SUMMARY OF KEY POINTS
- What personal information do we collect? We collect your name, email address, OAuth profile image, IP address, device metadata, and usage data (like API request counts, product pages viewed, and watchlists).
- Do we process any sensitive personal information? No. We do not collect or process sensitive personal information like race, religion, or biometric data.
- Do we collect information from third parties? Yes, we receive basic profile information (like your name and profile image) if you choose to sign in using Google or GitHub.
- How do we use your information? We use your data to provide the PriceTrack service, process payments, secure our API, send price alerts, and improve our platform.
- Who do we share your personal information with? We share data only with essential service providers (like our hosting, database, and payment partners) necessary to run our business. We never sell your personal information.
- What are your privacy rights? Depending on where you live, you have the right to access, correct, delete, or port your data, as well as opt out of marketing communications.
- How can you contact us? You can reach us anytime at support@pricetrack.dev.
1. Introduction
Welcome to PriceTrack, a platform designed for businesses and developers to track how SaaS companies price their products over time. By maintaining a catalogue of around 35,000 software products compiled from publicly published pricing pages, we help you view historical trends, compare competitors, and receive alerts when prices change through our web application and REST API.
We believe that trust is the foundation of any good software service. This Privacy Policy explains in plain language how we collect, use, and protect your personal information when you use PriceTrack. We want you to understand exactly what data we need to run our service, why we need it, and the rights you have over your own information.
If you have any questions about this policy or how we handle your data, please reach out to us at support@pricetrack.dev.
2. What We Collect & Why
We only collect the information we actually need to provide and improve PriceTrack. We organize this data into three categories:
Information You Give Us Directly
When you register for an account, start a 7-day free trial, or set up price alerts, you voluntarily provide us with specific information.
- Account Details: We collect your name and email address to create your account, communicate with you, and provide support. (Legal basis: Contract)
- Preferences & Watchlists: We store the specific software products you track and the price alerts you configure so our system can notify you when changes occur. (Legal basis: Contract)
Information Collected Automatically
As you interact with our web app and REST API, our systems automatically record certain technical and usage data to keep the platform secure and functional.
- Usage Data: We track your API request counts and the product pages you view. This helps us enforce rate limits, bill accurately for usage, and understand which SaaS products are most popular. (Legal basis: Legitimate Interest & Contract)
- Technical Data: We collect your IP address, device metadata, and operational logs. This is essential for preventing abuse, diagnosing bugs, and securing our infrastructure. (Legal basis: Legitimate Interest)
- Analytics & Cookies: We use essential cookies to keep you logged in, and privacy-friendly, cookieless analytics to understand general website traffic patterns. (Legal basis: Legitimate Interest & Consent where required)
Information from Third Parties
If you choose to authenticate using a third-party identity provider, we receive limited information from them.
- OAuth Data: When you sign in via Google or GitHub, we receive your email address, name, and profile image to streamline your onboarding and personalize your dashboard. (Legal basis: Consent & Contract)
3. How We Use Your Information
We process your personal data with specific goals in mind. Every use case is tied to a clear legal basis under global privacy laws.
- Core Service Delivery: We use your account data, API request counts, and watchlists to operate PriceTrack, deliver webhook alerts, and manage your subscription. (Legal basis: Contract)
- Service Improvement: We analyze aggregated usage data and product page views to decide which new features to build and which pricing pages to scrape more frequently. (Legal basis: Legitimate Interest)
- Communication: We use your email to send transactional messages (like password resets or billing receipts) and price alerts you have requested. (Legal basis: Contract)
- Security and Fraud Prevention: We monitor IP addresses and device metadata to detect suspicious activity, prevent API abuse, and protect our systems. (Legal basis: Legitimate Interest)
- Legal Compliance: We maintain financial records and certain operational logs to comply with tax laws and regulatory requirements. (Legal basis: Legal Obligation)
4. When We Share Your Information
We respect your privacy and strictly limit who has access to your data. We never sell your personal data or share it for cross-context behavioral advertising. We only share your information in the following circumstances:
- Essential Service Providers: We share data with trusted vendors who help us run our platform. This includes our merchant of record for payments, hosting providers, database hosts, and transactional email services. We only share the minimum data necessary for them to perform their specific function.
- Legal Requirements: If we are required by law, subpoena, or court order, we may disclose your information to law enforcement or regulatory authorities. We will attempt to notify you first unless legally prohibited from doing so.
- Business Transitions: If PriceTrack is involved in a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will notify you before your personal information is transferred and becomes subject to a different privacy policy.
- With Your Consent: We will share your information in any other way only if you have explicitly authorized us to do so.
5. Your Privacy Rights
Depending on your location (including under the GDPR, UK GDPR, CCPA/CPRA, and PIPEDA), you have specific rights regarding your personal information. We extend these rights to all our users globally:
- Access Your Data: You can request a copy of the personal data we hold about you. We will provide this within 30 days.
- Correct Inaccuracies: You can update your name, email, and profile details directly in your account settings.
- Delete Your Data: You can request the deletion of your account at any time. See our Data Retention section for exactly how this works.
- Port Your Data: You can request your watchlists and account data in a structured, commonly used, and machine-readable format (like JSON or CSV).
- Withdraw Consent: Where we rely on your consent to process data, you can withdraw it at any time without affecting the lawfulness of processing based on consent before its withdrawal.
- Lodge Complaints: If you believe we have violated your privacy rights, you have the right to complain to your relevant data protection authority.
To exercise any of these rights, please email support@pricetrack.dev.
6. Data Security
We take the security of your data seriously and have implemented technical and organizational measures to protect it:
- Encryption: All data is encrypted in transit using TLS and encrypted at rest in our databases.
- Authentication: We use hashed API keys to secure programmatic access. We also support optional multi-factor authentication (MFA), and your core login credentials are held securely by our identity providers (WorkOS, Google, GitHub) rather than by us.
- Access Controls: Only authorized PriceTrack personnel have access to production systems.
While we use industry-standard security measures, no system connected to the internet is 100% secure. We cannot guarantee absolute security against highly sophisticated attacks. You play a crucial role in your own security by maintaining strong passwords on your OAuth accounts and keeping your API keys secret.
If we discover a data breach that compromises your personal information, we will notify you and the relevant authorities within the timeframes required by applicable law (typically within 72 hours).
7. Data Retention
We keep your personal information only as long as necessary to fulfill the purposes outlined in this policy.
- Active Account Data: We retain your account information, watchlists, and preferences for as long as your account is active.
- Account Deletion: When you request account deletion, your account data is hard-deleted 30 days after the request. We provide this 30-day grace period in case you change your mind and wish to cancel the deletion.
- Technical Logs: Operational logs, such as webhook delivery records and scrape job diagnostics, are pruned continuously to minimize our data footprint.
- Financial Records: We are legally required to retain billing and transaction records for up to 7 years for tax and accounting purposes.
8. Cookies & Tracking
We use a minimal amount of tracking technology to make PriceTrack work.
- Essential Cookies: We use secure, first-party cookies strictly to maintain your logged-in session and authenticate your requests. You cannot opt out of these as the web app will not function without them.
- Analytics: We use Plausible, a privacy-first, cookieless analytics tool, to understand general website traffic. It does not track you across devices or websites, and it does not store personal data.
- Managing Preferences: Because we do not use non-essential tracking cookies or third-party advertising cookies, we do not require a cookie consent banner. You can manage standard cookie behaviors through your browser settings.
9. Children's Privacy
PriceTrack is a business-to-business tool designed for professionals and developers. Our services are not directed at children under the age of 18. We do not knowingly collect personal information from anyone under 18. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at support@pricetrack.dev, and we will delete the information immediately.
10. International Transfers
PriceTrack operates globally. Your personal information may be transferred to, stored, and processed in countries other than your own, including the United States, where our primary hosting providers are located.
When we transfer data originating from the European Economic Area (EEA), the UK, or Canada to other jurisdictions, we ensure it is protected by appropriate safeguards. This includes relying on adequacy decisions or implementing Standard Contractual Clauses (SCCs) with our service providers to guarantee your privacy rights remain intact regardless of where the data physically resides.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our business, technology, or legal requirements. When we make significant changes, we will notify you by sending an email to the address associated with your account and by updating the "Last Updated" date at the top of this page. Your continued use of PriceTrack after these changes take effect constitutes your acknowledgment of the updated policy.
12. Contact Us
If you have questions, concerns, or requests regarding your privacy, we are here to help.
- Email: support@pricetrack.dev
- Website: https://pricetrack.dev
The data controller is PriceTrack. We aim to respond to all privacy-related inquiries within 5 business days.
13. Categories Table (CCPA/CPRA)
For residents of California and other US states with comprehensive privacy laws, the following table details the categories of personal information we have collected in the past 12 months, our purposes for collection, and our retention practices.
| Category of Personal Information | Sources | Business Purpose | Third Parties Disclosed To | Retention Period |
|---|---|---|---|---|
| Identifiers (name, email address, IP address, profile image) | Direct from user, OAuth providers, automated collection | Account creation, authentication, communication, security | WorkOS, Resend, Vercel, Neon | Duration of account + 30 days |
| Commercial Information (subscription status, API request counts) | Automated collection, payment processor | Billing, rate limiting, service delivery | Paddle, Neon, Upstash | 7 years for financial records; usage pruned continuously |
| Internet/Network Activity (product pages viewed, watchlists, device metadata) | Automated collection, direct from user | Service delivery, analytics, security, platform improvement | Vercel, Plausible, Sentry | Duration of account + 30 days; logs pruned continuously |
Sensitive Personal Information: We do not collect or process sensitive personal information (such as government identifiers, precise geolocation, racial or ethnic origin, or biometric data). The right to limit the use and disclosure of sensitive personal information therefore does not apply.
14. Automated Decision-Making
We do not engage in any automated decision-making or profiling that produces legal or similarly significant effects concerning you (as defined under GDPR Article 22).
15. Privacy Signals
We respect your privacy choices at the browser level. PriceTrack honors the Global Privacy Control (GPC) signal. If your browser broadcasts a GPC signal, our systems will automatically recognize it as a valid request to opt out of any applicable tracking or data sharing, though as noted we do not sell or share your data for advertising purposes regardless.
16. Sub-processors
To provide PriceTrack, we rely on trusted third-party vendors. Our current sub-processors are:
- Paddle — merchant of record and payments
- WorkOS — authentication
- Google and GitHub — OAuth sign-in
- Vercel — hosting
- Neon — database
- Upstash — rate limiting
- Resend — transactional email
- Sentry — error monitoring
- Plausible — cookieless analytics
- OpenAI and Anthropic — extraction from public third-party pricing pages, never customer content
- Browserless — page rendering
Customers can ask to be notified before any new sub-processor is added by contacting support@pricetrack.dev.
17. EU/UK Representative
At this time, PriceTrack has not appointed a physical EU/UK Representative. All inquiries from EU and UK residents should be directed to our primary privacy contact at support@pricetrack.dev.
18. Supervisory Authority
If you are located in the European Economic Area (EEA) or the UK and believe we have not adequately resolved a privacy concern, you have the right to lodge a complaint with your relevant supervisory authority. For UK residents, this is the Information Commissioner's Office (ICO). For EEA residents, this is the Data Protection Authority in your country of residence.
19. Controller and Processor Roles
Under global privacy laws, a distinction is made between a "Data Controller" (the entity deciding how and why data is processed) and a "Data Processor" (the entity processing data on behalf of the controller).
- PriceTrack as a Data Controller: We act as a Data Controller (or "Business" under CCPA) for your account information, billing details, and platform usage data, as we determine how this information is used to run our business.
- PriceTrack as a Data Processor: We act as a Data Processor (or "Service Provider" under CCPA) for any specific customer content or proprietary watchlists you input into our platform. We process this data strictly according to your instructions to deliver the PriceTrack service.
For business customers requiring formal terms, these roles and obligations are detailed in our Data Processing Agreement (DPA), available upon request.
20. AI Processing Disclosure
PriceTrack uses third-party artificial intelligence providers (OpenAI and Anthropic) to extract structured pricing data from the public third-party pricing pages we scrape.
Because AI security is a critical concern for our business customers, we want to be explicit about how this works:
- Never customer content: We do not send your personal data, account information, watchlists, or any customer-generated content to these AI providers. The AI is used exclusively to parse publicly available third-party websites.
- No model training: The public data we do send is not used to train OpenAI's or Anthropic's foundational models. We use their API tiers, which exclude model training by default.
- Accuracy: While we use AI to structure data, AI outputs can occasionally be inaccurate. We encourage users to review the source links provided alongside our pricing alerts to verify critical pricing changes.