Privacy Policy

This Privacy Policy explains how Mint Enterprises LLC, a Wyoming limited liability company doing business as EcomWatchdog ("we", "us", or "our"), collects, uses, shares, and protects information when you use the EcomWatchdog website, application, and email digests (the "Service"). It applies to account holders, visitors to our website, and people who receive our emails. It does not apply to the third-party websites you choose to monitor.

1. Who we are

Mint Enterprises LLC operates the Service from the United States and is the controller of the personal information described in this policy. Contact details are at the end of this page.

2. Information we collect

Information you provide

• Account information: your email address and a password. Passwords are stored only in hashed form by our authentication provider.
• Monitoring configuration: the competitor names, domains, and product URLs you add, and the preferences you set (for example, whether to receive digests).
• Billing information: if you subscribe, our payment processor collects your payment card details and billing address directly. We never receive or store full card numbers. We store a customer reference, your plan, subscription status, and billing period dates.
• Communications: messages you send to support, and any feedback you provide.

Information collected automatically

• Usage and log data: IP address, browser type, device information, pages visited, timestamps, and referring URLs, collected through standard server logs and our hosting provider. We use this to operate, secure, and debug the Service.
• Cookies: we use strictly necessary cookies to keep you signed in and to protect against cross-site request forgery. We do not currently use advertising cookies, third-party analytics cookies, or tracking pixels on the website. If that changes, we will update this policy and, where required, ask for consent.
• Website statistics: our hosting provider (Vercel) counts page views for us so we can see how the website is used: the page visited, the referring site, and the general browser, device type and country. It does not use cookies, does not follow you across other websites, and is not used for advertising.
• How you found us: if another website or a tagged link first brought you here, our website remembers that site's name in your browser's own storage. If you sign up, it is saved with your account, along with your answer to the optional "How did you hear about us?" question. We use this only to learn which channels bring customers. It is not a cookie, is not shared for advertising, and is deleted with your account.
• Security check: our sign-up, log-in and password-reset forms run a check provided by Cloudflare (Turnstile) to tell people from automated traffic. To do this, Cloudflare receives your IP address and information about your browser and device, and may store a small amount of data in your browser. We receive only whether the check passed. It is used for security, not for advertising.
• Email engagement: our email provider may record whether a digest was delivered or bounced so we can maintain deliverability. We do not track link clicks in digests for advertising purposes.

Information from monitored websites

To provide the Service, our systems request publicly accessible pages from the ecommerce websites you choose and store the page text needed to detect and describe changes. This is commercial store content (product names, prices, promotional text). It is not information about you, and we do not intend to collect personal information about any individual from monitored websites. If a monitored page happens to include personal information about a third party, we store it only as part of the page text and do not use it for any other purpose.

3. How we use information

• To create and manage your account and authenticate you.
• To run the monitoring you configured, generate reports, and send email digests.
• To process payments, manage subscriptions, and send billing and account notices.
• To respond to support requests and communicate with you about the Service.
• To monitor, secure, and improve the Service, including detecting abuse, enforcing our Terms of Service, and diagnosing errors.
• To comply with legal obligations and protect our rights and the rights of others.

We do not sell personal information, and we do not use it for third-party advertising. We do not send marketing email sequences; account, billing, and digest emails are the messages you should expect.

4. Legal bases (EEA, UK, and similar jurisdictions)

Where data protection law requires a legal basis, we rely on: performance of our contract with you (providing the Service you signed up for); our legitimate interests (securing and improving the Service, preventing fraud and abuse, and communicating with customers), balanced against your rights; compliance with legal obligations; and, where we ask for it, your consent, which you may withdraw at any time.

5. How we share information

We share personal information only as described here:

• Service providers that process data on our behalf under contracts that restrict their use of it. These currently include: Supabase (database and authentication), Stripe (payments), Resend (email delivery), Vercel (hosting), Cloudflare (the security check on our sign-up, log-in and password-reset forms that tells people from automated traffic), Anthropic (automated analysis of monitored page text to classify and summarize changes; your account details are not sent to Anthropic), and, where enabled, Browserless (rendering monitored pages in a headless browser).
• Legal and safety: when we believe disclosure is required by law, regulation, legal process, or governmental request, or is necessary to protect the rights, property, or safety of us, our customers, or the public.
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets, in which case we will notify you before your information becomes subject to a different privacy policy.
• With your direction: when you ask us to share information with someone.

6. Data retention

• Account information, configuration, and recorded updates: for as long as your account is open. When you delete your account, we delete this data within 30 days, except the free-trial record described below.
• Free-trial record: each free trial is available once per email address. When an email address is confirmed, we keep a one-way, keyed fingerprint of it (not the address itself) to recognize that the address has already had a free trial, including after the account is deleted. We keep it for as long as we offer free trials. It is not used for any other purpose.
• Stored page text from monitored sites: we keep the latest copy of each page that we read successfully. It is replaced after the next successful check (a check that fails leaves the earlier copy in place) and deleted when the related page, competitor or account is deleted. Short excerpts quoted in your recorded updates stay in your update history until you delete that competitor or your account.
• Server and security logs: typically 90 days, unless needed longer to investigate an incident.
• Billing records: retained as required for tax and accounting purposes, generally seven years.
• Backups: expire on their normal schedule, generally within 30 days.

7. Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, access controls, hashed passwords, and separation between customer data using database-level access rules. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please use a unique, strong password and contact us promptly if you suspect unauthorized access to your account.

8. International transfers

We are based in the United States, and our service providers process data in the United States and other countries. If you use the Service from outside the United States, your information will be transferred to and processed in the United States, where privacy laws may differ from those in your country. Where required, we rely on appropriate safeguards for these transfers, such as standard contractual clauses entered into by our providers.

9. Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, or export your personal information, to object to or restrict certain processing, and to withdraw consent. You can view and update your email preferences in Settings, stop change digests at any time, and delete your account from Settings. To exercise other rights, contact us using the details below. We will verify your identity before acting on a request and respond within the time required by law. If you are in the EEA or UK, you also have the right to lodge a complaint with your local supervisory authority.

California residents. The California Consumer Privacy Act gives you the right to know what personal information we collect, use, and disclose, to request deletion, to correct inaccurate information, and to not be discriminated against for exercising your rights. We do not sell or share personal information for cross-context behavioral advertising, so there is no opt-out to offer. We do not use or disclose sensitive personal information for purposes that would require a right to limit.

Do Not Track. Because we do not track users across third-party sites, we do not respond to browser Do Not Track signals differently from other traffic.

10. Children

The Service is for business use and is not directed to anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

11. Third-party sites and links

Reports and digests contain links to monitored websites. Those sites have their own privacy practices, which we do not control. This policy does not apply to them.

12. Changes to this policy

We may update this policy from time to time. We will post the updated version here with a new "last updated" date and, for material changes, notify account holders by email or through the Service before the changes take effect.

Contact

Privacy questions: support@ecomwatchdog.com

By mail:
Mint Enterprises LLC
101 N Greenville Ave
Suite C PMB 1010
Allen, TX 75002