Last updated: [EFFECTIVE DATE]
This Privacy Policy explains how [COMPANY LEGAL NAME] ("[PLATFORM NAME]," "we," "us," or "our") collects, uses, and discloses personal information when you use [SITE URL] and its related services (the "Platform"). It also describes the choices and rights you have. By using the Platform you agree to this Policy. If you do not agree, do not use the Platform.
This Policy is written to meet the California Consumer Privacy Act as amended by the California Privacy Rights Act (together, "CCPA/CPRA") and comparable privacy laws in other US states. Where a specific state gives you additional rights, we honor them.
1. A note on what we do not do
We do not sell your personal information, and we do not share it for cross-context behavioral advertising as those terms are defined under the CCPA/CPRA. We do not use third-party advertising or analytics tracking pixels on the Platform. If this ever changes, we will update this Policy and provide the opt-out mechanisms the law requires before doing so.
2. Personal information we collect
We collect the following categories of personal information, using the categories named in the CCPA/CPRA:
- Identifiers - such as your name, email address, and account identifiers.
- Account and profile information - your login credentials (stored in hashed form), email-verification status, and, if you join a program, the details you provide (for example a seller's business details, or a reviewer's demographic and interest information).
- Commercial and activity information - products you compare, save, or review; reviews, ratings, photos, and videos you submit; reviewer offers and their status; and records of your consent to our legal documents (including the document version, date and time, and IP address, kept as evidence that you agreed).
- Internet and network activity - your interactions with the Platform, including outbound clicks to third-party retailers that we log to operate the marketplace, your IP address, and browser or device information (user agent).
- Approximate location - a coarse location inferred from your IP address. We do not collect precise geolocation.
- Inferences - limited inferences we draw to match reviewers with relevant products, based on information you provide.
We do not intentionally collect "sensitive personal information" as defined by the CCPA/CPRA (such as government identifiers, precise geolocation, or account log-in combined with a password for another account). Please do not submit sensitive information in reviews or messages.
3. Where the information comes from
We collect information directly from you (when you register, build a profile, submit a review, or apply to a program), automatically as you use the Platform (activity and device information), and from service providers who help us operate the Platform (for example, our email-delivery provider confirming whether a message was delivered).
4. How we use personal information
- to create and maintain your account and verify your email address;
- to operate the Platform's core features - comparison, saved items, reviews, and the reviewer and seller programs;
- to match reviewers with relevant products;
- to record and evidence your acceptance of our legal documents;
- to log outbound clicks so the marketplace and any commissions function correctly;
- to communicate with you about your account, security, and (if you opt in) updates and offers;
- to detect, prevent, and address fraud, abuse, and security incidents;
- to comply with legal obligations and enforce our Terms.
5. How we disclose personal information
We disclose personal information only as follows:
- Service providers. We use vendors to host the Platform, store uploaded media, and deliver email. They may process personal information only on our instructions and for these purposes, under contract.
- Third-party retailers you choose to visit. When you click an outbound link, you leave the Platform and interact with that retailer under its own privacy policy. We do not transmit your account information to them; any information they collect is governed by them, not us.
- Legal and safety. We may disclose information if required by law or legal process, or to protect the rights, safety, or property of our users, the public, or us.
- Business transfers. If we are involved in a merger, acquisition, or sale of assets, personal information may be transferred as part of that transaction, subject to this Policy.
In the preceding 12 months we have disclosed the categories in Section 2 to service providers for the operational purposes described above. We have not sold personal information and have not shared it for cross-context behavioral advertising.
6. Cookies and similar technologies
We use a small number of cookies that are necessary for the Platform to function and to remember your preferences, including your cookie choice. We do not use third-party advertising cookies. For details, see our Cookie Policy.
7. How long we keep information
We keep each category of personal information only as long as reasonably necessary for the purposes described in this Policy, and then delete or de-identify it, unless a longer period is required or permitted by law (for example, to meet tax and accounting obligations, to resolve disputes, or to enforce our agreements). The schedule below states the periods we apply. Where a fixed period cannot be given in advance, we retain the information for the criterion described and delete or de-identify it once that purpose is met.
| Type of information | How long we keep it |
|---|---|
| Account and profile information (name, email, hashed password, email-verification status) | While your account is open; deleted or de-identified within 90 days after the account is closed, except records we must keep longer under this schedule. During those 90 days you can reopen the account yourself and nothing is deleted; after them, the deletion is permanent and cannot be reversed. |
| Seller or reviewer program information (a seller's business details; a reviewer's demographic and interest information) | While you participate in the program, and up to 24 months afterward to handle disputes and prevent fraud, then deleted or de-identified. |
| Consent records (the document version you agreed to, the date and time, and IP address) | For the life of your account plus 4 years, to evidence your agreement and cover the period in which a related claim could be brought. |
| Reviews, ratings, photos, and videos you publish | Remain available after you close your account, consistent with FTC guidance against selectively removing reviews. Your name is removed from them as soon as the account closes, and the link between the review and your account is severed permanently when the profile is deleted at 90 days. You do not need to ask for this. |
| Activity and outbound-click logs (IP address, user agent, session identifier, and the links you click to visit external retailers) | Up to 12 months in identifiable form, then anonymized (IP and session identifiers removed) or deleted. |
| Fraud-prevention signals (for example, IP addresses blocked for abusive clicking) | Up to 24 months. |
| Billing and financial records (advertising and click-fee charges, invoices, and account ledgers) | Up to 7 years, to meet tax, accounting, and audit obligations. |
| Email-verification and rate-limit records | Transient; removed automatically within 24 hours. |
| Email delivery logs | Up to 12 months, for deliverability and security. |
| Messages you send us through the Contact page | Up to 24 months, so we can answer you and follow up on your request. |
| Privacy-request records (to show we handled your request) | At least 24 months, as required by law. |
| Marketing opt-out / unsubscribe records | Kept, in minimized form, for as long as needed to honor your opt-out under the CAN-SPAM Act, even after your account is closed. |
When a retention period ends, we delete the information or remove the identifiers that link it to you. Some information may persist for a limited time in secure backups before it is overwritten on our normal backup cycle.
8. How we protect information
We use administrative, technical, and physical safeguards designed to protect personal information, including hashing of passwords and access controls. No system is perfectly secure, and we cannot guarantee absolute security.
9. Your privacy rights
Depending on where you live, you may have the right to:
- Know and access the categories and specific pieces of personal information we have collected about you;
- Delete personal information we have collected, subject to legal exceptions;
- Correct inaccurate personal information;
- Opt out of the sale or sharing of personal information - although, as stated above, we do not sell or share personal information;
- Limit the use of sensitive personal information - although we do not collect it for such uses;
- Not be discriminated against for exercising your rights;
- Appeal a decision on your request, where your state provides that right.
10. How to exercise your rights
Closing your account. You do not need to contact us to close your account. Sign in and use Close my account in your account settings; we will confirm by email. Closing is refused only while something is still unsettled between you and another user or us - an open reviewer offer, a refund owed in either direction, an unfinished campaign, a dispute, or an unpaid or unrefunded balance - and the page tells you which of these applies. For 90 days afterwards you can restore the account by signing in as usual; we then email you a link to confirm it is you. If we closed your account rather than you, contact us instead. After 90 days your profile is deleted on the schedule in Section 7.
You may submit a request by emailing [PRIVACY EMAIL]. We will verify your request by confirming information associated with your account before acting on it, and we will respond within the timeframe required by law. You may use an authorized agent to submit a request on your behalf, with proof of authorization. If we decline your request, we will explain why, and where your state allows, you may appeal by replying to our response.
11. Marketing emails
We send transactional messages (such as email verification and account or security notices) that are necessary to provide the Platform. If we send promotional email, you can opt out at any time using the unsubscribe link in the message or by contacting us; we handle promotional email consistent with the CAN-SPAM Act. Opting out of promotional email does not stop transactional messages.
12. Children
The Platform is intended for users who are at least 18 years old. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us personal information, contact us at [PRIVACY EMAIL] and we will delete it.
13. Where information is processed
[If the operating entity or its service providers process personal information outside the United States, retain this paragraph; if all processing is in the US, it may be deleted.] Your personal information may be processed in, or transferred to, countries outside the United States, including the country where [COMPANY LEGAL NAME] is established. Those countries may have different data-protection laws. Where we transfer information internationally, we take steps to protect it consistent with this Policy and applicable law.
14. Changes to this Policy
We may update this Policy from time to time. We will post the updated Policy with a new "Last updated" date and, where required, notify you. Your continued use of the Platform after an update means you accept the revised Policy.
15. Contact us
For privacy questions or requests:
[COMPANY LEGAL NAME]
[MAILING ADDRESS]
[PRIVACY EMAIL]