Privacy Policy

Last updated: July 2026

What we collect

From store owners:

  • Name, email address, store name, location
  • POS integration credentials (stored encrypted; we do not store payment data)
  • Inventory data synced from your POS system
  • Usage data (feature usage, alert interactions)

From shoppers:

  • Email address (if you create an account or join the waitlist)
  • Search queries and location data. Location is used only to sort nearby stores and is reduced in precision (to roughly one kilometer) before it leaves your device — we do not store your exact position.
  • Device type and session metadata

From the browser extension / micro web app:

  • When you view a product page on a supported site (e.g. Amazon, iHerb, Walmart), the extension reads the product identifiers on that page (name, brand, UPC/ASIN) to look up local availability.
  • We keep a record of these product look-ups (the product identifiers above, not your name or account) to operate and improve the local-availability service. This log is tied to the products you look up, not to your personal identity.
  • Your approximate location (with your permission), to find nearby stores. It is sent to our servers to sort results by distance, where we reduce its precision (to roughly one kilometer) and do not store your exact position.
  • It runs only on the supported product pages listed in its store description. It does not read your general browsing history, and it does not track you across the web.

Automatically:

  • Standard web analytics (page views, session duration) via PostHog
  • We do not use third-party ad tracking.

How we use it

  • To operate the Service (sync inventory, send alerts, power search)
  • To improve the product (usage analytics, A/B testing)
  • To contact you about your account or updates to the Service
  • We do not sell your data. We do not share it with advertisers.

Third parties

We use a small number of trusted services to operate SeaChange Local:

ServicePurpose
NeonDatabase hosting
VercelApplication hosting
ResendTransactional email
PostHogProduct analytics

Each is bound by its own privacy policy. We do not grant them rights to use your data for their own purposes.

Data retention

We retain account data for as long as your account is active. If you close your account, we delete your personal data within 30 days, except where we're required to retain it by law.

Your rights

You own your store's data. Your product catalog, pricing, and inventory belong to you. You can:

  • Export a complete copy of your data as a structured file at any time, directly from your account settings — no request needed.
  • Delete your store and all associated data permanently from your account settings, with immediate effect.
  • Request access to or correction of any personal data we hold.

Your store data is isolated at the account level and is never sold or shared with other stores or brands without your explicit consent. For help, email privacy@seachangelocal.com. We'll respond within 30 days.

Cookies

SeaChange Local uses cookies for session management and privacy-friendly product analytics (PostHog). We do not use cookies for advertising. You can turn analytics off at any time using the "Cookie preferences" link in the footer, and we honor your browser's Global Privacy Control / Do-Not-Track signal as an opt-out. You can also disable cookies in your browser settings; some features may not work correctly if you do.

Your California privacy rights (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect and how we use it, to request a copy of it, to request deletion, and to correct inaccurate information — set out in this policy and available on request.

We do not sell or share your personal information as those terms are defined under California law, and we do not use it for cross-context behavioral advertising. Because we do not sell or share, there is nothing to opt out of on that basis, but you can still turn off analytics at any time (see Cookies). We will not discriminate against you for exercising any of these rights. To make a request, email privacy@seachangelocal.com.

Your European & UK privacy rights (GDPR)

If you are in the EEA or UK, you have the right to access, correct, delete, restrict, or object to our processing of your personal data, and to data portability. Our lawful bases are: performance of our contract with you (to operate the Service), your consent (for analytics and location, which you can withdraw at any time), and our legitimate interests in operating and improving SeaChange Local.

To exercise these rights, contact privacy@seachangelocal.com. You also have the right to lodge a complaint with your local data protection authority.

Children's privacy

SeaChange Local is intended for users 18 and older and is not directed to children. We do not knowingly collect personal information from anyone under 13 (or under the minimum age in your jurisdiction). If you believe a child has provided us personal information, email privacy@seachangelocal.com and we will delete it.

Data security

We protect your data with encryption in transit (TLS) and at rest, encrypted storage of integration credentials, tenant isolation so one store cannot access another's data, and access controls on our systems. No method of transmission or storage is perfectly secure, but we work to protect your information and maintain an incident-response process. If a breach affects your personal data, we will notify affected users and regulators as required by applicable law.

International data transfers

SeaChange Local is operated from the United States, and our service providers (see Third parties) are primarily U.S.-based. If you access the Service from outside the U.S., you understand your information will be processed in the U.S., and we rely on appropriate safeguards for any transfers where required by law.

Contact

Privacy questions: privacy@seachangelocal.com