Privacy Policy

StockSentry ("StockSentry", "we") operates a service that monitors electronics availability at Canadian retailers and emails people who ask to be notified. This policy explains what personal information we collect, why, and the choices you have. We follow the principles of Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

Who is responsible

Our privacy contact handles questions and requests: stockchecka98@gmail.com, Mailing address not configured.

What we collect

• Account information: your email address, an optional display name, and your password (stored by our authentication provider as a one-way hash; we never see it).
• Your watchlist and alert preferences, and a history of the alerts we sent you and their delivery status.
• Consent records: when and how you agreed to our terms, alert emails and (optionally) marketing emails.
• Billing information for paid plans, processed by Stripe. We store your Stripe customer and subscription identifiers, never your card number.
• Security and usage data: a keyed one-way hash of your IP address and browser for rate limiting and counting clicks. We do not store raw IP addresses in our database.
• Analytics, only if you accept analytics cookies: pages viewed and features used, via PostHog.
• Messages you send to support.

Why we use it

• To provide the service: monitor the products you choose and email you alerts you asked for.
• To run your account, process payments and send account and billing emails.
• To keep the service secure and prevent abuse.
• With your separate consent, to send occasional product news. You can withdraw that consent any time.
• To improve StockSentry using aggregated, non-identifying statistics.

We don't sell personal information. When you click a link to a retailer, we may use an affiliate link; we pass only an anonymous click identifier, never your email or account details.

Service providers

We use trusted providers to run StockSentry: Supabase (database and sign-in), Vercel and our worker hosting provider (application hosting), Stripe (payments), Resend (email delivery), Sentry (error reports) and PostHog (analytics, opt-in). Some of them store or process information in the United States or other countries, where it may be accessible to local authorities under their laws. We choose providers with appropriate safeguards and contracts.

How long we keep it

• Account, watchlist and preferences: until you delete your account.
• Alert history: up to 2 years, then deleted automatically.
• Consent records: kept as proof of consent after account deletion, without a link to your account.
• Billing records: kept by Stripe and us as long as tax law requires (generally six years in Canada).
• Security logs and rate-limit counters: days to months, depending on the record.

Your rights and choices

• Access: download a copy of your data from Dashboard → Privacy & data.
• Correction: update your details in Settings, or contact us.
• Deletion: delete your account from Dashboard → Privacy & data.
• Withdraw consent: unsubscribe links are in every alert email; marketing and alert preferences are in Settings.
• Complaints: contact us first; you can also contact the Office of the Privacy Commissioner of Canada.

Security

We use encryption in transit, access controls including database row-level security, least-privilege service accounts, audit logging of sensitive administrative actions, and regular backups. No system is perfectly secure; we'll notify you and the regulator of a breach that creates a real risk of significant harm, as the law requires.

Children

StockSentry is not directed at children under 16 and we don't knowingly collect their information.

Changes

We'll post updates here and, for significant changes, email account holders.