Draft — not yet in force. This document is incomplete: the legal entity name, governing-law jurisdiction, mailing address have not been set. It does not constitute a binding agreement until finalised.

Privacy Policy

AuctionAlerts ("we", "us") is operated by [the operator — not yet configured]. This policy explains what we collect, why, who we share it with, and the choices you have. It applies to auctionalertspro.com.

Not affiliated with eBay. AuctionAlerts is an independent tool that searches public eBay listings on your behalf. eBay is a trademark of eBay Inc.

1. Information we collect

• Account data — your name and email address. Your password is never stored in readable form (it is hashed with Argon2).
• Search data — the saved searches, filters, and alert history you create.
• Billing data — your plan and the subscription/customer identifiers returned by our payment processors. We do not receive or store your full card number.
• Connected eBay credentials — if you connect your own eBay developer keys, we store them encrypted at rest and use them only to run your searches.
• Technical data — a single session cookie to keep you logged in, plus standard server/security logs (IP address, timestamps). We do not use third-party advertising or tracking cookies.

2. How we use it

• To run your saved searches and deliver alerts by email and (if enabled) SMS.
• To provide the AI search assistant when you use it.
• To process your subscription and send service messages (verification, receipts, security notices).
• To secure the service, prevent abuse, and comply with law.

We do not sell your personal information, and we do not use your data to train AI models.

3. Who we share it with (sub-processors)

We share data only with the service providers needed to operate AuctionAlerts. Each receives only what its function requires:

Provider	Purpose	Data shared
Stripe, Inc.	Subscription billing & card processing	Name, email, and payment-card details you enter on Stripe's checkout (we never see or store card numbers — only your subscription/customer identifiers).
PayPal Holdings, Inc.	Subscription billing (alternative to Stripe)	Your PayPal account identifiers and subscription status (payment credentials stay with PayPal).
eBay Inc.	Searching listings on your behalf (Browse API)	Your saved-search terms and, when you connect your own eBay developer keys, those credentials (encrypted at rest) and OAuth tokens.
AI model providers — Anthropic, PBC; OpenAI, LLC; DeepSeek; Zhipu AI (GLM)	AI search assistant (one provider active at a time, per service configuration)	The plain-language search descriptions you type into the AI builder (no account or payment data).
Postmark (Wildbit, LLC)	Transactional email (verification, invites, alerts, receipts)	Your email address and the contents of the alert/notification emails we send you.
Telnyx LLC	SMS alert delivery	Your mobile number and the alert text, when you enable SMS notifications.
CallBoss	SMS alert delivery (legacy/fallback provider)	Your mobile number and the alert text, when you enable SMS notifications.
Cloudflare, Inc.	DNS, CDN, TLS, and DDoS protection	Standard request metadata (IP address, user-agent) as a network intermediary.
Object-storage & hosting providers	Application hosting and encrypted off-site backups	All application data, encrypted in transit and (for secrets) at rest; backups are encrypted and stored off-box.

4. Security

Traffic is encrypted in transit (TLS). Sensitive secrets — connected eBay credentials, OAuth tokens, and API keys — are encrypted at rest with AES-256-GCM. Backups are encrypted and stored off-site. No system is perfectly secure, but we work to protect your data using industry-standard measures.

5. Data retention

We keep your data while your account is active. When you delete your account, we remove your personal data and saved searches within a reasonable period, except where we must retain limited records (e.g. billing) to meet legal or accounting obligations. Backups age out on our retention schedule.

6. eBay marketplace account deletion

We honor eBay's Marketplace Account Deletion/Closure notifications: when eBay notifies us that a user has closed their account, we delete the associated data we hold.

7. Your rights & choices

• Access, correct, or delete your account data from your profile, or by emailing us.
• Turn SMS or email alerts on or off at any time in your notification settings.
• Depending on where you live (e.g. the EEA/UK or California), you may have additional rights to access, portability, or objection. Contact us to exercise them.

8. Children

AuctionAlerts is not directed to children under 16, and we do not knowingly collect their data.

9. Changes

We may update this policy; material changes will be posted here with a new effective date and, where appropriate, notified by email.

10. Contact

[operator — not yet configured] — mailing address not yet configured. Privacy questions: [email protected].