Privacy Policy

1. Introduction

TaskLifter LLC ("Company", "we", "us", or "our") operates the Compr service ("Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Information We Collect

Account Information

• Email address
• Name (if provided)
• Billing information (processed securely by Stripe)

Note: Account passwords are managed by Supabase Auth and are never stored in our application database. We do not have access to your plaintext password.

Marketplace Connection Data

• OAuth tokens for connected platforms (eBay, Etsy, Poshmark, Mercari, Depop)
• Marketplace usernames and account identifiers
• Listing data from connected accounts

Listing Data

• Product titles and descriptions
• Product images
• Pricing information
• Category and condition details
• Inventory and sales status

Automatically Collected Information

• IP address (via server logs)
• Browser type and version
• Device information
• Usage metrics (listing counts, feature usage for subscription limits)

We may log server requests and usage metrics for debugging, security, and performance optimization purposes. These logs are retained only as long as necessary for these purposes.

3. How We Use Your Information

We use the collected information to:

• Provide and maintain the Service
• Create and sync listings across marketplaces on your behalf
• Process transactions and manage subscriptions
• Send you service-related communications
• Provide customer support
• Improve and optimize the Service
• Detect and prevent fraud or abuse
• Comply with legal obligations

4. How We Share Your Information

We share your information only in these circumstances:

With Marketplace Platforms

When you connect a marketplace account and create listings, we transmit your listing data to that marketplace as directed by you. This is the core function of the Service.

With Service Providers

• Stripe: Payment processing and subscription management
• Supabase: Database hosting, authentication, and file storage
• Vercel: Application hosting
• OpenAI: Images you upload for automatic listing descriptions may be processed by OpenAI's API solely to generate suggested descriptions. We do not share these images with any third parties beyond this purpose
• Apify: Market data collection for Poshmark and Mercari price comparisons
• Oxylabs: Market data collection for Depop price comparisons

For Legal Reasons

We may disclose information if required by law, court order, or to protect our rights, property, or safety.

5. International Data Transfers

Your data is stored in Supabase databases and processed on Vercel's infrastructure, which may involve servers located in the United States or other countries. By using the Service, you consent to the transfer, storage, and processing of your data in these locations. We take appropriate safeguards to protect your information in accordance with this Privacy Policy regardless of where it is processed.

6. Cookies and Tracking

We use cookies and similar technologies for:

• Essential cookies: Required for authentication, session management, and security
• OAuth flow cookies: Temporary cookies used during marketplace account connection (e.g., PKCE verification)

We do not currently use third-party analytics or advertising cookies. Disabling essential cookies may prevent you from using the Service.

7. Data Security

We implement appropriate security measures to protect your information:

• Encryption of data in transit (HTTPS/TLS)
• Marketplace credentials (for platforms requiring login) are encrypted using AES-256-GCM encryption
• Account passwords are securely handled by our authentication provider (Supabase Auth)
• Database access controls and row-level security policies
• OAuth tokens stored in secure database with access controls

While we strive to protect your information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

8. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal or compliance purposes.

9. Your Rights

Depending on your location, you may have the following rights:

All Users

• Access your personal information
• Correct inaccurate information
• Delete your account and data
• Disconnect marketplace accounts at any time
• Export your data

California Residents (CCPA)

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of sale (we do not sell your data)
• Right to non-discrimination for exercising your rights

EU/UK Residents (GDPR)

• Right to access and data portability
• Right to rectification
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to object to processing

To exercise these rights, contact us at support@compr.co.

10. Third-Party Links

The Service may contain links to third-party websites (including marketplace platforms). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

11. Children's Privacy

The Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance.

13. Contact Us

If you have questions about this Privacy Policy or want to exercise your rights, contact us:

TaskLifter LLC
Email: support@compr.co