Privacy Policy

1. Introduction

This policy explains what personal data Snatch It ("we", "us") collects, why, and what rights you have over it. It applies to everyone who uses snatchit.online.

2. Information we collect

• Account information: your login email, a separate notification email if you set one, your chosen marketplace, and your subscription plan.
• Saved searches and matches: the search terms you save and the eBay listings we've matched against them, including titles, prices, images, and listing URLs.
• Push notification data: if you enable push notifications, we store a device-specific subscription token needed to deliver them. We don't use this to identify your device for any other purpose.
• Payment information: if you subscribe to a paid plan, payments are handled entirely by Stripe. We store a reference to your Stripe customer and subscription IDs so we know your plan status, but we never see or store your card details.
• Support messages: if you contact us via the Contact form or by email, we keep that correspondence to respond to you and improve the Service.

3. How we use your information

We use your information to:

• Run the core Service — scanning eBay on your behalf and sending you match alerts by email and/or push notification.
• Process subscription payments and keep your plan status accurate.
• Respond to support requests.
• Maintain the security and reliability of the Service.

We don't sell your personal data, and we don't use it for advertising.

4. Our legal basis for processing

Where UK GDPR or EU GDPR applies, we process your data on the following bases: performance of a contract (running the Service you've signed up for, including billing), and legitimate interests (keeping the Service secure and responding to support queries). Where we send you optional communications beyond core match alerts, we'll rely on your consent.

5. Third-party services we use

Running Snatch It means some of your data passes through a small number of trusted infrastructure providers, each acting on our behalf:

• Supabase — our database and authentication provider, where your account and search data is stored.
• Stripe — our payment processor, for paid subscriptions.
• Resend — our transactional email provider, for match alerts and account emails.
• Vercel — our hosting provider.
• eBay's Browse API — the source of listing data we search on your behalf. Using Snatch It means eBay processes your search terms as API requests; this is separate from and in addition to eBay's own privacy practices, which you can review directly with eBay.

We don't control these providers' own data practices beyond the data we send them, but we've chosen providers with their own strong security and privacy commitments.

6. Data retention

Unpinned matches are automatically deleted after 7 days. Pinned matches are kept until you unpin or delete them. We keep your account data for as long as your account is active. If you delete your account, your searches, matches, and account data are permanently and immediately removed from our systems.

7. Your rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data (most account details can be edited directly in Settings).
• Delete your account and associated data, at any time, from Settings.
• Object to or restrict certain processing.
• Request a copy of your data in a portable format.

To exercise any of these rights beyond what's available directly in Settings, contact us at support@snatchit.online.

8. Cookies

We use essential cookies to keep you logged in (via Supabase authentication) and, while the site is in private testing, a cookie that remembers you've entered the site password. We don't use advertising or tracking cookies.

9. Children's privacy

Snatch It isn't directed at children, and you must be at least 16 years old to create an account. We don't knowingly collect personal data from children under 16.

10. International data transfers

Snatch It serves users across the US, UK, and Germany, and our infrastructure providers may process and store data in countries outside your own, including the United States. Where this involves transferring data out of the UK or EU, we rely on our providers' standard contractual clauses or equivalent safeguards.

11. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we'll update the "last updated" date above and, where appropriate, notify you by email.

12. Contact us

Questions about this policy or your data? Reach us at support@snatchit.online.