Privacy Policy

Information Findvice processes

When you request an analysis, Findvice processes the product URL you submit and any optional target price or budget. Product identity, retailer offers, analysis evidence, and the resulting decision may be retained so the service can provide consistent results and maintain an auditable record.

Submitted URLs are sanitized before audit storage to remove embedded credentials and sensitive query parameters. Findvice does not ask you to place passwords, payment-card details, or account credentials in a product URL.

Customer and owner accounts use Google sign-in. In that context, Findvice receives the verified email and basic profile information needed to authenticate the customer and, for explicitly approved addresses, authorize owner access. Hosting and security systems may also process IP address, request metadata, device information, and diagnostic logs.

Saved-product emails, price alerts and sandbox billing

Saved-product email updates require a separate, versioned opt-in. You can withdraw consent in Account or use a valid unsubscribe link without signing in. Unsubscribe links contain an encrypted account and consent reference, expire after one year, and do not reveal your email address. A link issued before a later opt-in does not withdraw that later consent. Consent and withdrawal records are retained for auditability.

If you turn on saved-product emails and create a price alert, Findvice may email you when a saved product reaches the alert you set. Alerts are checked periodically against the most recent price Findvice has recorded, not continuously. For merchants that publish a product feed, that price comes from the merchant's feed rather than a live checkout check, and the email says so. Alert emails are sent through our email provider, Zoho ZeptoMail, and include an unsubscribe link. Findvice keeps a record of each alert check and email attempt (time, result and delivery status) to prevent duplicates, respect your choices and investigate problems. Pausing or removing an alert switches it off and hides it, and that history stays on record until you delete your account. We do not sell your email address or your alert settings.

Owner-only Stripe sandbox checkout sends a pseudonymous Findvice account identifier, selected product and customer reference to Stripe to connect test purchases to the signed-in account. Findvice does not link accounts by matching a Stripe email address. Stripe collects checkout information directly; Findvice does not receive or store card details. Sandbox checkout charges no real money and grants no paid benefits. Public paid checkout remains disabled.

If you submit a billing cancellation or refund request, Findvice stores the account-linked billing record reference, selected reason, any requested refund amount and currency, request status, dates and review history. This information lets you and the owner track and review the request. Submission does not execute a cancellation or refund, and review does not guarantee an outcome. Do not submit card details or credentials; request forms use predefined reasons rather than free text.

Billing requests and their review history are included in account data exports and removed when an eligible customer deletes their Findvice account. Withdrawing a request changes its status; it does not remove its history. Stored billing records are separate from request history.

Draft API quota planning

The owner may record draft monthly and per-minute API request quantities for an existing customer account, together with a version, planning status and change date. These account-linked records support internal service planning. They do not measure usage, enable API access, grant contracted benefits or activate billing. No request history or financial credits are inferred from these quantities.

Stored draft planning records are included in your account data export and removed when an eligible customer deletes their account. Clearing a draft removes its planned quantities while retaining the version and change date until account deletion. Owner access and changes are audited.

Draft API credentials

API credential management is prepared behind a disabled rollout switch. If enabled, an explicit issue action creates an account-linked credential with a label, status, version and creation or revocation dates. The token is displayed once directly to you; only its cryptographic hash is stored. Revocation retains a terminal metadata record until account deletion. These draft credentials do not enable public API access, measure usage, grant paid benefits or activate billing.

Account exports include credential labels, identifiers, status, versions and dates, but exclude tokens and token hashes. Eligible account deletion removes credential records. Administrative audits record the action and outcome without the token, hash or label. If an issue response is lost, the token cannot be recovered; review and revoke the recorded credential before creating a replacement. Do not put credentials in chat or URLs.

Primary Google identity proof

An optional primary Google identity binding is prepared behind a disabled rollout switch. If enabled, you must explicitly review and confirm a fresh verified Google identity for your existing Findvice account. A cryptographic subject hash, provider and exact creation date are stored; raw Google subject identifiers and identity tokens are not stored in the binding record. The binding is immutable and does not link a second account, change sign-in resolution or automatically merge matching emails.

Account exports include only the provider and creation date, with the disabled linking and unchanged sign-in scope identified. Subject hashes and identity tokens are excluded. Eligible account deletion removes the binding. Administrative audit records exclude subject identifiers and hashes. A material policy update requires renewed acknowledgement; this disclosure is awaiting qualified privacy review.

How information is used

Account service suspension is prepared behind a disabled management switch. Its current account state, version and change date support administrative access controls and are included in account exports. Suspension restricts new operating actions while preserving owned read-only views, sign-in and MFA, privacy choices, removal, withdrawal and lawful billing access. It revokes issued draft credentials and delegated incident access and stops eligible queued email work. Resuming does not restore revoked credentials, withdrawn grants or stopped deliveries. A request already sent to an external service cannot be recalled by this control. This is a control on the current Findvice account, not a ban on a person or their public browsing. Changes require administrative review and audit; the processing remains subject to qualified privacy review.

• Identify the exact product and retrieve authorized retailer evidence.
• Generate and explain BUY, WAIT, or AVOID decisions.
• Operate, secure, troubleshoot, and improve the service.
• Prevent abuse and enforce rate limits.
• Maintain auditability and comply with applicable obligations.

Affiliate compensation, when available, does not enter the recommendation score and does not determine which decision Findvice returns.

Service providers and external sources

Findvice uses infrastructure and service providers, including hosting, database, authentication, and authorized commerce-data providers. They may process information only as needed to provide their services and subject to their own applicable terms and privacy practices.

A retailer link takes you to an external site. Purchases, retailer accounts, and information submitted there are governed by that retailer, not by Findvice.

Cookies and local storage

Necessary cookies support secure customer and owner authentication, including short-lived two-factor verification. The public appearance control stores a light-or-dark preference in your browser. Findvice does not currently use that preference for advertising or cross-site tracking.

Retention, security, and your choices

Self-service account export includes bounded safe records for analyses explicitly associated with your account, their evidence and outcomes, legacy alerts, recorded outbound activity and delegated-access metadata. Validated submitted target, budget, region and waiting settings are included; raw retailer payloads, analysis snapshots, URLs and credentials are excluded. Invalid or oversized historical input settings are marked unavailable instead of guessed or silently dropping their recorded analysis.

Eligible deletion removes exact owned analyses and their private dependents. Shared product facts, other accounts' records and retained financial records are separate. Conflicting ownership prevents the operation from completing. A minimal pseudonymous privacy receipt is retained. Physical backup retention and qualified privacy review remain separate from this self-service workflow.

Findvice retains information only as long as reasonably needed for the purposes above, security, auditability, and legal obligations. No internet service can promise absolute security, but Findvice uses access controls, secret isolation, input limits, and database safeguards appropriate to the beta service.

To ask about access, correction, deletion, or another privacy request, email [email protected]. Findvice may need to verify the request before acting.

Children and changes

Findvice is not directed to children under 13. We may update this policy as the service adds customer accounts, alerts, payments, or new providers. A new version and date will be posted here before materially expanded processing begins.