Your privacy is paramount. We do not sell your personal information or search history to data brokers. We collect only what is strictly necessary to evaluate products, manage subscriptions, and deliver deterministic commercial intelligence.
01. Overview & Core Commitment
Product Score ("Product Score", "we", "our") is dedicated to protecting your fundamental right to digital privacy. This policy outlines our standards regarding the collection, transmission, processing, and protection of information across all our domains, user interfaces, REST endpoints, and authentication sessions.
02. Information We Collect
We collect information in three categories:
A. Account & Profile Information
When you sign up or authenticate, we collect your email address, full name, encrypted password hash (via PBKDF2/bcrypt; plaintext passwords are never stored or accessible), account subscription tier, and optional Google profile avatar if authenticated via Google OAuth.
B. Research & Query Data
When you launch research scans, we record your search keyword or product URL, selected target market (e.g. US, UK, DE, FR), research mode (General, Dropship, High Margin), custom formula weights, and saved products bookmarks.
C. Technical & Diagnostic Telemetry
IP address, browser user-agent, operating system details, session cookies, and API query rate telemetry used exclusively for bot protection, fraud prevention, and server load balancing.
03. How We Use Your Data
We process your data for the following legitimate business purposes:
- Executing Research Workflows: Dispatching scraping tasks, executing mathematical scoring formulas, and compiling your dashboard ranking grids.
- Account Administration: Managing plan subscriptions, tracking search credit balances, and delivering billing receipts.
- System Reliability & Security: Detecting API abuse, brute-force attempts, and unauthorized account sharing.
- Product Improvements: Analyzing aggregate query popularity trends to optimize caching and improve scoring accuracy.
04. Third-Party Sub-Processors & Data Sharing
We do not sell, rent, or trade your personal information. To power our specialized AI research infrastructure, we partner with reputable third-party sub-processors:
| Partner / Service | Function | Data Transferred |
|---|---|---|
| Apify Technologies | Marketplace scraping actor execution | Search keyword & target market (no user PII) |
| Jev AI | LLM qualitative signal extraction | Public product titles & descriptions (no user PII) |
| Google OAuth | Federated single sign-on | Email address & profile avatar token |
06. Data Security & Retention
We deploy multi-layered security controls to protect your data, including TLS 1.3 encryption in transit, strict database credential isolation, hashed passwords, and cryptographic API key storage.
We retain your research records, Opportunity Scores, and saved products for as long as your account is active. If your account remains dormant for more than 24 months, we may securely archive or purge historic scraping caches.
07. GDPR & CCPA Compliance Rights
Under the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), you are entitled to exercise the following rights:
08. Account Deletion & Data Export
You can export your evaluated products directly from any completed research job using the one-click CSV export button.
To request permanent deletion of your account and all associated data, submit a written request to [email protected]. Deletion requests are executed within 14 business days.
09. Policy Modifications & Contact
We may revise this Privacy Policy periodically to reflect changes in our infrastructure or legal requirements. Material updates will be communicated via email or an in-app banner alert.
For privacy inquiries or to reach our Data Protection Officer (DPO):