Privacy Policy

We collect the minimum information needed to operate the Service:

• Email address — for authentication and transactional email (sign-in links, alerts, receipts).
• Profile data — your full name and avatar URL if you provide them, plus the market you pick during onboarding.
• Usage data — which properties you view, favorite, watch, and which searches you save. This powers the “recently viewed” rail and your personalized lists.
• Payment metadata — Stripe customer ID, subscription status, and renewal date. We do not store credit card numbers, CVCs, or bank details. All payment processing is handled by Stripe.
• Anonymous session IDs — for unauthenticated viewing limits, we generate a random UUID stored in a cookie. We do not associate it with your IP address.

• Your home address, phone number, SSN, or government IDs
• Your bank account or credit card details
• Your IP address (we don’t log it)
• Browsing activity outside S8 Deals
• Data from your device’s camera, microphone, or location

• To provide the Service: load your favorites, run your alerts, send sign-in emails
• To bill paid subscriptions through Stripe
• To diagnose errors and improve performance
• To send transactional emails (receipts, alerts, account notices)
• To comply with legal obligations

We do not sell your data. We do not share it for advertising. We do not train AI models on your usage data.

We use a small number of cookies:

• Authentication cookies set by Supabase Auth — required to keep you signed in. HttpOnly, Secure, SameSite=Lax.
• Preference cookies — store your dismissed disclaimer banners and similar UI state (localStorage, not network cookies).
• Analytics cookies set by PostHog — measure aggregate product usage. No cross-site tracking.

We rely on the following processors. Each has its own privacy policy:

• Supabase — database, authentication, file storage
• Stripe — payment processing
• Resend — transactional email delivery
• Sentry — error monitoring
• PostHog — product analytics
• Mapbox — map tiles and geocoding
• Cloudflare R2 — public photo hosting
• Vercel — application hosting

We keep your account data while your account is active. If you close your account, we retain core records (email, billing history) for up to 7 years to comply with tax and legal obligations, then delete them. Logs and analytics events are retained for 90 days.

You have the right to:

• Access the data we hold about you
• Correct inaccurate data
• Delete your account and associated personal data
• Export your saved searches, favorites, and scenarios
• Object to specific processing

To exercise any of these, email privacy@s8deals.com. We’ll respond within 30 days.

The Service is not directed to children under 18. We do not knowingly collect personal data from anyone under 18. If you believe a child has signed up, contact us and we’ll delete the account.

Material changes are announced by email at least 14 days before they take effect. The “last updated” date at the top of this page always reflects the current version.

Privacy questions or requests: privacy@s8deals.com