Privacy policy
Last updated: October 23, 2026
Who we are
Priceloop (priceloop.app) is run by Erik Usmanov, a sole trader (autónomo) registered in Spain, NIE Z0575748V, Rossend Nobas 41, 2º-6ª, 08018 Barcelona, Spain. He is the controller of the personal data described here. Write to hello@priceloop.app about anything on this page.
What Priceloop does
Priceloop finds other online stores that sell the same products as your store, and reads their public product pages every day for price and stock. Competitor data comes from public web pages and Google Shopping. It is about products and stores, not about people.
The personal data we keep
| Data | Why | Legal basis |
|---|---|---|
| Your account: email, name, your role on the store, the store address, sign-in times | To sign you in and run the service | Contract |
| Sign-in codes, stored only as a keyed hash, for 10 minutes | To check that the email is yours | Contract |
| Your store's public catalog: product names, prices, photos, barcodes | To find and compare competitors | Contract |
| Billing: your Stripe customer ID, plan and subscription status. Stripe keeps your card; we never see it | To bill a paid plan | Contract |
| The emails we send you: the daily email and alerts, kept 90 days after sending | To deliver them once, and to answer questions about them | Contract |
| A keyed hash of your network address at sign-up, never the address itself | To limit sign-ups to 3 a day per network | Legitimate interest: prevent abuse |
| Page views on our public pages: a random browser ID, the page, video progress, the referring page, the browser type. Kept 13 months | To see which pages work and when a person we wrote to visits | Legitimate interest: improve the site and our outreach |
| Business contacts of online stores: name, role, work email, LinkedIn page, from public sources | To write to stores about Priceloop | Legitimate interest: business-to-business outreach |
| AI assistant connections: the app's name, who connected it, when it was last used. Tokens are stored only as hashes | To answer your assistant, and to let you disconnect it | Contract |
We find store contacts on the store's own site and other public pages, with the help of an AI model. If we wrote to you and you do not want more email, reply to it or write to us, and we stop.
AI assistants (ChatGPT, Claude and others)
When you connect ChatGPT, Claude or another assistant, you sign in to Priceloop and pick one store. The assistant then asks Priceloop for that store's data: your products, their competitors, prices, stock and changes. Priceloop receives only these requests and the words in them, such as a product name. It does not receive your conversation, and it can only read: it cannot change anything. The assistant's provider handles your conversation under its own policy. Access tokens last one hour. You can disconnect an assistant at any time in Settings, under AI assistants. A person removed from the store loses the access at once.
Cookies
- pl_session: keeps you signed in, for up to 90 days. Needed for the service.
- pl_brand: remembers which store you opened. Needed for the service.
- pl_v: a random ID for page views on our public pages, for one year.
- pl_c: set when you open a link from our email, so we know the visit is yours, for one year.
- pl_staff: marks our own browsers, so our visits are not counted.
We use no advertising cookies and no third-party analytics. We count visits to our public pages with Umami, which runs on our own server and sets no cookies. It receives the page, the referring page, the browser type, the screen size and the network address. It keeps the country and city from the address, never the address itself.
Who processes data for us
- OVHcloud US: our server and database, in Hillsboro, Oregon, USA.
- Resend: sends our email.
- Stripe: payments.
- Anthropic: an AI model that helps us find public business contacts of stores.
- Telegram: an alert to us when a store signs up, with the email and the store.
- Scrape.do: fetches public web pages and Google Shopping results for us. It receives no personal data from us.
Some of these providers are in the United States, so data leaves the European Economic Area. We rely on the safeguards they offer, such as the EU Standard Contractual Clauses or the EU-US Data Privacy Framework. We do not sell personal data.
How long we keep it
Your account data stays while the account exists. When you ask us to delete the account, we delete your personal data within 30 days, except what the law makes us keep, such as invoices. Sent emails are kept 90 days, page views 13 months, and ended assistant connections 30 days. Price history is kept 400 days; it is about products, not people.
Your rights
You can ask to see, correct, delete or export your personal data, to restrict its use, or to object to it, including to our outreach. Write to hello@priceloop.app. We answer within one month. If you think we handle your data wrongly, you can complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (aepd.es), or to the authority where you live.
Children
Priceloop is a service for businesses. It is not for anyone under 16.
Changes
When this policy changes, we change the date at the top. For a large change, we email account owners first.