PRIVACY POLICY

We collect the following types of information:

Account Information

• —Email address
• —Account password (stored encrypted)
• —Subscription tier and billing status

Telegram Connection Information

• —Telegram user ID
• —Telegram username (if available)
• —Bot interaction history (commands sent, screenshots uploaded)

Shop Performance Data

• —Screenshots of TikTok Seller Center pages that you upload to our Telegram bot
• —Extracted shop performance metrics including Seller Performance Score (SPS), order fulfillment rate, cancellation rate, return and refund rate, listing compliance score, and customer satisfaction score
• —Historical metric trends and alert history

Payment Information

We do not store full credit card numbers, bank account information, or other sensitive payment data on our servers. Payment processing is handled by Stripe, Inc. We retain only a Stripe customer ID, subscription status, and last four digits of payment method as provided by Stripe.

Usage Data

• —Login timestamps
• —Feature usage logs
• —Error and diagnostic logs
• —IP address and approximate location for security purposes

We use the information we collect to:

• —Provide, operate, and maintain the Service
• —Process subscription payments and manage billing
• —Send shop performance alerts via Telegram
• —Generate AI-powered diagnostic reports and coaching responses based on your shop data
• —Communicate with you about your account, service updates, and customer support
• —Improve our product, including analyzing aggregated usage patterns
• —Detect and prevent fraud, abuse, or violations of our Terms of Service
• —Comply with legal obligations

We do not sell your personal information.

We share information with the following categories of third-party service providers, each operating under their own privacy policies:

• —Stripe, Inc. — Payment processing
• —Supabase, Inc. — Database hosting and authentication
• —Telegram FZ-LLC — Messaging delivery
• —Anthropic, PBC — AI processing of screenshots and diagnostic content
• —Resend, Inc. — Transactional email delivery
• —Inngest, Inc. — Background job processing
• —Replit, Inc. — Application hosting

We may also disclose information if required by law, court order, or to protect the rights, property, or safety of Shop Reaper, our users, or others.

If Shop Reaper is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

When you upload screenshots or use AI Coach features, the relevant data (including extracted metric values and your specific questions) is processed by Anthropic's Claude API to generate responses. We do not share data with Anthropic that is unnecessary for the requested function.

Per Anthropic's API policy at the time of publication, data sent to their API is not used to train their models. We rely on Anthropic's data handling practices for the AI processing portion of our Service.

We retain different types of data for different periods:

• —Screenshots: Automatically deleted after 30 days
• —Extracted metric data: Retained for the life of your account, then deleted within 90 days of account deletion
• —Account information: Retained until you request deletion, then deleted within 30 days
• —Payment records: Retained per legal and tax requirements (typically 7 years)
• —Logs and diagnostic data: Retained for up to 90 days

We implement reasonable technical and organizational measures to protect your information, including encryption of data in transit and at rest, access controls, and regular security review. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

Depending on your location, you may have rights to:

• —Access the personal information we hold about you
• —Correct inaccurate information
• —Delete your account and associated data
• —Export your data in a portable format
• —Object to or restrict certain processing
• —Withdraw consent where we rely on consent

To exercise these rights, contact us at support@shopreaper.app. We will respond within 30 days.

The Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children under 18. If you believe we have collected information from a minor, contact us and we will delete it.

The Service is operated from the United States. If you are using the Service from outside the United States, your information will be transferred to and processed in the United States, which may have different data protection laws than your jurisdiction.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service. The "Last updated" date at the top reflects the most recent version.

For questions about this Privacy Policy or your data, contact us at: