Privacy Policy

01 Information We Collect

We collect information in three ways: information you give us, information we collect automatically, and information from third parties.

Information you provide

• Account & contact details — name, email address, phone number, and password (stored only as a salted hash) when you sign up, join the waitlist, or contact us.
• Alert preferences — the products, SKUs, brands, categories, and store locations or ZIP codes you choose to watch.
• Payment information — when you subscribe to a paid plan, payments are processed by our payment provider. We receive billing status, plan, and the last four digits of your card — we never store full card numbers.
• Communications — messages you send us by email, Discord, or support channels.

Information we collect automatically

• Usage data — pages viewed, features used, alerts delivered and opened, and timestamps.
• Device & technical data — IP address, browser type, operating system, device identifiers, and referring URLs.
• Cookies & similar technologies — see Cookies & Tracking below.

Information from third parties

• Authentication providers — if you sign in with a third-party account (e.g. Discord or Google OAuth), we receive your basic profile and email as permitted by that provider.
• Payment & analytics providers — subscription and aggregated usage signals.

02 How We Use Your Information

We use the information we collect to:

• Create and manage your account and deliver the inventory alerts you request.
• Send real-time notifications via SMS, email, push, or Discord based on your preferences.
• Process payments, manage subscriptions, and prevent fraud and abuse.
• Operate, maintain, secure, and improve the Services and develop new features.
• Respond to your inquiries and provide customer support.
• Send service and transactional messages, and — where permitted — product updates you can opt out of.
• Comply with legal obligations and enforce our Terms of Service.

03 Legal Bases for Processing

Where the GDPR or similar laws apply, we rely on the following legal bases to process your personal data:

• Contract — to provide the Services you sign up for, including delivering alerts and processing your subscription.
• Legitimate interests — to secure, maintain, and improve the Services and prevent abuse, balanced against your rights.
• Consent — for SMS marketing, certain cookies, and other optional processing; you may withdraw consent at any time.
• Legal obligation — to comply with applicable laws, tax, and accounting requirements.

04 How We Share Information

We share personal information only in the following circumstances:

• Service providers — vendors who process data on our behalf (hosting, payments, messaging, analytics) under contracts that limit their use of your data.
• At your direction — e.g. when you connect a Discord account or route alerts to a channel you control.
• Legal & safety — to comply with the law, respond to lawful requests, or protect the rights, property, and safety of ShelfRadar, our users, or the public.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy.

05 Cookies & Tracking

We and our providers use cookies and similar technologies to keep you signed in, remember your preferences, secure the Services, and understand how the Services are used.

You can control cookies through your browser settings. Blocking essential cookies may prevent parts of the Services from working.

06 Third-Party Services

We rely on trusted third parties to operate the Services. Each processes data under its own privacy policy:

• Cloud hosting & CDN — to host and deliver the site and protect against abuse.
• Payment processing (Stripe) — to handle subscriptions and billing securely. We never receive or store your full card number.
• Messaging providers (Twilio for SMS, Resend for email) — to deliver SMS, email, and push notifications.
• Discord — for community access and optional alert delivery.

Links to third-party sites (such as retailer product pages) are provided for convenience. We are not responsible for their privacy practices, and this Policy does not apply to them.

07 Data Retention

We keep your personal information for as long as your account is active or as needed to provide the Services. After you close your account, we delete or anonymize your data within a reasonable period, except where we must retain it to comply with legal, tax, or accounting obligations, resolve disputes, or enforce our agreements.

08 Data Security

We use technical and organizational measures designed to protect your information, including encryption in transit (TLS), hashed passwords, access controls, and least-privilege practices. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we become aware of a breach affecting your personal data, we will notify you and the relevant authorities as required by law.

09 Your Privacy Rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Delete your personal information.
• Port a copy of your data to another service.
• Object to or restrict certain processing, and withdraw consent.
• Opt out of marketing communications at any time.

California residents (CCPA/CPRA) and residents of the EEA/UK (GDPR) have specific rights, including the right not to receive discriminatory treatment for exercising them. We do not sell or “share” personal information as those terms are defined under California law. To exercise any right, contact us at privacy@shelfradar.io. We will verify your request and respond within the timeframe required by law.

10 SMS & Email Communications

When you opt in to SMS or email alerts, you consent to receive automated notifications at the number or address you provide. Message and data rates may apply. You can opt out at any time:

• SMS — reply STOP to any message to unsubscribe, or HELP for help.
• Email — click unsubscribe in any marketing email or update your notification settings.

We will continue to send essential service messages (such as security or billing notices) even if you opt out of marketing.

We do not sell or share your mobile phone number or your SMS opt-in consent with any third parties or affiliates for their own marketing or promotional purposes. Phone numbers and SMS consent are used solely to deliver the restock and account alerts you request, and are never shared for others’ marketing.

11 Children’s Privacy

The Services are not directed to children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will delete it.

12 International Users

ShelfRadar is operated from the United States. If you access the Services from outside the U.S., your information will be transferred to, stored, and processed in the U.S., where data-protection laws may differ from those in your country. Where required, we use appropriate safeguards for international transfers.

13 Changes to This Policy

We may update this Policy from time to time. When we do, we will revise the “Last updated” date above and, for material changes, provide a more prominent notice. Your continued use of the Services after an update means you accept the revised Policy.

14 Contact Us

If you have questions about this Privacy Policy or how we handle your data, reach out: