Legal
Privacy Policy
Last updated August 18, 2026
ShopScout collects the minimum needed to run the service. This page explains what is stored, why, and how to remove it.
Information you provide
- Account details: name, email address and a securely hashed password.
- Research preferences: your main selling platform, product categories of interest, target selling price and minimum margin.
- Content you create: watchlists, collections, notes, saved profit scenarios, competitor records and alert rules.
- Support messages you send through the contact form.
Information collected automatically
ShopScout records a small set of internal product events — for example that a pricing page was viewed or a product was analyzed — to understand which parts of the product are used. These events store an event name, an optional path and a short allow-listed property set. We do not store raw IP addresses, user-agent strings or free-form payloads in analytics.
Client IP addresses are used transiently, in memory, for abuse rate limiting. They are not written to the analytics store.
Passwords
Passwords are hashed with bcrypt and never stored in plain text. Password reset tokens are random, single use, expire after 60 minutes, and only their SHA-256 digest is stored.
Payments
Card details are handled entirely by our payment processor. ShopScout never sees or stores card numbers. We store subscription status, plan tier, billing period and invoice references so the product can enforce entitlements and show your billing history.
How we use information
- To operate your account and enforce plan entitlements.
- To deliver research features, alerts and exports you have configured.
- To respond to support requests.
- To understand aggregate product usage and improve the service.
We do not sell personal data and we do not share it for third-party advertising.
Retention
Account data is retained while your account is active. Requesting deletion from account settings marks your account for deletion; personal data is removed and any remaining records are anonymized. Financial records may be retained where required by law.
Your choices
- Update your name, email and preferences from account settings.
- Change alert and digest preferences at any time.
- Export your collections as CSV on eligible plans.
- Request account deletion from account settings.
Contact
Privacy questions can be sent through the contact page.
This document is provided as a starting point for a production deployment. Have it reviewed by a qualified attorney in your jurisdiction before relying on it commercially.