Privacy Policy
Updated
This policy explains what personal data NicheKite collects when you use nichekite.com and the NicheKite app, why we collect it, and what you can ask us to do with it. We have written it to match what the product actually does today.
Who we are
NicheKite is operated by the NicheKite team (“we”, “us”). For any question about this policy or your data, write to [email protected].
What we collect
| Data | When | Why |
|---|---|---|
| Email address, name and profile picture | When you sign in with Google, or with an email one-time code (email address only) | To create and identify your account and contact you about it |
| Language preference | When you change the app language | To show the app in your language |
| Session and device information: a random device identifier, IP address, browser user agent, sign-in and last-seen times | Each time you sign in and use the app | To keep you signed in, protect accounts and limit an account to its allowed sessions |
| What you save: favorites collections, notes, saved searches | When you create them | To provide those features |
| Activity history: product searches that include a search term, and keyword searches (the search term and filters), with time, IP address and user agent. Opening a design and checking a trademark are not logged | When you run one of those searches | To show your own history page and to detect abuse |
| Team membership: team name, members, invited email addresses and roles | If you create or join a team | To manage shared seats |
| Payment records: plan, amount, currency, date, provider and the reference the provider sends back | When you pay | To activate your plan, keep accounting records and handle refunds |
We do not collect payment card numbers. We do not use advertising or analytics trackers on the site or in the app at this time. If that changes, we will update this policy before turning them on.
Google sign-in
If you choose “Sign in with Google”, Google shares your basic profile (name, email address and profile picture) with us. We only request these basic scopes. We do not request access to Gmail, Drive, Calendar or any other Google service, and we do not use Google data for advertising.
NicheKite's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Data shown in the product
The product data shown in NicheKite is Amazon Merch listing data: designs, Best Sellers Rank, prices, reviews and launch dates. Trademark records are public data published by the United States Patent and Trademark Office (USPTO). Holiday information is compiled from public sources and our own notes. This data is about products and registered marks, not about you.
Where your data is stored
Accounts, sign-in sessions and everything you save are stored in a PostgreSQL database on servers we operate ourselves. Sign-in (Google and email one-time codes) is handled by GoTrue, an open-source authentication server that we also run on our own servers. We do not sell your data.
Service providers
- Google — only if you sign in with Google.
- Email delivery provider — sends one-time sign-in codes and account emails.
- Cloudflare — carries traffic between your browser and our servers (network security and delivery). It sees technical request data such as IP addresses.
- SePay — matches VietQR bank transfers to orders. It shares with us the transfer amount, time, transfer note and the details your bank includes in the notification, which can include the sender's name and account.
- PayPal — processes PayPal payments. PayPal handles your card or PayPal account under its own privacy policy and sends us the payment status, amount and transaction reference (and the payer email PayPal provides).
Cookies and local storage
We use cookies that are strictly necessary to keep you signed in, and browser local storage to remember preferences such as the app language and display options. We do not use advertising cookies.
How long we keep data
- Account data and what you save: for as long as your account exists.
- Activity history and session records: while your account exists; you can ask us to delete them at any time.
- Payment records: as long as accounting and tax law requires, even after an account is deleted.
- When you delete your account, we delete or anonymise the rest within 30 days, except where the law requires us to keep it.
Your choices and rights
You can ask us to show you, correct, export or delete the personal data we hold about you, or to stop using it, by writing to [email protected] from the email address on your account. We answer within 30 days. If you signed in with Google, you can also remove NicheKite's access at any time in your Google Account settings.
Security
Traffic to nichekite.com is encrypted (HTTPS). Database access is limited to the people and services that run NicheKite. No system is perfectly secure; if a breach affects your personal data, we will tell you without undue delay.
Children
NicheKite is a business tool and is not directed at children under 16. We do not knowingly collect their data.
Changes to this policy
We will post changes on this page and update the date at the top. If a change materially affects how we use your data, we will also tell signed-in users before it takes effect.