Privacy Policy

Reffo.ai (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use the Reffo.ai webapp, the beacon software, and associated APIs (collectively, the “Service”).

1. Information We Collect

Account Data: When you create an account, we collect your email address and store a password hash through our authentication provider (Supabase). You may optionally provide a display name, username, and avatar.

Listing Data: When your beacon syncs with Reffo.ai, we receive and index your listing data (item titles, descriptions, images, prices, and categories) to make it discoverable through search.

Search Queries: We collect search queries to improve search relevance and service quality. Search queries are not linked to your account unless you are logged in.

Usage Data: We collect standard web analytics data including page views, browser type, device information, and IP address for service improvement and security purposes.

2. How We Use Your Information

• To provide and operate the Service, including search and discovery features.
• To improve search relevance and overall service quality.
• To communicate important updates about the Service or your account.
• To enforce our Terms of Service and Acceptable Use Policy.
• To detect and prevent fraud, abuse, or security threats.

3. Data Sharing

We do not sell your personal information. We may share data with the following third-party service providers that help us operate the Service:

• Supabase — Authentication and database services.
• Vercel — Web hosting and deployment.
• Vercel Analytics — Anonymous pageview analytics. Collects no cookies and no personal identifiers.

These providers process data on our behalf and are contractually obligated to protect your information. We may also disclose information if required by law or to protect the rights, safety, or property of Reffo.ai, its users, or the public.

4. Data Retention

Account data is retained for as long as your account is active. Beacon sync data (listings indexed for search) is periodically refreshed and updated as your beacon syncs. If you delete your account, your account data will be removed, and your listings will be de-indexed from search.

5. Your Rights

Depending on your jurisdiction (including under GDPR and CCPA), you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Object to or restrict certain processing of your data.
• Request data portability.

To exercise any of these rights, contact us at help@reffo.ai.

6. Security

We implement industry-standard security measures to protect your data, including encryption in transit (TLS), secure password hashing, and access controls. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

7. Children's Privacy

The Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn that we have collected such information, we will take steps to delete it promptly.

8. International Transfers

Your information may be transferred to and processed in countries other than your own. By using the Service, you consent to the transfer of your information to the United States and other jurisdictions where our service providers operate.

9. Cookies

We use cookies for authentication and essential service functionality. For full details, see our Cookie Policy.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. Continued use of the Service after changes constitutes acceptance of the revised policy.

11. Contact

If you have questions about this Privacy Policy, please contact us at help@reffo.ai.