Privacy Policy

We collect what we need to compare prices, track the products you ask us to, and send the alerts you set up — nothing more. We don't sell your data. We don't use uploaded search photos to train anyone's models. You can download everything we have on you or delete your account at any time from your account page.

• Account info. Name, email address, hashed password, and country (used to show you the right retailers and prices).
• What you track. Products you save to My Vault, target prices, and alert history.
• Search activity. Text searches, and the timestamp and result count of photo searches.
• Billing status. Your current plan (Free/Plus/Pro). Payment card details are handled entirely by our payment processor — we never see or store them.
• Shared tracking. If you use Pro's shared tracking, the email address of the person you invite, and which of you added each tracked item.

When you search by photo, the image is analyzed to find visually similar products and is not stored— only a numerical representation used to power your search history is kept. We do not use your photos, or that numerical representation, to train third-party AI models. If that ever changes, we'll ask first, not tell you after.

We use one cookie: a signed, essential session cookie that keeps you signed in. We don't run advertising or cross-site tracking cookies.

Only the vendors that make the product work, and only what each one needs: our payment processor (to handle billing), our email provider (to send alerts and account emails), and — for photo search — an image-analysis provider. We disclose affiliate relationships with retailers plainly wherever prices are shown; that's a commercial relationship, not a data-sharing one. We do not sell your personal data.

We keep your account data for as long as your account is active. Deleting your account removes your profile, tracked products, alerts, and shared-tracking invites immediately. Search history is anonymized rather than deleted outright, so we can keep aggregate product-demand signals without tying them back to you.

You can, at any time, from your account page:

• Access & export. Download a copy of everything tied to your account as a file.
• Delete. Permanently delete your account and the data listed above.
• Correct. Contact us and we'll fix anything that's wrong.

This applies regardless of where you live — including rights under the EU/UK GDPR, California's CCPA/CPRA, and equivalent laws elsewhere.

Trove isn't directed at children, and we don't knowingly collect data from anyone under 16.

We currently operate primarily from the United States; if you're located elsewhere, your data will be processed in the US. We're building out region-specific infrastructure over time (see our plans for current country coverage) and will update this section as that expands.

If this policy changes materially, we'll update the date above and, for significant changes, email you directly.

Questions, corrections, or anything else: privacy@trove.example