Privacy Policy

1. Information We Collect

1.1 Information You Provide

• Account Information: When you create an account, we collect your full name, email address, and password (stored in encrypted form).
• Billing Information: When you subscribe to a paid plan, payment information (credit card details) is collected and processed directly by Stripe. We do not store your payment card details on our servers. We receive from Stripe: the last four digits of your card, card type, billing address, and transaction history.
• Communications: If you contact us via email or chat, we collect the content of your messages and any information you choose to provide.

1.2 Information Collected Automatically

• Usage Data: We collect information about how you use the Service, including search queries, categories selected, products viewed, favorites saved, and features used.
• Device and Browser Data: We collect your IP address, browser type, operating system, device type, and language preferences.
• Product Analytics: We use Vercel Analytics and Speed Insights to understand aggregate, anonymized usage of the Service (pages visited, time on page, performance metrics, referral sources). These tools do not use persistent cookies and are considered strictly necessary for operating the Service.

1.3 Cookies and Similar Technologies

We use two categories of cookies and similar tracking technologies:

• Strictly necessary cookies: required for authentication, session management, security, and core Service functionality. These cookies cannot be disabled and do not require consent because the Service cannot operate without them.
• Marketing and conversion measurement cookies (optional): with your consent, we load tracking pixels from the following third-party providers to measure the effectiveness of our advertising campaigns and to understand how visitors arrive at the Service:
  • Meta Pixel (Facebook / Instagram) — page views and signup conversions.
  • TikTok Pixel — page views and signup conversions.
  • Google Ads Conversion — page views and signup conversions.
  These pixels set their own cookies on your device and may transmit your IP address, browser data, page URL, and event data to the respective providers.

When you first visit the Service, you are presented with a cookie consent banner that lets you choose between "Accept all" or "Essential only". Marketing pixels are loaded only after you select "Accept all". If you select "Essential only" (or do not interact with the banner), no marketing pixels are loaded and no related cookies are set on your device.

You can change your preference at any time using the "Manage cookie preferences" button at the bottom of this page. Changes apply on your next page load.

You may also disable cookies through your browser settings, but please note that disabling strictly necessary cookies will prevent the Service from functioning.

2. How We Use Your Information

We use your personal information for the following purposes:

• Provide the Service: To operate, maintain, and deliver the features of the Service, including processing your product research queries and delivering results.
• Process Payments: To manage your subscription, process transactions, and send billing-related communications.
• Communicate with You: To send transactional emails (account verification, password reset, billing receipts), respond to support requests, and send service-related announcements.
• Improve the Service: To analyze usage patterns, identify bugs, and improve the functionality and user experience of the Service.
• Enforce Our Terms: To detect and prevent fraud, abuse, or violations of our Terms of Service.
• Legal Compliance: To comply with applicable laws, regulations, and legal processes.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

3. How We Share Your Information

We may share your information only in the following circumstances:

• Service Providers (sub-processors): We share information with the following third-party providers who help us operate the Service. Each provider only receives the minimum data required for its function:
  • Stripe (USA) — Payment processing. Receives billing information, last four digits of payment card, and transaction history.
  • Supabase (USA) — Database hosting and authentication. Stores account, profile, search history, favorites, and subscription data.
  • Vercel (USA) — Website hosting and infrastructure. Receives request metadata (IP, user agent) for routing and abuse prevention.
  • Anthropic (USA) — AI processing for product research. Search queries (without account identifiers) are sent to Anthropic's Claude API to generate recommendations.
  • ScrapingBee (France) — Public web data retrieval (MercadoLibre product pages and reviews). Does not receive account data.
  • Resend (USA) — Transactional email delivery (signup confirmation, password reset, billing receipts, change-email notifications).
  • Cloudflare (USA) — DNS and DDoS protection. Receives request metadata at the network layer.
  • Crisp (France) — Customer support chat. Receives only the data you choose to share in chat.
  • Vercel Analytics & Speed Insights (USA) — Anonymized aggregate usage and performance metrics. No persistent cookies.
  • Meta Platforms (Facebook / Instagram) (USA) — Conversion measurement via Meta Pixel. Loaded only with your consent. See Section 1.3.
  • TikTok (USA / Singapore) — Conversion measurement via TikTok Pixel. Loaded only with your consent. See Section 1.3.
  • Google (Google Ads) (USA) — Conversion measurement via Google tag. Loaded only with your consent. See Section 1.3.
• Legal Requirements: We may disclose your information if required by law, regulation, legal process, or government request.
• Business Transfers: If Ficanaz LLC is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.
• With Your Consent: We may share your information for other purposes with your explicit consent.

4. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. After account deletion:

• Account and profile data is deleted within 30 days.
• Usage data and search history is deleted within 90 days.
• Billing records are retained for up to 7 years as required by tax and accounting regulations.
• Backup copies may persist for up to 90 days before being automatically purged.

You may request deletion of your account and personal data at any time by contacting us at privacy@ficanaz.com.

5. Data Security

We implement industry-standard security measures to protect your personal information, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure password hashing
• Access controls limiting employee access to personal data
• Regular security reviews of our infrastructure

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

6. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data, subject to legal retention requirements.
• Data Portability: Request your data in a structured, machine-readable format.
• Objection: Object to processing of your data for specific purposes.
• Withdrawal of Consent: Withdraw your consent at any time where processing is based on consent.

To exercise any of these rights, contact us at privacy@ficanaz.com. We will respond within 30 days.

7. International Data Transfers

Your information may be transferred to and processed in the United States, where our servers and service providers are located. By using the Service, you consent to the transfer of your information to the United States. We ensure that appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

8. Children's Privacy

The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 18, we will take steps to delete that information promptly.

9. GDPR Compliance (European Users)

If you are located in the European Economic Area (EEA), the following applies:

• Legal Basis: We process your data based on contractual necessity (to provide the Service), legitimate interest (to improve the Service), and consent (for optional communications).
• Data Protection Officer: For GDPR-related inquiries, contact privacy@ficanaz.com.
• Supervisory Authority: You have the right to lodge a complaint with your local data protection authority.

10. California Privacy Rights (CCPA)

If you are a California resident, you have the right to:

• Know what personal information we collect and how it is used.
• Request deletion of your personal information.
• Opt out of the sale of personal information (we do not sell personal information).
• Non-discrimination for exercising your privacy rights.

11. Third-Party Links

The Service contains links to third-party websites, including supplier platforms like Alibaba. This Privacy Policy does not apply to third-party websites. We encourage you to review the privacy policies of any third-party sites you visit.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notification at least 30 days before taking effect. The "Last updated" date at the top reflects the most recent revision.

13. Contact Us

For any questions or concerns about this Privacy Policy or your personal data, contact us at:

Ficanaz LLC
Email: privacy@ficanaz.com
Website: https://ficanaz.com

Manage cookie preferences

You can withdraw or update your consent for marketing cookies at any time. Clicking the button below will reopen the cookie banner so you can choose again. Changes apply on your next page load.