Privacy Policy

1. Who operates SendCart

SendCart operates the SendCart mobile application, browser extension, website, and related services. Privacy and support questions can be sent to [email protected].

2. Information we process

We process only information needed to provide, secure, improve, and support SendCart.

• Account and identity data: email address, display name, sign-in provider, and provider identifiers when you link Apple, Google, or email sign-in.
• Session and device data: internal user and device identifiers, session token, platform, device model, last activity time, and push-notification token.
• Shopping content: cart names and descriptions, product links and domains, titles, images or screenshots, OCR text, prices, currencies, target prices, notes, availability, status, and price history.
• Problem reports: the reason you choose and any comment you write when you report a problem with a product or an import, together with that product or import and your account.
• Collaboration data: shared-cart membership, roles, invite codes, and actions taken in a shared cart.
• Subscription data: plan, entitlement and product identifiers, subscription state, expiry, and RevenueCat customer identifier. SendCart does not receive full payment-card details.
• Technical, diagnostic, and app analytics data: import and price-check results, parser errors, usage counters, request timing and status, security events, basic server logs, Firebase Analytics app-use events, screen names, feature interactions, plan category, purchase flow status, and technical identifiers.

3. Images, OCR, and product analysis

When you choose or share a product screenshot or photo, the app compresses it before upload. Basic OCR is performed on the device. The image, extracted text, and confirmed product details may then be stored with your cart.

When regular page parsing cannot identify a product, SendCart may send the public product URL and visible page text to OpenAI for extraction.

4. Browser extension

The SendCart extension reads the current page when you open it. It has no standing access to store pages and does not monitor other tabs or browsing history, or read cookies, saved passwords or form input values.

Product extraction runs locally. The extension does not upload raw page HTML or structured data to SendCart. Its background component handles sign-in, cart requests, saving and server imports.

• Save sends the page and canonical URLs, store, title, price, currency, image URL and detected availability, together with your edits, target price, chosen cart and extraction sources. Some details, such as availability, are not displayed as separate fields.
• Choosing “Let SendCart read it” separately sends the page URL. Our servers fetch that public page; section 3 and the providers in section 7 apply to this processing.
• Showing a product preview can load its image from the store or image host before Save. That host receives a network request, including your connection’s IP address. The image request omits the page URL as a referrer.
• Sign-in sends your email and code to SendCart. If you choose Google, the browser opens Google’s sign-in flow. An API check of Google availability can occur before sign-in without creating an account or session.
• The extension stores the SendCart session token, pending email/code step and last used cart on this device. Signing out clears them.
• Saving requires a verified SendCart account. A temporary device session may be created during sign-in; it does not allow guest saving.

5. How we use information

• Create guest sessions and linked accounts, synchronize carts, and authenticate requests.
• Save products, fetch public store information, track prices, and send price alerts and a one-time reminder to set a target price.
• Enable personal and shared carts, invitations, roles, and notes.
• Manage Free, Plus, and Family limits and synchronize subscription status.
• Prevent abuse, diagnose failures, protect the service, and improve product parsing.
• Analyze app operation and feature usage, diagnose issues, and improve SendCart without using analytics for advertising personalization.
• Respond to support, privacy, and account-deletion requests.

6. Shared carts and public product assets

People who belong to a shared cart can see its products, notes, prices, images, member display names, and roles. Anyone with a valid invitation may be able to join until the invitation is revoked or changed.

Uploaded product images are stored under opaque addresses and may be delivered through a publicly reachable asset URL. Do not upload screenshots containing payment data, passwords, private messages, addresses, or other information unrelated to the product.

7. Service providers

We use providers only to operate specific parts of SendCart. Their handling of information is also governed by their own terms and privacy commitments.

• Cloudflare Pages and Cloudflare R2 for website delivery and product-image storage.
• Sign in with Apple and Apple token services; Google Sign-In and Google token verification for authentication; Firebase Cloud Messaging for push notifications; Firebase Analytics for app usage analytics and technical identifiers, with events associated with an internal SendCart account identifier rather than your email address or name; Google ML Kit for on-device OCR.
• OpenAI for optional image analysis and fallback extraction from public product pages.
• RevenueCat and Apple App Store or Google Play for subscription and purchase-status processing.
• Public retailers and their hosting providers when SendCart fetches product pages, checks prices, or displays externally hosted images.

8. Storage, retention, and deletion

We retain account and cart data while needed to provide SendCart. Operational logs, diagnostics, fraud-prevention records, backups, and records required by law may be retained for a limited period after account deletion.

A linked account can be deleted in the app. You can also request deletion at [email protected]; we aim to complete a verified request within 30 days. Deletion removes the SendCart account and associated carts, products, memberships, sessions, price history, subscription links, and stored product images from active systems, subject to lawful retention and technical backup cycles.

Deleting SendCart does not automatically cancel a store subscription or erase records held independently by Apple, Google, RevenueCat, OpenAI, Firebase, retailers, or another provider.

9. Security and international processing

We use access controls, encrypted network connections, limited credentials, and other reasonable safeguards. No system can guarantee absolute security.

Our providers may process information in countries other than yours. Where required, appropriate legal safeguards should apply to those transfers.

10. Your choices and rights

Depending on applicable law, you may ask to access, correct, delete, or restrict processing of your personal data, or object to certain processing. You may disable notifications in your device settings and disable tracking for individual products in SendCart.

To make a privacy request, email [email protected]. We may need to verify that the request concerns your account. Never send us your password, sign-in token, full payment-card number, or device token by email.

11. Children, changes, and contact

SendCart is not directed to children who cannot consent to online services under the law where they live. If you believe a child provided personal data without required permission, contact us.

We may update this policy as SendCart changes. The effective date at the top will be updated, and material changes may also be communicated in the app.

Questions or requests: [email protected].