Privacy policy

Information we collect

We may process account and business details, employee names and identifiers, inventory and listing records, product photos, shelf locations, order and shipping details, device and diagnostic information, and subscription status. Stripe processes payment-card details; Scanmerce does not store complete card numbers.

How information is used

Information is used to authenticate users, synchronize authorized warehouse records, prevent duplicate SKUs, support picking and shipment verification, maintain listing backups, provide reports, process subscriptions, prevent abuse, and deliver customer support.

Account activity and service usage

For signed-in businesses, Scanmerce records approximate active time and last recorded use of the website and supported app versions, plus product-photo storage sizes. These first-party operational reports help the Scanmerce platform owner support customers and understand trial engagement. They are not sent to advertising providers. We do not record screen contents, message text, keystrokes, or individual actions in these usage reports. Active time excludes background syncing and pauses after 60 seconds without interaction. Overlapping sessions are deduplicated. Detailed timing samples are normally removed after one day; daily totals are kept for up to 400 days. Website activity measurement honors browser Do Not Track and Global Privacy Control settings. Missing measurements do not establish that an account was unused.

Connected marketplaces

When a manager connects a marketplace such as eBay, the app accesses only the seller data authorized through that marketplace's consent process. Marketplace data is used to provide the requested business functions and is not sold.

Service providers and sharing

We use Supabase for authentication and synchronized data, Stripe for billing, and connected marketplaces for authorized seller operations. Listing Accuracy Check sends listing text and selected product photos to Google Gemini, and may query product catalogs by UPC, to identify potential contradictions. Do not include personal or confidential information in product photos or descriptions. AI results can be incomplete or incorrect and require human review; they do not automatically edit your eBay listings.

Listing Accuracy Check currently uses Google's unpaid API tier. Under those terms, Google may use submitted content and responses to improve its products, and human reviewers may process that content. Do not submit sensitive, confidential, or personal information. A paid Scanmerce subscription does not itself change Google's processing terms. See Google's Gemini API terms. Contact us before using the checker in the EEA, Switzerland, or the United Kingdom, where Google requires a paid-service configuration for API clients. Information may also be disclosed when legally required or to protect customers and the service.

Retention and security

Affiliate referrals and tax documents

Website analytics use a random browser identifier for up to 90 days to estimate visits and signup conversion. We record the public page path and acquisition source, not the full page query, full referrer address, or raw IP address. Signed-in members and known converted browsers are excluded from prospect traffic. Analytics honor the browser’s Global Privacy Control or Do Not Track signal. Clearing browser storage resets pre-signup attribution.

Support messages and attachments are private to the sender and the Scanmerce platform owner. Member-wide announcements are delivered as separate conversations; customers cannot see each other’s replies or attachments. Do not upload sensitive credentials or payment details.

Affiliate links use a random browser identifier and first-referral record for up to 90 days. We count visits and signups and link a new account to its referring affiliate to calculate commissions on first subscription payments. Affiliates see aggregate referral results, not referred customers’ personal details. Clearing browser storage removes pre-signup attribution; once you sign up, attribution is kept with the account. Daily abuse-control hashes are short-lived and do not store raw IP addresses.

Affiliate legal details, tax documents, and payout records are accessible only to the affiliate and authorized Scanmerce program owner. Documents are stored privately and shared through short-lived download links. Tax and payment records may be retained for accounting and legal obligations after program participation ends. Do not email tax documents or put tax identifiers in ordinary profile fields.

Records are retained while the business account is active and as needed for legitimate operational, accounting, dispute, security, or legal obligations. If a free trial ends without a paid plan, workspace access pauses but the business records and marketplace connection are not automatically deleted; a reactivation window of at least 30 days is provided. We use access controls, encrypted connections, row-level database rules, and protected device sessions, but no system can guarantee absolute security.

Cookies and your choices

We use Google Analytics, HeyCatch analytics and Meta ad measurement to understand which pages and ads bring people to Scanmerce. How they start depends on where you visit from, based on the country Cloudflare reports for your connection (we keep only whether your region is measured by default, not the country or your IP address):

• United States and most other countries: these three services are on by default and no cookie banner is shown. You can opt out at any time with the Privacy choices button at the bottom of the screen, which lets you switch off each service separately or choose No thanks to switch off all three. We save that choice on your device and respect it on later visits; a choice to switch a service off lasts a year.
• European Union and EEA, United Kingdom and Switzerland (and visits whose country is unknown): all three stay off until you accept them in the cookie notice or in Privacy choices.

We honor Global Privacy Control. If your browser sends it, Google Analytics, HeyCatch and Meta ad measurement stay off wherever you are, and Scanmerce does not send them any events. Opting out or declining never affects signup, your free trial, or use of the service.

Optional HeyCatch analytics

When HeyCatch analytics is on (by default in opt-out regions, or with your permission), HeyCatch measures public page visits and signup steps to help us evaluate our marketing. Events use anonymous browser identifiers, device information and network information. We exclude form contents, names, emails, credentials, account identifiers, inventory, orders and private workspace pages. The preference lasts up to 90 days. You can switch it off for future events in Privacy choices. Global Privacy Control keeps this measurement off.

Optional Google Analytics

When Google Analytics is on (by default in opt-out regions, or after you enable it in Privacy choices), Google receives public page visits and signup steps such as trial-button clicks, form starts, submission, email confirmation and newly activated trials. It uses browser cookies, device information and network information to measure this funnel. Google also receives the public page address and title, the referring website (its domain only), plain campaign labels from ad links (such as utm_source=google) and Google Ads click identifiers. If a business that signed up with Google Analytics enabled later pays its first Scanmerce invoice, Google also receives that payment as a purchase with its amount, currency and invoice reference, linked to the Google Analytics browser identifier saved at signup. Our integration does not send form values, names, emails, credentials, account identifiers, inventory, orders, other query values or private workspace pages. Automatic form tracking and advertising personalization are disabled. No Google analytics script is loaded where it is not allowed. The consent choice and analytics cookies last up to 90 days. You can switch it off for future events in Privacy choices; we then disable tracking and clear this site's Google Analytics cookies. Global Privacy Control keeps this integration off. Google describes its data handling in its privacy policy. A previous Meta choice does not authorize Google Analytics.

Optional advertising measurement

When Meta ad measurement is on (by default in opt-out regions, or after you enable it in Privacy choices), we report your visits to our public marketing pages (home, product pages, guides and help) through both a browser Meta Pixel and Meta's Conversions API, using the same random event identifier to prevent double counting. A submitted trial signup form is reported by the browser Pixel as a Lead without any form contents, and newly activated website free trials are reported through the Conversions API only. The events include the time, the public Scanmerce home address, your IP address and browser information, and available Meta ad-click and random browser identifiers. A trial start also includes one-way hashed (SHA-256) forms of the account email address and Scanmerce user ID, which Meta uses only to match the trial to an ad. If a business that signed up with this choice enabled later pays its first Scanmerce invoice, the Conversions API also reports that payment as a Purchase with its amount and currency, the ad-click and random browser identifiers and browser information saved at signup (not your IP address), and one-way hashed forms of the account owner's email address and Scanmerce user ID. The browser Pixel is a small image request, not a script that reads forms or tracks buttons. Meta may receive its existing cookies according to your browser settings. We do not share full query strings or private page addresses. Meta uses these signals to measure and improve our Facebook ads. We do not send your name, readable email address, account credentials, employee information, inventory, listings, orders, or card or bank details through this integration. No Meta advertising script runs inside your workspace. A previous choice that covered trial starts only does not enable page-visit measurement until you approve the updated choice.

The advertising choice and optional browser attribution identifiers are stored on your device for up to 90 days. Use Privacy choices to decline or opt out of future events; this removes those optional identifiers from our browser record. When a free trial starts with Meta ad measurement or Google Analytics enabled, we also keep the identifiers you allowed (and, for Meta, your browser information) with the new business account so its first payment can be reported; contact us to have them removed. A browser Global Privacy Control signal keeps this measurement off. Declining or opting out does not affect signup, your trial, or use of the service. Meta's handling of information it has already received is described in its privacy policy. Separate Scanmerce website and affiliate analytics are described above.

Business managers can correct many records in the app, disconnect marketplace access, manage or cancel billing on this website, or request account deletion. Contact support@scanmerce.com for access, correction, deletion, or privacy questions.

Children

The service is intended for businesses and is not directed to children under 13.