Privacy Policy

1. What we collect

• Account: email address and authentication data via Supabase Auth.
• ShopGoodwill credentials: username and password, stored encrypted (AES-256-GCM) on our bidding server. We do not display your password after save.
• App data: watchlist items, max bids, deal scans, sniper activity logs, and auction outcomes.
• Billing: Stripe customer ID and payment method references. We never store full card numbers — Stripe does.

2. How we use data

• Operate the sniper and deal scanner
• Place bids you schedule and check win/loss results
• Charge success fees or subscriptions
• Provide support and prevent abuse

We do not sell your personal data. We do not use ShopGoodwill credentials for any purpose other than bidding and outcome checks you authorize by using the Service.

3. Processors

We rely on:

• Supabase — authentication and database
• Vercel — frontend hosting
• Oracle Cloud — bidding/API servers
• Stripe — payments

4. Retention

Account and billing records are kept while your account is active and as needed for accounting, fraud prevention, and legal compliance. Encrypted ShopGoodwill credentials are deleted when you disconnect them or delete your account. You may request account deletion by contacting us with the email on your account.

5. Security

Credentials are encrypted at rest with a key held only on the bidding server. Access to production systems is restricted. No method of transmission or storage is 100% secure.

6. Cookies

We use session cookies for authentication (Supabase). We do not use third-party advertising trackers on the app.

7. Changes

We may update this policy by posting a new version here. Material changes will be noted by updating the date above.

8. Contact

Privacy questions: use the email on your BuzzerBidder account. See also our Terms of Service.