Privacy Policy

1. Who we are

OroScout (“we”, “us”, “our”) is a multi-marketplace shopping aggregator that searches Amazon, eBay, Etsy, and other retailers simultaneously. For privacy inquiries contact support@oroscout.com.

2. Data we collect

• Account data — your email address (and your name, if you sign in with Google or add it during setup), plus login timestamps. Collected only if you create an account, which uses a one-time email code or Google sign-in (we never store a password).
• Preference data — your chosen country, currency, and preferred retailers. Stored in session storage before consent; in a first-party cookie for up to one year after consent.
• Search queries — the terms you type or speak into OroScout. Used to fetch results from the marketplaces you select and, if you turn on AI features, to power image search and the shopping assistant. Never sold.
• Usage data — we log your searches (the query and how many results matched) to run and improve the service. If you accept cookies, Google Ads also measures ad-driven actions such as sign-ups and clicks (see “Cookies”).
• AI preference signals — if you are logged in and have opted in to personalization, anonymous signals about product categories you engage with (e.g. material, color, size). No individual browsing history is stored.

3. How we use your data

• To return search results from partner marketplaces.
• To remember your market and currency preferences across visits (with your consent).
• To personalize result ranking based on your past engagement (only with explicit opt-in).
• To send transactional emails (sign-in codes and partner confirmations).
• To monitor site health and detect abuse.

We do not sell your data, share it with data brokers, build advertising profiles of you, or use it to train AI models. With your consent, we use Google Ads conversion measurement to see which ads bring people to OroScout — aggregate measurement only.

4. Cookies

We use one first-party cookie (sz_prefs) to store your preferences. It is set only after you click “Accept” on the consent banner. If you click “Reject”, we use session storage only — data is cleared when you close your tab.

Only if you click “Accept”, we also load Google Ads conversion measurement, which sets Google advertising cookies so we can tell which ads lead to sign-ups or clicks. If you click “Reject”, the tag is never loaded and no advertising cookies are set. We use no other third-party tracking cookies.

5. Affiliate disclosure

OroScout participates in affiliate programs including Amazon Associates, eBay Partner Network, Etsy Affiliates, and others. When you click a product link and make a purchase, we may earn a small commission at no extra cost to you. Clicking an affiliate link may allow the retailer or its affiliate network (such as Rakuten, Awin, or CJ) to set their own cookies on their own sites to attribute the purchase to OroScout — this occurs on their domains, not ours. This never influences how we rank results — see How We Rank.

6. Data sharing

We share data only with the following processors, each bound by data processing agreements:

• Supabase — authentication and account storage (EU region).
• Resend — transactional email delivery.
• Anthropic — AI features (image search, shopping assistant). Queries are not used for training.
• Vercel — hosting and CDN.
• Cloudflare — DNS, DDoS protection, and edge caching.
• Upstash — short-lived caching of search results (no personal data).
• SerpApi — reverse-image lookup when you use image search; the image you upload is processed to find matching products.
• Google — advertising conversion measurement (Google Ads), loaded only after you consent to cookies.

7. Your rights (GDPR / UK GDPR)

If you are in the EU or UK you have the right to:

• Access — request a copy of your personal data.
• Rectification — correct inaccurate data.
• Erasure — ask us to delete your account and associated data.
• Portability — receive your data in a machine-readable format.
• Objection — object to processing based on legitimate interests.
• Withdraw consent — revoke cookie consent at any time by clearing your browser cookies.

To exercise any right, email support@oroscout.com. We will respond within 30 days.

8. California residents (CCPA)

OroScout does not sell your personal information, and does not share it with third parties for monetary or other valuable consideration. If you accept cookies, we use Google Ads to measure which ads work; you can decline this at any time by clicking “Reject” on the cookie banner. For questions about how your data is used, contact support@oroscout.com.

We honor the Global Privacy Control (GPC). If your browser or extension sends a GPC signal, we automatically treat it as an opt-out: no advertising cookies are loaded and the cookie banner is not shown. You do not need to take any further action.

9. Data retention

• Account data — retained until you delete your account.
• Preference cookie — expires after 1 year or when you revoke consent.
• AI preference signals — automatically deleted after 180 days of inactivity, and immediately when you delete your account.
• Search and AI-feature logs (image search and the shopping assistant) — automatically deleted after 90 days. Short-lived server logs are kept only for security monitoring, then discarded.

10. Security

All data is transmitted over HTTPS. We never store passwords — sign-in is passwordless, using a one-time email code or Google sign-in. Our database uses row-level security (RLS) and is hosted on Supabase in the EU.

11. Changes to this policy

We may update this policy from time to time. Material changes will be notified via a banner on the site. The “Last updated” date at the top always reflects the current version.

12. Contact

For all privacy matters: support@oroscout.com