Privacy Policy

ShopSure collects only the information needed to provide our scam-prevention service. This section explains what we collect and why.

We do not sell your personal data to third parties.

When you create a ShopSure account, we collect your email address and a password (stored as a secure hash). Your account allows us to link your scans to your profile and manage your subscription.

You may optionally add a display name to your profile.

When you check a website, ShopSure stores the URL you submit, the scam-risk assessment result, and the date of the check. This is saved to your check history so you can revisit past reports.

The website URL and assessment are linked to your account.

When you scan a physical product, ShopSure stores the scam-risk assessment result and the date of the scan in your scan history.

Uploaded product photos are processed for analysis. The assessment result (without the original image URLs) is saved to your scan history.

When you scan a product, you upload photos of that product. These images are uploaded to storage so our analysis engine can process them.

Images are used for the purpose of your product scan. We do not use your uploaded images for any other purpose, such as training models or marketing.

ShopSure saves your past website checks and product scans so you can revisit the full report at any time.

Your check history is linked to your account and is only visible to you. You can delete individual check records from your history at any time.

When you subscribe to a paid plan, payment is processed by Stripe, our payment provider. ShopSure stores your subscription plan and status, but does not store or process your full card details.

Stripe handles card numbers, authentication, and payment security. ShopSure receives a reference to your Stripe customer and subscription, not your card information.

We use your information to:

• Provide scam-risk assessments for websites and products you check.

• Save your scan history so you can revisit past reports.

• Manage your account and subscription.

• Communicate with you about your account when necessary.

We do not use your data to build profiles for advertising or sell it to third parties.

Your account, scan history, and subscription data are stored in ShopSure’s database. Uploaded product images are stored in cloud storage for processing.

Access to your data is restricted to authorised systems and is tied to your authenticated account.

We take reasonable measures to protect your data, including secure authentication, encrypted connections (HTTPS), and restricted access controls.

No method of transmission or storage is completely secure, but we work to protect your information using industry-standard practices.

ShopSure uses the following third-party services to operate:

• Stripe — payment processing for subscriptions.

• Google services — used for web-search-based scam-risk analysis when you check a website or scan a product.

These services process data according to their own privacy policies. We share only the minimum information needed to provide the service.

ShopSure uses cookies and similar technologies for authentication (keeping you logged in) and essential site functionality.

For details on the specific cookies we use, see our Cookie Policy.

We do not use advertising cookies.

We retain your account and scan history for as long as your account is active. If you delete your account, your account data and scan history are deleted.

Uploaded product images may be retained for a limited period for processing, after which they are removed.

We may retain limited data where required by law or for legitimate business records (such as payment records handled by Stripe).

If you are in the European Union or European Economic Area, you have certain rights regarding your personal data under the General Data Protection Regulation (GDPR). These may include:

• Right of access — you can request a copy of the personal data we hold about you.

• Right to rectification — you can ask us to correct inaccurate or incomplete data.

• Right to erasure — you can ask us to delete your personal data in certain circumstances.

• Right to restriction — you can ask us to restrict the processing of your data in certain situations.

• Right to data portability — you can receive a copy of your data in a structured, machine-readable format and transfer it to another service.

• Right to object — you can object to certain types of processing of your data.

The exact rights available to you can depend on your circumstances and the legal basis for processing. To exercise any of these rights, contact us using the details on our Contact page.

You also have the right to lodge a complaint with your local data protection authority if you believe we have not handled your data appropriately.

To request access to your data, correct inaccurate information, or delete your account and associated data, contact us through the Contact page or by using the account deletion option in your Profile.

We will respond to your request within a reasonable timeframe, typically within 30 days.

If you have any questions about this Privacy Policy or how we handle your data, please contact us through our Contact page.

Company and legal contact details are available on our Legal Information page.

We may update this Privacy Policy from time to time. When we do, we will update the date at the top of this page.

If we make significant changes, we will notify you through the app or by email where appropriate.