Privacy Policy

1. Overview

Steals+ ("we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services (the "Service"). By using the Service, you consent to the practices described in this policy.

2. Information We Collect

Information you provide

• Account information: email address, name, and password when you create an account
• Payment information: billing details processed securely through our third-party payment processor (we do not store your full credit card number)
• Communications: messages you send to us via email or support channels

Information collected automatically

• Usage data: pages viewed, deals clicked, features used, time spent on the Service
• Device information: browser type, operating system, device type, screen resolution
• Log data: IP address, access times, referring URLs
• Cookies and similar technologies: as described in Section 6

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process membership payments and manage your account
• Track referrals and calculate referral earnings
• Send you deal notifications, account updates, and service announcements
• Personalize your deal feed based on your browsing and click patterns
• Analyze usage trends to improve our deal scoring and curation
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations

4. How We Share Your Information

We do not sell your personal information. We may share information with:

• Payment processors: to process your subscription payments (e.g., Stripe)
• Analytics providers: to understand usage patterns (e.g., Vercel Analytics, Plausible)
• Email service providers: to send transactional emails and deal notifications
• Law enforcement: when required by law, court order, or to protect the rights and safety of Steals+ and its users

When you click a deal link and visit a third-party retailer, that retailer's privacy policy governs your interaction with their site. We may include affiliate tracking parameters in outbound links. These parameters identify Steals+ as the referral source to the retailer but do not share your personal information.

5. Data Retention

We retain your account information for as long as your account is active. After account deletion, we retain anonymized usage data for analytics purposes and certain records as required by law (e.g., payment records for tax compliance). We aim to delete or anonymize personal data within 90 days of account deletion.

6. Cookies and Tracking

We use the following types of cookies and tracking technologies:

• Essential cookies: required for the Service to function (authentication, session management)
• Analytics cookies: help us understand how users interact with the Service
• Preference cookies: remember your settings (category filters, sort preferences)

We do not use third-party advertising cookies or retargeting pixels. You can disable cookies in your browser settings, but some features of the Service may not function properly.

7. Data Security

We implement reasonable technical and organizational safeguards to protect your information, including encryption in transit (TLS/HTTPS), secure password hashing, and access controls. However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access: request a copy of the personal data we hold about you
• Correction: request correction of inaccurate data
• Deletion: request deletion of your personal data
• Portability: request your data in a machine-readable format
• Opt-out: unsubscribe from marketing communications at any time

To exercise any of these rights, contact us at privacy@stealsplus.com. We will respond within 30 days.

9. California Residents (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you additional rights, including the right to know what personal information we collect and how it is used, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell personal information. To exercise your CCPA rights, contact us at privacy@stealsplus.com.

10. European Residents (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, the General Data Protection Regulation (GDPR) applies to our processing of your data. Our legal bases for processing are: contractual necessity (to provide the Service), legitimate interest (to improve the Service and prevent fraud), and consent (for optional marketing communications). You have the right to lodge a complaint with your local data protection authority.

11. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will promptly delete it. If you believe a child under 13 has provided us with personal information, please contact us.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on the Service. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

13. Contact

For privacy-related inquiries, contact us at privacy@stealsplus.com.