Privacy Policy
1. Introduction
Endless ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our clearance monitoring service.
Your Rights: Under GDPR and other privacy laws, you have the right to access, update, or delete your personal information. Contact us at [email protected] to exercise these rights.
2. Information We Collect
2.1 Personal Information
We collect information that you voluntarily provide to us when you:
- Create an account
- Subscribe to our service
- Contact customer support
- Use interactive features of our platform
| Information Type | Examples | Purpose |
|---|---|---|
| Account Information | Email address, password | Account creation and authentication |
| Payment Information | Credit card details (processed by Stripe) | Billing and subscription management |
| Usage Preferences | Saved products, search filters, store selections | Personalized experience and service improvement |
| Communication Data | Support emails, feedback | Customer service and support |
2.2 Automatically Collected Information
When you use our service, we automatically collect certain information:
- Usage Data: Pages viewed, features used, time spent on platform
- Device Information: IP address, browser type, operating system
- Log Data: Access times, error logs, performance metrics
- Cookies and Tracking: Session cookies, analytics cookies (see Section 4)
3. How We Use Your Information
We use the information we collect to:
3.1 Provide and Maintain Our Service
- Process your subscription and manage your account
- Deliver clearance monitoring and alerts
- Provide customer support
- Process payments and manage billing
3.2 Improve and Personalize Our Service
- Remember your preferences and saved items
- Analyze usage patterns to improve features
- Customize content and recommendations
- Conduct research and analytics
3.3 Communication
- Send service-related notifications
- Deliver email alerts (if subscribed)
- Respond to your inquiries
- Send important account or service updates
4. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance your experience:
4.1 Essential Cookies
Required for the platform to function properly (login sessions, security, preferences).
4.2 Analytics Cookies
We use Simple Analytics (privacy-focused) to understand how users interact with our platform. This helps us improve the service while respecting your privacy.
4.3 Managing Cookies
You can control cookies through your browser settings. However, disabling certain cookies may affect the functionality of our service.
5. Information Sharing and Disclosure
We do not sell, trade, or rent your personal information. We may share information in the following limited circumstances:
5.1 Service Providers
- Stripe: Payment processing (subject to Stripe's privacy policy)
- Supabase: Database hosting and authentication services
- Simple Analytics: Privacy-focused website analytics
- Email Services: For sending alerts and notifications
5.2 Legal Requirements
We may disclose your information if required by law or in response to valid legal process, such as a court order or subpoena.
5.3 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
6. Data Security
We implement appropriate technical and organizational security measures to protect your personal information:
- Encryption: Data transmitted over HTTPS
- Access Controls: Limited access to personal data on a need-to-know basis
- Regular Security Reviews: Ongoing assessment of security practices
- Secure Infrastructure: Using reputable cloud providers with security certifications
7. Data Retention
We retain your personal information for as long as necessary to provide our services and comply with legal obligations:
- Account Data: Until you delete your account
- Billing Records: 7 years for tax and legal compliance
- Usage Analytics: Aggregated and anonymized after 2 years
- Support Communications: 3 years for quality assurance
8. Your Privacy Rights
Depending on your location, you may have the following rights regarding your personal information:
8.1 Access and Portability
Request a copy of the personal information we hold about you.
8.2 Correction
Update or correct inaccurate personal information.
8.3 Deletion
Request deletion of your personal information (subject to legal retention requirements).
8.4 Restriction of Processing
Request that we limit how we use your personal information.
8.5 Objection
Object to certain types of processing, such as direct marketing.
8.6 Exercising Your Rights
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
9. International Data Transfers
Your information may be processed in countries other than your own. We ensure appropriate safeguards are in place for international transfers, including:
- Using service providers with adequate data protection measures
- Implementing standard contractual clauses where required
- Ensuring compliance with applicable data protection laws
10. Children's Privacy
Our service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child, we will take steps to delete such information.
11. Changes to This Privacy Policy
We may update this Privacy Policy periodically. We will notify you of any material changes by:
- Posting the updated policy on our website
- Sending an email notification to subscribers
- Providing notice through our service
Your continued use of our service after changes become effective constitutes acceptance of the updated Privacy Policy.
12. Third-Party Services
Our service may contain links to third-party websites or integrate with third-party services. This Privacy Policy does not apply to those external sites or services. We encourage you to review the privacy policies of any third-party services you use.
12.1 Key Third-Party Services
- Stripe: Payment processing - Stripe Privacy Policy
- Supabase: Database and authentication - Supabase Privacy Policy
- Simple Analytics: Privacy-focused analytics - Simple Analytics Privacy
13. Contact Us
If you have any questions about this Privacy Policy or our privacy practices, please contact us:
Email: [email protected]
Data Protection Officer: [email protected]
Address: [Your Business Address]
Response Time: We aim to respond to all privacy inquiries within 30 days.
14. Jurisdiction-Specific Provisions
14.1 California Residents (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and the right to request deletion of your personal information.
14.2 EU/UK Residents (GDPR)
If you are in the EU or UK, our legal basis for processing your personal information includes:
- Contract: Processing necessary to provide our services
- Legitimate Interest: Improving our services and fraud prevention
- Consent: Marketing communications (where applicable)
- Legal Obligation: Compliance with applicable laws