Privacy Policy

1. Information We Collect

1.1 Information You Provide

We collect information you provide directly to us, including:

Account Information:

• Name
• Email address
• Phone number (optional)

BISY does not issue or store a password. You sign in either with a one-time passcode that we send to your email address, or through a third-party single sign-on provider (Google), in which case we receive your name and email address from that provider.

When you create your account, we also record the IP address you signed up from. We record it because the card-issuing terms you accept when you start using the Service require us to capture the IP address and time of your acceptance; it is kept as a record of that acceptance rather than as general usage telemetry.

Shipping Information:

• Shipping address
• Delivery instructions (if any)

Payment Information:

• Billing address (name, street address, city, state, ZIP code, and country)

Payment card details are collected and processed by our payment processor, Stripe. We do not store complete payment card numbers on our servers. We may retain the last four digits of your card number and card type for identification purposes.

We use your billing address to issue the payment card that we use to make purchases on your behalf.

Product Requests:

• Product URLs you submit
• Size, color, and variant preferences
• Price preferences or limits

Communications:

• Messages you send to us
• Customer support inquiries
• Feedback and reviews

1.2 Information Collected Automatically

When you use our Service, we automatically collect:

Device and Usage Information:

• IP address
• Approximate location — city, region, country, postal code, and time zone — which we derive from your IP address rather than from your device's location services
• Browser type and version
• Operating system
• Device identifiers
• Pages visited and features used
• Time and date of access
• Referring URLs

Cookies and Storage Technologies:

• An authentication cookie, which is a persistent cookie that lasts 7 days
• Other persistent cookies (for analytics and functionality)
• Browser local storage — for example, to remember a referral code from a link you followed
• Browser session storage — for example, to remember where to return you after you sign in or complete a payment
• Pixel tags and similar technologies
• The Google Ads tag (gtag.js), a Google conversion and measurement tag that runs on our Site and reports actions such as completed signups to Google
• PostHog product analytics, including session replay, which records your interactions with pages on our Site

Search Activity:

• The product pages and URLs you search for
• The date and time of the search
• The IP address the search came from, and the approximate location we derive from that IP address

We record this for every search made on our Site, including searches made by visitors who do not have an account and are not signed in. The approximate location we derive from an IP address is therefore collected for anonymous visitors as well as for signed-in users.

We use search activity to operate and improve the Service and, as described in Section 2, to compile the listing of the most watched and most searched products that we display publicly on our Site.

1.3 Information from Third Parties

We may receive information about you from:

• Retailers: Order confirmation, shipping information, and product details when we make purchases on your behalf
• Payment Processors: Transaction confirmation and fraud prevention data from Stripe
• Analytics Providers: Usage, product analytics, and session replay data about how our Site is used, from PostHog

1.4 Your BISY Email Alias and Retailer Mail

When you create an account, we assign you a personal BISY email alias on the @shopping.bisy.co domain. When we place an order on your behalf, we give the retailer that BISY alias rather than your own email address, so the retailer's mail comes to us instead of to you.

Mail that retailers send to your alias — including order confirmations, shipping and delivery notices, return and refund messages, customer service replies, and marketing email — is received and stored by us, automatically classified by our systems to determine what it relates to and to update the status of your order, and forwarded to the email address associated with your account. We use this mail to operate the Service, for example to confirm that an order was placed, to track its shipment, and to keep you informed about it.

2. How We Use Your Information

We use the information we collect to:

Provide the Service:

• Create and manage your account
• Process your product monitoring requests
• Make purchases on your behalf
• Fulfill orders and arrange shipping
• Receive, store, classify, and forward mail that retailers send to your BISY email alias
• Process payments and refunds
• Communicate with you about your requests and orders

Improve the Service:

• Analyze usage patterns and trends
• Compile the listing of the most watched and most searched products that we display publicly on our Site, using the searches made on our Site, including searches made by visitors who are not signed in
• Develop new features and functionality
• Test and improve our systems
• Troubleshoot issues

Communicate with You:

• Send service-related notifications (order updates, restock alerts, etc.)
• Respond to your inquiries and support requests

Protect and Secure:

• Detect and prevent fraud
• Verify your identity
• Enforce our Terms of Service
• Protect the rights and safety of our users and third parties

Comply with Legal Obligations:

• Respond to legal process
• Comply with applicable laws and regulations

3. How We Share Your Information

We may share your information in the following circumstances:

3.1 Service Providers

We share information with third-party service providers who perform services on our behalf, including:

• Payment Processing: Stripe processes all payments. Your payment information is subject to Stripe's privacy policy.
• Email Services: To send transactional email, and to receive, store, classify, and forward the mail that retailers send to your BISY email alias
• Product Analytics: PostHog processes product analytics data on our behalf, including session replay, which records how you move through pages on our Site. When you are signed in, we send PostHog your account identifier, email address, and name so that this activity is associated with your account.
• Advertising Measurement: We run the Google Ads tag (gtag.js) on our Site. It is supplied by and loads from Google, and it reports conversion events, such as a completed signup, to Google.
• Cloud Hosting: To store and process data securely

3.2 Retailers

When we make purchases on your behalf, we provide necessary information to retailers, including:

• Your shipping name and address
• Phone number (if required for delivery)
• Your BISY email alias on the @shopping.bisy.co domain, for order confirmations and other order correspondence

We give retailers your BISY email alias rather than your own email address, and the mail they send to it is handled as described in Section 1.4.

We do not share your payment information with retailers. Purchases are made using our payment methods.

3.3 Legal Requirements

We may disclose your information if required to do so by law or in response to:

• Subpoenas, court orders, or other legal process
• Requests from government authorities
• To protect our rights, privacy, safety, or property
• To investigate potential violations of our Terms

3.4 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

3.5 With Your Consent

We may share your information with third parties when you have given us your explicit consent to do so.

4. Data Retention

We retain your information for as long as necessary to:

• Provide the Service and fulfill the purposes described in this policy
• Comply with legal obligations
• Resolve disputes
• Enforce our agreements

Account Information: Retained while your account is active and for a reasonable period thereafter for legal and business purposes.

Transaction Records: Retained for a minimum of 7 years for tax and legal compliance.

Usage Data: Retained indefinitely for analytics purposes. Some of it is held in aggregated or anonymized form, but not all of it: our search metrics retain the raw IP address of each search together with the approximate location derived from it, and our product analytics records are associated with your account when you are signed in. We do not represent our usage data as being anonymous.

You may request deletion of your account and personal information by emailing [email protected], as described in Section 6.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure authentication and access controls
• Regular security assessments
• Employee training on data protection

However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your information.

6. Your Rights and Choices

6.1 Account Information

You can access, update, or correct your account information at any time by logging into your account settings.

6.2 Communications

The email we send you is service-related: order updates, restock alerts, security notices, replies to your inquiries, and the retailer mail we forward on from your BISY email alias as described in Section 1.4.

You cannot opt out of service-related communications while maintaining an active account. We do not currently send marketing email and we do not offer an email preference setting. If that changes, we will update this policy and describe the choices available to you at that time.

If you have a question about the email we send you, contact us at [email protected].

6.3 Cookies and Browser Storage

Most web browsers accept cookies by default. You can usually modify your browser settings to decline cookies, but this may affect your ability to use certain features of our Service. Our authentication cookie is a persistent cookie that lasts 7 days; declining or deleting it will sign you out.

Your browser's cookie controls do not clear the data we keep in browser local storage and session storage. Those are separate storage technologies, and blocking or deleting cookies leaves what is stored in them in place. To remove it, use your browser's site data or storage controls for bisy.co.

6.4 Do Not Track

Our Site does not currently respond to "Do Not Track" signals.

6.5 Data Access and Deletion

You may request:

• A copy of the personal information we hold about you
• Correction of inaccurate information
• Deletion of your personal information

To make any of these requests, email us at [email protected] from the email address associated with your account. To have your account and your data deleted, email us at that address and we will delete your data upon request. There is no self-service deletion control in the Service; we handle these requests manually, and we may require verification of your identity before acting on one. We may keep the limited records we are required to retain for legal, tax, and accounting purposes, as described in Section 4.

7. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

Right to Know: You may request information about the categories and specific pieces of personal information we have collected, the sources of collection, the purposes for collection, and the categories of third parties with whom we share information.

Right to Delete: You may request deletion of your personal information, subject to certain exceptions.

Right to Opt-Out: You may opt out of the "sale" or "sharing" of your personal information. We do not sell personal information, and we do not share personal information for cross-context behavioral advertising, as those terms are defined under the CCPA.

Advertising and Analytics Technologies: Our Site runs the Google Ads tag, a Google conversion and measurement tag, and PostHog product analytics including session replay, as described in Sections 1.2 and 3.1. These are third-party technologies, so using them means information about your visit is transmitted to Google and to PostHog. It is our position that we collect this information for our own internal purposes only — to measure our own signups and to understand how our Service is used. We do not sell it, we do not exchange it for anything of value, and we do not use or disclose it to target advertising to you on other businesses' sites or apps. We recognize that the use of third-party advertising and analytics tags is treated by some regulators as "sharing" for cross-context behavioral advertising; if we conclude that our use of these technologies amounts to a sale or a share, we will update this policy and provide a "Do Not Sell or Share My Personal Information" control.

Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise these rights, contact us at [email protected].

8. International Users

Our Service is operated in the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States, which may have different data protection laws than your country of residence.

9. Children's Privacy

Our Service is not intended for children under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child under 18, we will delete that information promptly. If you believe we have collected information from a child, please contact us at [email protected].

10. Third-Party Links

Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read the privacy policies of any third-party sites you visit.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy on our Site
• Updating the "Last Updated" date
• Sending you an email notification (for material changes)

Your continued use of the Service after changes become effective constitutes acceptance of the updated policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:

BISY
Email: [email protected]
Website: https://bisy.co

For data protection inquiries, please include "Privacy Inquiry" in the subject line of your email.