Privacy policy

Last updated: 23 September 2026

This policy explains how RETAILSCOUT LTD (“we”, “us”) collects and uses your personal data when you use retailscout. We are the data controller. Contact: matthew@retailscout.app.

What we collect

• Account data: name and email address.
• Profile & usage data: your home postcode, settings, saved routes, and tracked items (including photos, prices and notes you add).
• How you found us: when you create an account, any campaign tag in the link you followed (such as utm_source) and the name of the website that sent you to us, never its full address. If you have accepted analytics cookies, also the first page you landed on during that visit. If you answer the optional “Where did you hear about us?” question, your answer, including anything you type under “Somewhere else”.
• Referrals: if you sign up through a member’s referral link, who referred you, and whether the referral qualified for their reward. To stop people referring themselves, we check whether the referred account paid with the same card as the referrer (compared using a card fingerprint from Stripe, never the card number) or used the same device.
• Location: your device location, only when you use “near me” search (with your permission).
• Payment data: handled by Stripe; we do not store your card details. We store your plan, your subscription status, when it renews, whether it is set to cancel and when it ended, and Stripe’s references for your customer record and subscription. We also keep a history of the billing events on your account from Stripe, such as a trial starting or about to end, payments taken, failed or refunded, cancellations and disputes, with the date and, where there is one, the amount.
• Emails we send you: which of our emails we sent you and when. Links in them carry a short tag naming the email, and if you subscribe through one, we record that tag with your subscription, at Stripe and in our own records. If you open our subscribe page through one of those links while signed in, we record the tag on your account and use it if you subscribe within 7 days.
• Technical data: basic logs needed to run and secure the Service. When you are signed in, this includes a record of the features you use: which feature, when, whether it worked and how long it took, and for some features the product involved (its Amazon identifier or barcode). For product lookups we also record the IP address the request came from. Each device you sign in on is given a random identifier, stored on that device, so we can enforce the device limit.
• Booking data: if you book a call with us, your name, email address and anything you write in the booking form. Calendly collects this, not our website: it reaches us as a booking in our calendar, and our servers receive none of it. You do not need a retailscout account to book a call.
• Discord: if you join our community server, your email address, your Discord user id and when you joined. You do not need a retailscout account to join. See “Discord community” below.

How we use it

• To provide and operate the Service (find stores, plan routes, track items).
• To manage your account, subscription and billing.
• To send service and transactional emails (e.g. sign-in, password reset, payment notices).
• To secure, maintain and improve the Service.
• To understand which pages, campaigns and emails bring people to retailscout.
• To run our referral scheme and prevent abuse of it.
• To run our community server on Discord, if you join it.

Our legal bases are performance of our contract with you, our legitimate interests in running, securing and improving the Service and in understanding how people find it, and your consent where required (e.g. device location, and analytics cookies).

Sharing

We share data only with processors that help us run the Service, including:

• Supabase: database, authentication and file storage.
• Stripe: payment processing and subscriptions.
• Vercel: hosting.
• Resend: transactional email.
• Google Analytics: website usage analytics (only if you accept cookies).
• Calendly: appointment scheduling, only if you choose to book a call with us.
• Discord: our community server, if you choose to join it or link your account.

If you opt to share a find to the community feed, the product, price and shop you choose to share become visible to other users. Anonymised details of shared finds (brand, prices, estimated per-unit profit and ROI only, never the product name, the store, or anything identifying you) may also appear in retailscout’s newsletter and marketing. Your quantity and private location photos are never shared.

International transfers

Some of the processors listed above are based outside the UK. Where personal data is transferred to them, we rely on the safeguards permitted by UK data protection law. For Calendly LLC (United States) we rely on the UK Extension to the EU-US Data Privacy Framework, under which Calendly is self-certified for non-HR data, and, in the alternative, on the UK Addendum to the European Commission’s Standard Contractual Clauses as incorporated in Calendly’s data processing addendum. For Supabase Pte. Ltd (Singapore), which provides our database, authentication and file storage, we rely on the UK Addendum to those same Standard Contractual Clauses, as incorporated in Supabase’s data processing addendum.

Cookies & analytics

We use essential cookies and storage needed to run the Service (for example, to keep you signed in, to remember your cookie choice, and to identify the device you are signed in on). With your consent, we also use Google Analytics to understand how the site is used, in aggregate, so we can improve it. Analytics cookies load only after you accept via the cookie banner; you can decline, and no analytics cookies are set.

If you accept, we also remember the first page you landed on during your visit. It is kept in your browser only until you close the tab, and is used only if you create an account then. If you accept and arrived through a member’s referral link, we also keep that referral code in your browser for up to 60 days, so the referral still counts if you sign up later.

If you accept, we also show a customer reviews badge from REVIEWS.io on our home and pricing pages. It loads from REVIEWS.io’s servers and the services they use, which see your IP address, and it can set its own cookies, including security cookies from Cloudflare. If you decline, the badge does not load.

Page counts without cookies. When you visit our public pages, we count the visit: the page, the name of the website that linked to it, any campaign tag in the link, and whether you are on a phone, tablet or computer (worked out from the width of your screen). No cookie is set, nothing is stored on your device for this, and we do not record your IP address or anything else that could identify you. If you choose Decline on the cookie banner, we stop counting your visits too.

You can change your choice at any time with the Cookie settings link at the bottom of this page. If you withdraw consent, analytics stops straight away and we delete our analytics cookies. Cookies that other providers have already set, such as REVIEWS.io’s, stay in your browser until they expire or you clear them. We do not sell your data.

If you choose to open our booking window, Calendly loads its scheduling tool and sets its own cookies, and that window also sets a cookie belonging to Calendly’s payment provider. Nothing from Calendly loads, and no Calendly cookie is set, unless and until you press that button. Calendly will ask you separately about its own optional cookies inside the booking window; that choice is between you and Calendly, and our cookie banner does not cover it.

Browser extension

We offer an optional browser extension (the “retailscout” side panel for Chrome and compatible browsers). It is available only to subscribers and handles a limited amount of data:

• Licence key: when you connect the extension, your retailscout licence key is stored locally in your browser and sent to retailscout.app to authorise each lookup. It is the extension’s only credential.
• Active tab: when you ask the extension to analyse a product, it reads the URL and title of the tab you are viewing to detect the Amazon product (its ASIN) or product name, and sends that identifier or search term to retailscout.app to return the analysis.

The extension does not read the content of the pages you visit (it has no content scripts and no host permissions), does not track your browsing, and contains no remote code. We do not sell or transfer this data, and we use it only to provide the analysis you request. The extension stores no other personal data.

Discord community

We run a community server on Discord. You can join it from our website without a retailscout account, and if you are a member you can link your account from Settings instead. Joining is optional and nothing below happens unless you choose it.

• Your email address: we record the address you give us on the join page against your join, so that we have a record of who we admitted and so that we can reach you if the server changes. Giving it does not put you on any mailing list. The weekly finds report is a separate, optional tick box on that page, and it is never a condition of joining.
• Your Discord user id: the identifier Discord gives your account, which we receive when you approve the request on Discord’s own consent screen. We hold it so that we can add you to the server, give you the right role, and keep the two accounts connected if your membership starts or ends later. We do not receive your Discord password or your messages, and we cannot see what you do on other servers.
• When you joined, and which of our pages you joined from.

Discord’s own role. Discord runs the server and holds what you post there under its own privacy policy, which is between you and Discord. Anything you write in a channel is visible to other people in that server.

Removing it. Leaving the server removes you from it but does not on its own delete what we hold, so email matthew@retailscout.app and we will delete your join record and the link between your email address and your Discord user id. If you have a retailscout account, deleting it removes the link as well. Stopping the finds report is separate: use the unsubscribe link in any issue, and you can do either without the other.

Amazon account connection

We offer an optional feature to connect your Amazon Selling Partner (seller) account. It is entirely optional and only active if you choose to connect.

What we use it for. Using Amazon’s Selling Partner API and your authorisation:

• whether your account can list a product you are analysing, including any approval it needs (sometimes called “ungating”);
• Amazon’s own fee figures for that product;
• current prices for products you have chosen to track.

Price checks on tracked products are still in limited testing and may not be active on your account yet.

When we check. We check eligibility when you ask for it, for example by opening a product or running a brand scan. We fetch Amazon’s fee figures for the products you are looking at, wherever we show you a profit figure. Price checks on tracked products run in the background while your account is connected.

What we never access. Your orders, your customers, your financials, your inventory, your sales figures, or any personal customer data. We never receive your Amazon password.

What we keep. Your authorisation token, encrypted at rest, and your seller identifier. We also keep the results we fetch: eligibility answers, fee figures, and a price snapshot for the products you track. We keep these until you disconnect, your membership ends, or you delete your account. We stop relying on an eligibility answer or a fee figure after 24 hours, and fetch fresh ones when you check again. A saved brand scan stays visible for up to 7 days, marked with when it ran.

How we use it. To produce results for your own account. We do not sell, share or aggregate this data, and we never use one member’s connection to serve another.

Disconnecting. You can disconnect at any time in Settings. This deletes your token and the Amazon information we hold, and stops any background checks. Information that is not from Amazon, such as your Brand Radar list or your saved wholesale scans, is not affected by disconnecting and is removed if you delete your retailscout account. We also disconnect your account automatically when your membership ends.

Business tracker

The business tracker is end-to-end encrypted. Entries are encrypted on your device with a key that never leaves it, so we cannot read what you track: product names, prices, quantities, stores and notes are all unreadable to us, and deleting your tracker data is permanent because no readable copy exists on our servers. One narrow exception makes price watching work: for each entry with a product identifier (ASIN), that identifier, its marketplace and a sync timestamp are stored unencrypted so our hourly price checks and the alerts you receive can run; the identifier is removed when you delete the entry. Price alerts themselves name the product using Amazon’s public catalogue and stay in your notifications until you clear them. Nothing else leaves the encrypted record.

Business transfers

If we are involved in a merger, acquisition, reorganisation, or sale of all or part of our business or assets, your personal data may be transferred to the successor entity as part of that transaction, subject to this policy.

Retention

We keep your data until you delete your account, including after a membership ends. If you delete your account, we delete your account data, how you found us, your usage records and the record of emails we sent you. We keep only a list of email addresses that asked not to be emailed, so that we never email them again.

Your billing history is deleted with your account.

If you joined our Discord community without a retailscout account, we keep your join record (your email address, your Discord user id and the date) for 12 months after you leave the server, or until you ask us to delete it, whichever comes first.

Your rights

You can access, correct, export or delete your data, and object to or restrict certain processing. You can permanently delete your account and all its data yourself at any time using the Delete account button in Settings. To exercise your other rights, email matthew@retailscout.app. You may also complain to the UK Information Commissioner’s Office (ICO).

Changes

We may update this policy; material changes will be notified in-app or by email.