How we handle your information

1. Information we collect

BuyCheck AI is an AI-powered Service. To produce useful answers we collect both structured data (well-defined fields you fill in) and unstructured data (free-text descriptions, feedback, and the content of pages you ask us to analyze).

1.1 Information you give us directly

• Gift and product queries. Recipient details (e.g. relationship, occasion, age range), budgets, interests, must-have attributes, urgency, and any free-text notes you provide.
• URLs you submit. Product links you ask us to analyze, including the price, title, retailer, images, ratings, and review text we fetch from those pages.
• Feedback.Whether a recommendation met your need and free-text explanations of what didn’t work, used to improve future suggestions.
• Account information. If you sign in, your email address and (where applicable) display name, supplied by Supabase Auth or your OAuth provider.
• Tasks and reminders. Scheduled gift searches (recipient, occasion, dates), watch-list entries, and any associated notes.

1.2 Information we collect automatically

• Session identifiers. A first-party HTTP-only cookie (buycheckai_uid) so we can show you the same data on return visits without requiring you to sign in.
• Request metadata. IP address, user agent, page URL, referrer, request timestamps. Used for rate limiting, fraud prevention, debugging, and aggregate analytics.
• Error and performance data. Stack traces, error messages, and timing information sent to our error-monitoring provider (Sentry).

1.3 Information generated by the Service

• AI-generated content. Verdicts, gift suggestions, scores, and reasoning produced by our AI models in response to your inputs.
• Metadata and lineage. For each record we create (gift recommendation, product analysis, scheduled task) we store metadata describing when, where, and how it was produced. This lets you find and reuse data later and lets us audit how individual outputs were generated.

2. How we use information

• To deliver the Service’s features.
• To improve the accuracy of recommendations, including using anonymized feedback to refine prompts and model behavior.
• To prevent abuse, fraud, and excessive load on our systems.
• To communicate with you about your account, your tasks, or material changes to the Service.
• To comply with legal obligations.

We do not sell your personal information. We do not use the content of your gift searches to send you marketing for the recipients of those gifts.

3. Sharing of information

We share information only as described below:

• Service providers. Supabase (database and auth), Anthropic (AI model inference), SerpAPI (product search), Diffbot (web extraction, where used), Vercel (hosting), and Sentry (error monitoring). Each receives only the data needed to perform its function and is bound by its own privacy commitments.
• Retailers, indirectly.When you click through to a retailer’s site, your activity there is subject to their privacy practices, not ours. We may receive affiliate signals (whether a click resulted in a purchase) but we do not receive your name, payment information, or shipping address.
• Legal compliance. When required by law, valid legal process, or to protect the rights, safety, or property of Sonare, our users, or the public.
• Business transfers. If Sonare LLC is acquired, merged, or reorganized, information may transfer to the successor entity, subject to the same protections described here.

4. AI training and model improvement

We may use information you provide — including queries, feedback, and product analyses — to improve the Service. When we do, we take reasonable steps to minimize personal information: we strip or hash direct identifiers and aggregate before using content for model improvement.

We do not currently use your data to train third-party foundation models. When we send your content to an AI provider (e.g., Anthropic), we do so under that provider’s zero-retention or no-training terms where available.

5. Your rights

Depending on where you live, you may have the right to:

• Access the information we hold about you.
• Correct inaccurate information.
• Delete your account and associated data.
• Object to certain uses of your information.
• Withdraw consent for optional uses at any time.
• Opt out of the “sale” or “sharing” of personal information for cross-context behavioral advertising (we do not engage in this practice).
• Lodge a complaint with your local data protection authority.

To exercise these rights, email privacy@buycheckai.com. We respond within 30 days.

6. Children

BuyCheck AI is not directed to children under 13 (or under 16 in the European Economic Area). We do not knowingly collect personal information from children. If you believe a child has provided us information, contact privacy@buycheckai.com and we will delete it.

7. Retention

We retain personal information for as long as your account is active or as needed to provide the Service. Anonymous session data is retained for up to 90 days. You can request deletion of your account at any time. Some data may be retained in backups or where required for legal, accounting, or fraud-prevention purposes.

8. International transfers

We operate from the United States. By using the Service you understand your information may be processed in the United States and other countries where our service providers operate. Where transfers from the EEA, UK, or Switzerland occur, we rely on appropriate safeguards, including Standard Contractual Clauses.

9. Security

We use industry-standard security practices, including TLS in transit, encryption at rest for sensitive data, principle-of-least- privilege access controls, and row-level security on per-user data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Changes

When we make material changes to this Policy we will revise the “Last updated” date and, where required, notify you in the app or by email before the changes take effect.

11. Contact

Sonare LLC
Email: privacy@buycheckai.com