Privacy Policy

Last Updated: October 19, 2026

Buy Box Checker ("Buy Box Checker," "we," "us," or "our") is a product of Ad Badger Inc., a Delaware corporation based in Austin, Texas. This Privacy Policy (the "Privacy Policy") explains what personal information we collect when you visit the Buy Box Checker website at buyboxchecker.com (the "Website"), use our Buy Box monitoring software, dashboard, emails, or MCP connector for AI assistants, or otherwise interact with us (together, the "Services"), and how we use and share it.

Ad Badger Inc. is responsible for the personal information described here, except where we process personal information on behalf of a business customer under our Data Processing Addendum (the "DPA"). Section 6.D explains these roles.

1. Information We Collect

"Personal information" means information that identifies, relates to, or could reasonably be linked to you or your device.

A. Information You Provide to Us

Account Data: Your email address and password (our authentication provider stores the password only in hashed form), your business or brand name, and your country of establishment. If your business is established in the UK or the European Economic Area, we also collect your registered legal entity name, registered business address, a privacy contact email, and whether you act as a controller or a processor under the DPA. Any account owner can add a privacy contact email on the Account page. We do not ask for your personal name when you sign up.
Agreement Records: When you accept our Terms of Service or the DPA, we keep a record of what you accepted: the versions and exact wording, the date and time, your account identifier, your email address, and your business details. When you accept at signup or in the dashboard, the record also includes the IP address and browser user agent you used. When you accept at checkout, it includes the plan and price shown to you.
Billing Data: Your plan, your subscription status, and the identifiers of your customer and subscription records at Stripe, our payment processor. When you start checkout for a paid plan, we look up your email address in the separate Stripe account that Ad Badger Inc. uses for its Ad Badger software, to see whether you have an active Ad Badger subscription, so we can apply Ad Badger customer pricing. We pass the result to Stripe with your checkout and record it on your account when the checkout completes. We also pass Stripe your choices for analytics and marketing cookies as they stand when you start checkout and, if analytics is allowed, the identifiers in your Google Analytics cookies, so that we can report the purchase once Stripe confirms it (see Product Analytics below). If marketing is allowed, we may also pass Stripe the identifiers in Meta's cookies and your browser's user agent, to report the purchase to Meta (see Section 4). Stripe collects your payment card and billing details directly, so we never receive your full card number.
Monitoring Data: The Amazon product identifiers (ASINs), brands, seller names, and cities, ZIP codes, or postcodes you choose to track; lists of sellers you mark as authorized; and your alert, daily digest, and webhook settings, including any webhook URL you enter. You may choose to monitor products you do not own, including competitor listings. Monitoring also produces a history of those products, which includes information about third-party sellers (see Section 1.D).
Team and Connected Apps: The email addresses of teammates you invite, their roles and brand access, and the AI assistants or other apps you connect to your account through our MCP connector.
Referral Data: If you sign up through a partner's referral link, the referral code and which partner referred you. If you join our referral program, your referral code; First Promoter, our referral-tracking provider, receives your email address and account identifier to track your referrals.
Communication Data: What you send us through the support chat, by email to help@buyboxchecker.com, or through our contact form. Chats in our support widget may be answered by an AI assistant, which sends your messages to Google's Gemini service to write its replies. For contact-form messages, we store your name, email address, message, and a hash of your IP address; we forward the message to our support mailbox; and we record your name and email address in our product analytics (PostHog) as a sales lead.
Public Buy Box Check: When you use our no-signup Buy Box check, we record the ASIN you check, the marketplace and locations you choose, any seller name you enter, and the results, including the names of the sellers holding the Buy Box. If analytics cookies are allowed in your browser, we also record how you arrived at the site: the campaign parameters of the link you clicked, the referring site, and the landing page. To prevent abuse, Cloudflare Turnstile checks your browser and receives your IP address, and we store a hash of your IP address, not the address itself. Anyone with the link to a result page can view it. If you enter your email address on a result page, we store it with the check and email you the result: the Buy Box status, winning seller, price, and Prime delivery time for each location, and a link to the result page. If you also ask to be alerted when the Buy Box winner for that product changes, we record that request with your email address. These alerts are not running yet; if they start, we will email you once to say so. We use that email address only for these emails.

B. Information Collected Automatically

Server and Sign-in Logs: When you use the Services, our hosting and database providers receive your IP address, your browser type, and the pages or data you request, and keep them in their logs. Our authentication provider records sign-ins and other account events, including your email address and the IP address used, in a log kept in our database (see Section 5).
Country for Cookie Consent: Our hosting provider tells us which country your IP address is in. We use this only to decide whether to ask for your consent to cookies (see Section 2).
Cookies and Similar Technologies: We and some of our providers use cookies and browser storage. Section 2 lists them and explains your choices.
Product Analytics: If analytics cookies are allowed in your browser, PostHog records the pages you view and which elements you click, but not the text of what you click. Google Analytics records the pages you view and, depending on its settings, interactions such as scrolling and clicking links. If marketing cookies are also allowed, Google Analytics records when you press a form button on any page, including sign-in and dashboard pages. In that case Google Analytics is also set to look for contact details (an email address, phone number, or postal address) in forms on any page, including sign-in, sign-up, and dashboard pages, and to send any it finds to Google in hashed form with the events it records. Both receive the pages you view inside the signed-in dashboard, whose addresses can contain brand identifiers and ASINs and, on the page you return to after checkout, your plan and a checkout reference; events such as starting a Buy Box check, signing up, or buying a subscription, with the plan, its list price, the currency, and a checkout reference; your browser and device details; and your IP address and the approximate location derived from it. When you are signed in, we also send PostHog your user ID, email address, and plan. When you buy a subscription, our server also reports the purchase directly to PostHog and Google Analytics once Stripe confirms it, but only if analytics was allowed in your browser when you started checkout. PostHog receives your user ID, the plan, its list price, the amount charged, the currency, and a checkout reference. Google Analytics receives the plan, its list price, the currency, a checkout reference, and the identifiers from your Google Analytics cookies, so that it can match the purchase to the one your browser may also have reported and count it once. We do not record session replays of your use of the Services.
MCP Connector Usage: When an AI assistant you connected calls our MCP connector, we record in PostHog the tool it called, whether the call succeeded, how long it took, and your user ID. We do not record the tool's inputs, its results, or the assistant's stated reason for the call.

C. Amazon Product Data (Publicly Available)

Buy Box Checker does not connect to your Amazon Seller Central account and does not use the Amazon Selling Partner or Advertising APIs. To provide the Services, we retrieve publicly available information from Amazon product detail pages (such as the Featured Offer / "Buy Box" seller, price, stock status, and delivery estimates) for the ASINs and locations you choose to monitor, and for public Buy Box checks, using a third-party data collection provider.

Not affiliated with Amazon: Buy Box Checker is an independent tool and is not affiliated with, endorsed by, or sponsored by Amazon.com, Inc. or its affiliates.

D. Information About Amazon Sellers

Amazon product pages show which sellers offer a product. Some sellers are individuals or sole traders, so some of this information is personal information about people who are not our customers. When we check a product page for a customer, or for a public Buy Box check, we collect and store:

the name of the seller holding the Featured Offer ("Buy Box") at each location we check, and for customer monitoring, that seller's Amazon seller ID;
for customer monitoring, when a customer's product loses the Buy Box, a snapshot of the other offers on the product: each seller's name, seller ID, storefront link, price, shipping cost, condition, delivery estimate, and rating count; and
when, and for which delivery location, each check was made.

We store this information with the monitoring data of the customer account that checked the product, including its current product status, Buy Box history, offer snapshots, and alerts (for example, an alert that another seller has taken the Buy Box), and in the results of public Buy Box checks. It is shown in that customer's dashboard and, as the customer sets up, in daily digest emails, in webhooks, and in responses to AI assistants the customer connects through our MCP connector. It is sent to Google Gemini when we generate an AI summary of the customer's account, and anyone with the link to a public check result can see the seller names in it.

We use this information to show customers who holds the Buy Box and who else offers their products, to alert them to changes, and, together with other monitoring data, to produce aggregated statistics that do not identify any seller, brand, or ASIN, such as those on our research page. Our role depends on the purpose:

For a customer's monitoring: when we check a product a customer monitors, and keep the seller information in that customer's monitoring history, offer snapshots, and alerts, we process it for that customer, as its processor under the DPA. The same applies to seller information a customer enters itself, such as its list of authorized sellers.
For our own purposes: we act as an independent controller for public Buy Box checks and when we use seller information, together with other monitoring data, to produce aggregated statistics. We rely on legitimate interests: ours in operating the public Buy Box check and publishing marketplace research, and those of the people who use the check.

Seller information is kept as part of the customer's monitoring history while that account exists, and is deleted when the account is deleted. Seller names in public Buy Box check results are deleted with the check (see Section 5). We do not obtain this information from Amazon's APIs or from the sellers, and we do not use it to contact sellers. If you are a seller, contact us at help@buyboxchecker.com to exercise the rights available to you under applicable law, such as asking what we hold about you or objecting to this processing. We consider every request and respond as the law requires. Where your request concerns seller information we process for a customer's monitoring, we handle it as that customer's processor.

2. Cookies and Similar Technologies

We use cookies and similar browser storage. Essential ones are always on. Analytics and marketing ones are optional, and this is how your choice works:

UK, European Economic Area, and Switzerland: If our hosting provider places your IP address in the United Kingdom, a country of the European Economic Area, or Switzerland, or cannot tell where you are, we ask before using any analytics or marketing cookie or tool, and none of them loads before you make a choice. The banner offers Accept all, Reject all, and Choose. We ask again 6 months after your last choice, and the optional tools stay off until you choose again. In these regions the support chat loads only when you click the chat button.
Everywhere else: Analytics and marketing tools load by default. You can switch either category off in Cookie settings, and we remember your choice for 12 months.
Cookie settings: You can change your choice at any time through the Cookie settings link in the footer of our website's pages, or in the Cookies and tracking section of the Account page in your dashboard. Your choice applies to the browser where you make it. If you switch off a category whose tools are already running, the page reloads so they stop, and while a category is off we delete the cookies and browser storage its tools set on our website each time a page loads.
Global Privacy Control: If your browser sends a Global Privacy Control (GPC) signal, marketing tools stay off in that browser in every region, even if you accepted them before (see Section 6.B).

Essential

Sign-in cookies: cookies whose names begin with sb-, set when you sign in to keep you signed in. They last up to 400 days.
bbc_consent: remembers your cookie choice and when you made it. It lasts 12 months. In the UK, the European Economic Area, and Switzerland we ask again after 6 months.
bbc_cr: records whether you are visiting from a region where we ask for cookie consent. It is a session cookie, which your browser deletes when the browsing session ends.
Cloudflare Turnstile: checks that a person, not a bot, is using our public Buy Box check (it loads when you start filling in the form) and our contact form (it loads when the contact page opens). Cloudflare receives your IP address and browser information for this.

Analytics (optional)

Google Analytics, loaded through Google Tag Manager: the _ga and _ga_4SBRRFRQ29 cookies, which last up to 2 years. If you allow marketing but not analytics, your browser still downloads Google's tag files, because Google Tag Manager also runs the Meta Pixel, but Google Analytics sets no cookies and records nothing. When you start checkout for a paid plan with analytics allowed, our server reads the identifiers in these two cookies and passes them to Stripe with the checkout, to report the purchase to Google Analytics (see Section 1).
PostHog product analytics: a cookie and browser storage entries whose names begin with ph_. The cookie lasts up to 12 months.
bbc_attr, our own cookie: records how you arrived at the site (the campaign parameters of the link you clicked, the referring site, and the page you landed on), so we can tell which campaign led to a public Buy Box check. It is set when you visit without one, and again when you arrive through a link with campaign parameters. It lasts 30 days, and only our servers can read it.
bbc_ga4_purchase_seen, our own session storage entry: when you return from Stripe checkout, it holds the checkout reference so that our analytics and advertising tools count the purchase only once. We write it only if analytics or marketing is allowed in your browser, since the purchase is counted by both. Your browser deletes it when you close the tab, and we delete it on the next page load if both are switched off.

Marketing (optional)

Meta Pixel, loaded through Google Tag Manager: the _fbp cookie (90 days), the _fbc cookie if you arrive from a link on Facebook or Instagram (90 days), and browser storage entries such as lastExternalReferrer. Section 4 explains what Meta receives. When you start checkout for a paid plan with marketing allowed, our server may read the _fbp and _fbc cookies and pass them to Stripe with the checkout, to report the purchase to Meta (see Section 4).
First Promoter referral tracking: its script loads on every page and, when you arrive through an affiliate's link, sets its own cookies and browser storage with names beginning with _fprom, such as _fprom_tid. We attach that value to your Stripe billing records so the affiliate can be credited.
bbc_ref, our own cookie: remembers the referral code in a partner's link for 30 days, so the partner is credited if you sign up later. If you sign up through a link that contains the code, the partner is credited from the link itself, whatever your cookie choice.
Google advertising cookies: cookies whose names begin with _gcl_, which Google's tag may set to measure ads when marketing is allowed.

Support Chat

Our Chatwoot support chat sets cookies whose names begin with cw_, such as cw_conversation, which keep your conversation available across pages for up to 12 months. In the UK, the European Economic Area, and Switzerland, the chat loads only when you click the chat button. Elsewhere it loads on every page, whatever your analytics and marketing choices, because it is part of our support service.

Preferences, Videos, and Other Storage

In the dashboard, your color theme and how you group your ASIN table are saved in your browser's local storage.
Pages with a video show a thumbnail image loaded from YouTube. The YouTube player loads only when you press play, and YouTube may then set its own cookies.

3. How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve the Services, including the monitoring you set up, your dashboard, alerts, daily digests, webhooks, AI summaries, and the MCP connector.
Create and manage your account and team, and keep records of the agreements you accept.
Process payments and send billing-related messages.
Respond to your support requests and messages.
Send you service messages, such as security notices, notices of changes to our terms, and the alerts and digests you set up.
Understand how the Website and Services are used and measure our advertising, using the analytics and marketing tools described in Section 2, as far as your choices allow.
Detect, investigate, and prevent fraud, abuse, and security problems, for example with bot checks and rate limits on public forms.
Create aggregated or de-identified statistics that do not identify you, any individual, your brands, or your specific ASINs, and publish them, for example on our research page. We do not try to re-identify de-identified data.
Comply with the law and enforce our agreements.

Staff access. Authorized Ad Badger staff can view account data when needed to answer your support requests, investigate a problem, or keep the Services secure. They do this in our providers' dashboards and with scripts and database queries our engineers run, and our support team sees the conversations you have with us. Our engineers use an AI coding assistant, Claude from Anthropic, to run some of those scripts and queries, so Anthropic receives what they return, which can include account data such as email addresses, brands, ASINs, and seller names. The Services have no feature that lets our staff sign in to your account as you.

We disclose personal information as follows:

To Service Providers: Companies that provide services to us: hosting and database (Supabase, Vercel), payment processing (Stripe), Amazon product-data collection (a third-party collector), email delivery (Resend), background job processing (Inngest), product and website analytics (PostHog, and Google Analytics with Google Tag Manager), AI features (Google Gemini, for AI summaries of your account and automated replies in our support chat), the AI coding assistant our engineers use (Anthropic, see Section 3), support chat and email (Chatwoot, which we host ourselves on Hetzner servers, and Google Workspace, which hosts our support mailbox), DNS and bot protection (Cloudflare), and referral tracking (First Promoter). Our PostHog project is shared with Ad Badger's other products. A current list, including what each provider processes and where, is published at buyboxchecker.com/sub-processors.
To Meta, for Advertising: We use the Meta Pixel from Meta Platforms, Inc. to measure and improve our ads on Facebook and Instagram. It runs only if marketing cookies are allowed in your browser and your browser does not send a Global Privacy Control signal. Otherwise the pixel does not run and sends Meta no events. If you allow analytics but not marketing, your browser may still download Meta's pixel file, which gives Meta your IP address, your browser information, and the fact that the request came from our site. When the pixel runs, Meta receives your IP address, browser and device information, the address of the page, Meta's cookie identifiers, and these events: a page view; starting a Buy Box check; pressing a form button on one of our public pages, such as the button that starts a Buy Box check; viewing a Buy Box check result; entering your email on one, with the ASIN checked; creating an account, with the plan you chose; and buying a subscription, with the plan, its list price, the currency, and an order reference. The pixel can also record button clicks and basic information about a page on its own. Our page-view tag and our button-click tags do not fire on our sign-in, sign-up, or account setup pages, or on pages of the signed-in dashboard, so opening one of those pages directly does not load the pixel. Also, once the pixel is running in a browser tab, it stays loaded as you move between our pages in that tab without a full page reload, for example through links on our site or when you sign in. When you move to a sign-in, sign-up, account setup, or dashboard page that way, we switch the pixel off before it sends anything for that page, and we discard what it was holding for those pages before we switch it back on for a public page. We do this so that no page view or button press for those pages is sent to Meta. Switching the pixel off stops it sending events to Meta. There are two exceptions: creating an account loads the pixel on the sign-up page, and buying a subscription loads it on the dashboard page you return to after checkout. If the pixel was already loaded and switched off, creating an account switches it back on. In both cases the pixel runs on that page until you move to another page, so Meta can receive button presses on that page, including ones made just before, such as pressing the button that creates your account. The address of the dashboard page you return to after checkout contains your plan and a checkout reference. With each event Meta also receives the address of the page you came from, as your browser reports it. When that is one of our own pages, our site tells your browser to report only our site's address, never the page within it. When you buy a subscription and marketing was allowed in your browser when you started checkout, with no Global Privacy Control signal, our server may also report the purchase to Meta directly, through Meta's Conversions API, once Stripe confirms it: the plan, its list price, the currency, the order reference, Meta's cookie identifiers, your browser's user agent, and the email address used at checkout in hashed form (a one-way code Meta uses to match the purchase to a Meta account). Meta counts it once even when the pixel also reported it. Our server does not send Meta your IP address. Meta uses this information under its own terms and privacy policy as an independent controller, not as our service provider, including to show ads, and may combine it with other information it has about you.
To Sites That Serve Page Content: Some pages load content directly from other companies, which therefore receive your IP address, your browser information, and the fact that the request came from our site: Amazon's image servers (product images in the dashboard), jsDelivr (map outlines on public Buy Box check results and in the dashboard location map), and YouTube (video thumbnails when a page with a video loads, and the video player when you press play). These companies act under their own privacy policies and are not our service providers for this.
At Your Direction: To the people and services you choose: teammates you invite to your account; the webhook URLs you set up for your daily digest; AI assistants you connect through our MCP connector, which receive the account data they request, including seller names; and anyone you share a public Buy Box check link with. Those recipients handle the information under their own terms.
For Legal Reasons: To comply with any court order, law, or legal process, including responding to government or regulatory requests.
In Business Transfers: To a buyer or successor in the event of a merger, restructuring, or sale of assets.
With Your Consent: For any other purpose disclosed by us when you provide the information.

We do not sell personal information for money. Our use of the Meta Pixel and Meta's Conversions API, described above, may count as "sharing" personal information for cross-context behavioral advertising, or as a "sale," under some U.S. state privacy laws. You can opt out as described in Section 6.B.

5. Data Retention

We keep personal information only as long as we need it for the purposes in this Privacy Policy. The periods below apply unless the law requires us to keep something longer or we need it to resolve a dispute or deal with fraud or a security incident.

Account and Monitoring Data: Your profile, team, settings, brands, ASINs, locations, Buy Box history, offer snapshots, alerts, and AI summaries, including the seller information described in Section 1.D, are kept while your account exists, with no fixed age limit on monitoring history. If you ask us to delete your account, we delete this data within 30 days of your request (see Section 6.A).
Billing Records: Your customer record at Stripe, your invoices, and your payment history are kept by Stripe for 7 years for tax and accounting purposes, including after your account is deleted. The customer record is created when you first reach the card step, even if you never add a card. At that point it holds your email address, your account identifier, and the affiliate referral value described in Section 2 if you have one.
Agreement Records: Kept for 6 years after our agreement with you ends, including after your account is deleted, so we can show what was agreed.
Deletion Records: When we delete an account, we keep a record that we did so (the account identifier, a hash of the email address, the dates, and counts of what was deleted) for 6 years, so we can apply the deletion again if we ever restore a backup.
Support Conversations: Chat conversations and emails with our support team are kept for 24 months after the last message, or longer only while needed for a dispute. When the chat widget first loads in a browser, our chat system can also create a visitor record that holds no name, email address, or message. We have not yet set a deletion period for those visitor records.
Contact-Form Messages: The hash of your IP address is deleted after 30 days, and your name, email address, and message after 24 months. The copy forwarded to our support mailbox is kept as a support conversation.
Public Buy Box Checks: The hash of your IP address and the record of how you arrived are deleted after 30 days. The check itself, including its results and any seller name you entered, is deleted after 12 months, and its result page then stops working.
Emails Entered on a Check Result: Deleted after 24 months.
Connected-App Access Records: The codes and tokens an AI assistant uses to connect to your account are deleted 30 days after they expire.
Analytics Data: PostHog and Google Analytics keep analytics data for the retention period that applies in each tool. If you ask us to delete your account, we also delete your PostHog profile and its events. Recordings of dashboard sessions made before we turned session recording off are kept until PostHog's retention period for them ends.
Referral Records: If you ask us to delete your account, we also delete your records at First Promoter, after paying any referral commission still owed to you.
Logs: Our authentication provider's log of sign-ins and other account events, which includes your email address and the IP address used, is kept in our database for security. It is not deleted when your account is deleted, and we have not yet set a deletion period for it. Other server, request, and security logs are kept by our hosting, database, and network providers, email delivery logs (including the text of contact-form messages we forward to our support mailbox) by our email provider, and background job data by our job provider, each for the periods they set.
Cookies: As listed in Section 2.
Backups: Deleted data can remain in our providers' backups until those backups expire, and is used only to restore the Services after a failure. If we restore a backup, we delete again any account that was deleted after the backup was made.
Aggregated Statistics: Statistics that do not identify you, any individual, your brands, or your ASINs may be kept indefinitely.

6. Your Rights and Choices

A. Copies, Corrections, and Deletion

Anyone can ask us for a copy of their personal information, to correct it, or to delete it by emailing help@buyboxchecker.com. Please write from the email address on your account; if you write from another address, we will ask you to confirm the request from that one.

Deleting your account: We delete your account and its data within 30 days of your request, together with your records at PostHog and Chatwoot and your emails in our support mailbox, and we email you when it is done. We delete your records at First Promoter too, once any referral commission owed to you is paid. We keep only what Section 5 says we keep after deletion, including billing records, agreement records, the deletion record, the emails about your deletion request, and the sign-in and other logs described there, which we keep for security. If you are a teammate on someone else's account, we delete your own login and settings; the account's data belongs to its owner. If you used our contact form or entered your email on a Buy Box check result, you can ask us to delete that too.
Getting a copy: We can send you a copy of your monitoring data (brands, ASINs, Buy Box history, offer snapshots, stock events, alerts, and product changes) as JSON and CSV files. You can also export your ASIN table and competing-seller lists as CSV files from the dashboard.
Correcting your data: You can change your email address, password, and settings in the dashboard, and the account owner can change the privacy contact email on the Account page. For anything else, email us.
Information a customer entered about you: If a business customer entered information about you into its account, that customer decides how it is used. If you contact us about it, we will pass your request to that customer.
Emails and connected apps: Daily digest emails include an unsubscribe link, and you can change alert and digest settings in the dashboard. You can disconnect an AI assistant at any time in the Connected Apps section of the Account page.

B. Advertising Opt-Out and Global Privacy Control

Opting out of the Meta Pixel: Switch off Marketing in Cookie settings (see Section 2), or turn on Global Privacy Control in your browser. These choices work per browser, so please set them in each browser you use. We cannot switch the Meta Pixel off for you from our side, for example in response to an email.
Global Privacy Control (GPC): If your browser sends a GPC signal, we treat it as a request to opt out of the sale or sharing of your personal information from that browser, in every region. In that browser, the Meta Pixel and First Promoter's referral tracking do not load, we do not set our bbc_ref referral cookie, and we delete the cookies and browser storage those tools set on our website, even if you accepted marketing cookies before. GPC does not switch off analytics or the support chat; you can switch off analytics in Cookie settings.

C. U.S. State Privacy Rights

Residents of some U.S. states, including California, Colorado, and Virginia, have the right to know about and access, delete, and correct their personal information, and to opt out of its sale or sharing for cross-context behavioral advertising. To exercise the first three, email help@buyboxchecker.com. To opt out of sale or sharing, use Cookie settings or GPC as described in Section 6.B.

We verify a request by confirming it comes from the email address on your account, or by asking for information that matches our records. You may use an authorized agent; we will ask for your signed permission and may ask you to confirm the request with us directly. If we decline your request, you can appeal by replying to our decision, and we will tell you the outcome. We will not treat you differently for exercising these rights.

Ad Badger Inc. is the controller of the personal information described in this Privacy Policy, including the seller information in public Buy Box check results and the seller information we use to produce aggregated statistics (Section 1.D). The exception is personal information we process on behalf of a business customer under the DPA, such as the seller information kept in a customer's monitoring history, offer snapshots, and alerts: for that information, the customer is the controller and we are its processor. We rely on these legal bases:

Contract: to provide the Services you signed up for, manage your account and billing, send the service messages, alerts, and digests you set up, and answer your support requests.
Legitimate interests: to keep the Services secure and prevent fraud and abuse; to follow up on messages you send through our contact form; to understand how our MCP connector is used; to run public Buy Box checks and produce aggregated statistics from public seller information, as described in Section 1.D; to credit the partner whose referral link you signed up through; and to keep records of the agreements you accept, so we can establish or defend legal claims.
Legal obligation: to keep tax and accounting records.
Consent: for analytics and marketing cookies and similar tools. You can withdraw your consent at any time in Cookie settings, without affecting processing that happened before.

You have the right to access, correct, delete, restrict, or receive a portable copy of your personal information; to object to processing based on legitimate interests; to object at any time to direct marketing; and to withdraw consent at any time. To exercise these rights, email help@buyboxchecker.com. You may also complain to the UK Information Commissioner's Office, to the data protection authority where you live or work in the European Economic Area, or to Switzerland's Federal Data Protection and Information Commissioner.

7. International Data Transfers

Ad Badger Inc. is based in the United States. We and most of our service providers store and process personal information in the United States. Our Amazon data collection provider and First Promoter process it in the European Union, and Google may process it in other countries where it has data centers. If you use the Services from the UK, the European Economic Area, or Switzerland, your personal information is transferred to and processed in the United States. Where we process personal information for a business customer under the DPA, those transfers are covered by the Standard Contractual Clauses and UK Addendum in the DPA. To ask about the safeguards for other transfers, email help@buyboxchecker.com.

8. Security

We implement industry-standard security measures (including SSL/TLS encryption) designed to protect your personal information. However, no method of transmission over the internet is 100% secure. You are responsible for maintaining the confidentiality of your account password.

9. Children

The Services are for businesses and are not directed to children. You must be at least 18 years old to create an account. We do not knowingly collect personal information from anyone under 18, and if we learn we have, we will delete it.

10. Changes to Our Privacy Policy

It is our policy to post any changes we make to our Privacy Policy on this page, with the "Last Updated" date at the top. You are responsible for periodically reviewing this page for changes.

11. Contact Information

To ask questions or comment about this Privacy Policy and our privacy practices, or to make a request described in Section 6, contact us at:

Ad Badger Inc. (Buy Box Checker)
Email: help@buyboxchecker.com
Address: 2028 E Ben White Blvd, Ste 240-4800, Austin, TX 78741, USA