Privacy Policy
Last updated: [DATE — fill in]
This policy explains how we collect, use, and protect your personal data when you use the "Mercari Hunter" service.
1. Data we collect
- Email and password (passwords are one-way hashed with bcrypt; we never see or store your raw password).
- Telegram chat ID — only if you choose to link your Telegram account for alerts.
- Keywords you set up to watch, and the Mercari listings our system detects matching those keywords.
- Payment transaction history: VNPay transaction reference, amount, time, status. We do not store your bank card details — that is handled by VNPay.
- Your chosen display language (so system emails are sent in the right language).
2. How we use this data
To operate the service (sending alerts, processing payments, managing your plan), to provide customer support, and to comply with legal obligations where required.
3. Where your data is stored
Your data is stored in a PostgreSQL database that we operate ourselves on a rented server (VPS), which may be located outside Vietnam (e.g. a Singapore region) depending on the chosen server location. If your business falls under Vietnam's Decree 13/2023/NĐ-CP on personal data protection, review the requirements around cross-border transfer of personal data before going live.
4. Third parties we share data with
- Telegram (Telegram Bot API) — to send alert messages.
- VNPay — to process payments.
- Your configured SMTP provider (e.g. Gmail, Mailgun, Amazon SES) — to send alert and renewal reminder emails.
We do not sell your personal data to third parties for advertising purposes.
5. Your rights
You may request correction or deletion of your account and associated data by contacting [your support email].
6. Security
Passwords are hashed with bcrypt. We do not store payment card details. Connections between your browser and our servers are encrypted via HTTPS.
7. Cookies
We use one essential session cookie to keep you logged in — we do not use advertising tracking cookies.
8. Changes to this policy
We may update this policy from time to time; the latest version is always posted here.
9. Contact
For privacy questions, contact: [your support email].