit how we use your data
To exercise these rights, contact us at privacy@stackedupai.com. We will respond within 30 days.
8. California Privacy Rights (CCPA)
California residents have additional rights under the CCPA:
- Right to know what personal information we collect and how it's used
- Right to delete personal information
- Right to opt-out of the sale of personal information (we do not sell your data)
- Right to non-discrimination for exercising your privacy rights
9. International Data Transfers
Your information may be transferred to and processed in the United States, where our servers are located. If you are located outside the United States, please be aware that data protection laws may differ from those in your country. By using the Service, you consent to the transfer of your information to the United States. We implement appropriate safeguards to protect your data during transfers.
10. Data Security
We implement industry-standard security measures to protect your information:
- Encryption of data in transit (TLS/SSL) and at rest
- Secure authentication through AWS Cognito
- Regular security assessments and monitoring
- Access controls limiting employee access to personal data
- Secrets stored securely in AWS Secrets Manager
However, no method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
11. Children's Privacy
The Service is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected information from a child under 13, we will take steps to delete that information promptly.
12. Third-Party Links
The Service may contain links to third-party websites (e.g., Amazon, Walmart, Target product pages). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. For significant changes, we may also send you an email notification. Your continued use of the Service after changes constitutes acceptance of the updated policy.
14. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us:
Email: privacy@stackedupai.com
Data Protection Inquiries: dpo@stackedupai.com