Privacy Policy

1. Information We Collect

We collect the following information:

• Account Information: Email address and name when you create an account
• Search & Usage Data: Keywords, niches, and stores you search or view
• Payment Information: Processed securely by Stripe (we do not store credit card details)
• Usage Analytics: Pseudonymous usage data such as pages visited, product actions, and conversion steps to help us improve the service (Google Analytics)
• Ad Measurement: Page views and conversion steps used to measure and improve advertising on Meta (Meta Pixel)
• Signup Attribution: Referring domain, landing page path, and campaign tags associated with your account signup

2. How We Use Your Information

We use your information to:

• Provide dropshipping intelligence and search services
• Process payments and manage your account
• Send service updates and important notifications
• Improve our product and user experience
• Measure advertising performance and reach relevant audiences
• Comply with legal obligations

3. Third-Party Services

We use the following third-party services:

• Supabase: Database and authentication
• Stripe: Payment processing
• Resend: Transactional email delivery
• Google Analytics: Product usage analytics, loaded by default; you may opt out (see Cookies below)
• Meta Pixel: Advertising measurement on Facebook and Instagram, loaded by default; you may opt out (see Cookies below)
• Sentry: Error and performance monitoring used to keep the service reliable. We do not use Sentry Session Replay
• Data & scraping providers: Used to gather public store and product signals

Each service has its own privacy policy governing how they handle data.

4. Data Retention

• Account Data: Until you request account deletion
• Search History: Retained while your account is active
• Signup Attribution: Retained with your account unless you opt out of analytics cookies before attribution is attached
• Payment Records: 7 years (legal requirement)

5. Your Rights

You have the right to:

• Access your personal data
• Request data deletion
• Export your data
• Opt out of marketing emails
• Opt out of analytics and advertising cookies at any time
• Update your information

6. Data Security

We implement industry-standard security measures including:

• Encrypted data transmission (HTTPS/TLS)
• Secure database with row-level security
• Regular security reviews
• Limited employee access to data

7. Cookies

We use essential cookies for:

• Authentication and session management
• Remembering your preferences

Referral cookie (action-based): if you arrive via a partner's referral link and choose to claim the referral discount, we set a single first-party cookie recording the referral code for up to 30 days. It is used only to apply your discount and credit the partner who referred you; it is never set without your action and is not used for advertising or cross-site tracking. If you create an account, or explicitly accept an offer while signed in, the referral is attached to that account so the discount and partner attribution continue across devices. Attribution is set once, cannot overwrite an existing referral, and is unavailable after your first paid subscription.

Analytics and advertising cookies (on by default): we use Google Analytics and the Meta Pixel to understand how the product is used and to measure advertising. Google Analytics may set first-party _ga cookies. The Meta Pixel may set cookies such as _fbp / _fbc and process page views and conversion events. These tools load for visitors by default.

How to opt out: use Cookie preferences in the site footer or your dashboard settings to choose "Opt out". We store that choice as ws_analytics=denied for up to 12 months, stop loading Google Analytics and the Meta Pixel, and clear related cookies where possible. You can turn analytics back on from the same preferences control.

Signup attribution cookie: unless you have opted out, we may set a short-lived first-party cookie containing only the external referring domain, landing path, and standard campaign tags. If you create an account within seven days, that context is attached to the account once to help us understand which acquisition channels work. Opting out clears any attribution that has not yet been attached.

We do not sell your personal data. Opting out of analytics cookies does not affect essential account cookies or your ability to use the service.

8. GDPR Compliance

For users in the European Union, we comply with GDPR requirements including:

• Contract performance for accounts, billing, and service delivery
• Analytics and advertising measurement with an easy opt-out (see Cookies)
• Legitimate interests for security, fraud prevention, and error monitoring
• Right to data portability
• Right to be forgotten
• Right to opt out of analytics and advertising cookies without affecting essential service
• Data breach notification within 72 hours

9. CCPA Compliance

For California residents, we comply with CCPA requirements:

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of sale of personal information (we do not sell data)
• Right to non-discrimination for exercising privacy rights

10. Children's Privacy

Our service is not intended for users under 18 years of age. We do not knowingly collect information from children.

11. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by email or through our service.

12. Contact Us

For privacy-related questions or requests:
Tagan Labs LLC, 30 N Gould St, STE R, Sheridan, Wyoming 82801, USA
Email: legal@whatshipping.com