Privacy Policy

When you use Prefero we collect the minimum data we need to run a scan and deliver your report.

• The URL of the e-commerce store you ask us to analyze (and, if you provide one, a competitor URL).
• The email address you provide at checkout.
• Your IP address, used solely for rate-limiting (5 free scans per IP per day).
• Payment metadata via Stripe. We never see or store full card numbers.

We use the data above to run your scan, deliver and store your report, process payment, prevent abuse, and provide support.

We also use scan results in de-identified, aggregated form — for example benchmarks and patterns across many stores — for research and published content such as blog posts. This aggregated use never identifies an individual store, and we do not publish identifiable findings about your specific store without your permission.

• Application data — scans, project records, score history — lives in Supabase Postgres.
• Payments are handled by Stripe, which is PCI-DSS compliant. We never store card data.
• Transactional email is sent through Resend.

We use Google Analytics 4 (GA4) with anonymized IP addresses to understand how visitors use the site — which pages they visit, where they come from, and how the scan funnel performs. GA4 sets first-party cookies (_ga, _ga_*) for this purpose. No advertising features are enabled.

To deliver the service, Prefero shares specific data with the processors below.

• DeepSeek (via Anthropic-compatible API) — processes the public content of your store and any competitor URLs to run the AI buyer simulation and generate recommendations. DeepSeek does not train on this data.
• Google Analytics — anonymized usage analytics (see Cookies section).
• Stripe — payment processing.
• Resend— transactional email (e.g., “your report is ready”).
• Supabase — primary database.

We use the minimum necessary cookies: a Stripe checkout session cookie during payment, a Supabase session cookie if and when authentication is enabled, and Google Analytics first-party cookies (_ga, _ga_*) for anonymized usage measurement. No advertising cookies.

• Scan results and project records are retained indefinitely so you can revisit your historical report. You can request deletion at any time (see below).
• The email address on a subscription is kept while the subscription is active, and deleted within 90 days of cancellation unless we are required to retain it for tax or legal reasons.

Under the GDPR you have the right to access, rectification, erasure, portability, restriction of processing, and objection to processing.

To exercise any of these rights, email p.iglaev@gmail.com. We will reply within 30 days.

If you are unhappy with our response, you can complain to the Spanish data protection authority, AEPD — Agencia Española de Protección de Datos.

• Data controller: Petr Iglaev, operating as Prefero (autónomo registered in Spain).
• Email: p.iglaev@gmail.com.

We may update this policy. The “Last updated” date at the top reflects the latest change. Material changes will be announced by email if you have an active subscription.