Privacy Policy

1. Information We Collect

1.1 Information You Provide

• Account Information: When you create an account, we collect your full name, email address, and password (stored in encrypted form).
• Billing Information: When you subscribe to a paid plan, payment information (credit card details) is collected and processed directly by Stripe. We do not store your payment card details on our servers. We receive from Stripe: the last four digits of your card, card type, billing address, and transaction history.
• Communications: If you contact us via email or chat, we collect the content of your messages and any information you choose to provide.

1.2 Information Collected Automatically

• Usage Data: We collect information about how you use the Service, including search queries, categories selected, products viewed, favorites saved, and features used.
• Device and Browser Data: We collect your IP address, browser type, operating system, device type, and language preferences.
• Analytics Data: We use analytics tools to understand how visitors interact with our website, including pages visited, time on page, and referral sources.
• Cookies: We use essential cookies required for the Service to function (authentication, session management). We do not use advertising or tracking cookies.

2. How We Use Your Information

We use your personal information for the following purposes:

• Provide the Service: To operate, maintain, and deliver the features of the Service, including processing your product research queries and delivering results.
• Process Payments: To manage your subscription, process transactions, and send billing-related communications.
• Communicate with You: To send transactional emails (account verification, password reset, billing receipts), respond to support requests, and send service-related announcements.
• Improve the Service: To analyze usage patterns, identify bugs, and improve the functionality and user experience of the Service.
• Enforce Our Terms: To detect and prevent fraud, abuse, or violations of our Terms of Service.
• Legal Compliance: To comply with applicable laws, regulations, and legal processes.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

3. How We Share Your Information

We may share your information only in the following circumstances:

• Service Providers: We share information with third-party service providers who help us operate the Service, including:
  • Stripe — Payment processing
  • Supabase — Database hosting and authentication
  • Vercel — Website hosting
  • Anthropic — AI processing (your search queries are sent to generate product recommendations; no personally identifiable information is included in AI queries)
  • Google Workspace — Email communications
  • Crisp — Customer support chat
  • Analytics providers — Aggregated, anonymized usage data
• Legal Requirements: We may disclose your information if required by law, regulation, legal process, or government request.
• Business Transfers: If Ficanaz LLC is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.
• With Your Consent: We may share your information for other purposes with your explicit consent.

4. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. After account deletion:

• Account and profile data is deleted within 30 days.
• Usage data and search history is deleted within 90 days.
• Billing records are retained for up to 7 years as required by tax and accounting regulations.
• Backup copies may persist for up to 90 days before being automatically purged.

You may request deletion of your account and personal data at any time by contacting us at privacy@ficanaz.com.

5. Data Security

We implement industry-standard security measures to protect your personal information, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure password hashing
• Access controls limiting employee access to personal data
• Regular security reviews of our infrastructure

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

6. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data, subject to legal retention requirements.
• Data Portability: Request your data in a structured, machine-readable format.
• Objection: Object to processing of your data for specific purposes.
• Withdrawal of Consent: Withdraw your consent at any time where processing is based on consent.

To exercise any of these rights, contact us at privacy@ficanaz.com. We will respond within 30 days.

7. International Data Transfers

Your information may be transferred to and processed in the United States, where our servers and service providers are located. By using the Service, you consent to the transfer of your information to the United States. We ensure that appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

8. Children's Privacy

The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 18, we will take steps to delete that information promptly.

9. GDPR Compliance (European Users)

If you are located in the European Economic Area (EEA), the following applies:

• Legal Basis: We process your data based on contractual necessity (to provide the Service), legitimate interest (to improve the Service), and consent (for optional communications).
• Data Protection Officer: For GDPR-related inquiries, contact privacy@ficanaz.com.
• Supervisory Authority: You have the right to lodge a complaint with your local data protection authority.

10. California Privacy Rights (CCPA)

If you are a California resident, you have the right to:

• Know what personal information we collect and how it is used.
• Request deletion of your personal information.
• Opt out of the sale of personal information (we do not sell personal information).
• Non-discrimination for exercising your privacy rights.

11. Third-Party Links

The Service contains links to third-party websites, including supplier platforms like Alibaba. This Privacy Policy does not apply to third-party websites. We encourage you to review the privacy policies of any third-party sites you visit.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notification at least 30 days before taking effect. The "Last updated" date at the top reflects the most recent revision.

13. Contact Us

For any questions or concerns about this Privacy Policy or your personal data, contact us at:

Ficanaz LLC
Email: privacy@ficanaz.com
Website: https://ficanaz.com