Personal Data and Privacy Policy

1. Data Controller

Data controller: WhowSell LLC, 1209 Mountain Road Pl NE #7495, Albuquerque, NM 87110, USA. Contact: support@whowsell.com. For users resident in Türkiye, Law No. 6698 (KVKK) is observed; for users resident in the EU, the provisions of the GDPR apply.

2. Personal Data Processed

Identity and Contact Data: full name, email address, and display name (nickname) if any.

Transaction and Subscription Data: your selected plan, subscription and payment records, daily quota usage. Your card number is NOT STORED BY US; card transactions take place within the PCI-DSS compliant Stripe infrastructure.

Application Data: your searches, watchlist and group records, AI analysis requests, and preferences — these belong solely to you and are associated with your account.

Technical Data: IP address, session and login records, browser/device information, interface language, and theme preference.

Support Data: contact/support requests and correspondence content.

3. Purposes of Processing

Creating and managing your account; carrying out subscription, billing, and quota processes; providing and personalizing the Service; responding to support requests; preventing fraud and abuse; fulfilling legal obligations; and measuring and improving service quality.

4. Legal Bases

Your data are processed on the following legal bases: the establishment and performance of a contract (KVKK Art. 5/2-c, GDPR Art. 6/1-b), compliance with a legal obligation (KVKK Art. 5/2-ç, GDPR Art. 6/1-c), legitimate interest (security and abuse prevention — KVKK Art. 5/2-f, GDPR Art. 6/1-f), and, where required, your explicit consent (e.g., non-essential cookies).

5. Parties to Whom Data Are Transferred

Your data are shared only to the extent strictly necessary to provide the Service, with providers in the following categories: database and authentication infrastructure (Supabase), payment institution (Stripe), email delivery service (Resend), and AI evaluation providers.

Under no circumstances are your data SOLD, rented, or shared for marketing purposes with third parties.

Some of our providers are established abroad (particularly the USA and the EU); transfers are limited by the safeguards required under the applicable legislation.

6. Retention Periods

Account data are retained for as long as your account is active. Invoice and payment records are kept for the minimum periods prescribed by tax and commercial legislation. Support correspondence is kept for a reasonable period. Data that have exceeded their retention period are deleted, destroyed, or anonymized.

7. Data Security

Your data are protected by TLS encryption in transit, database-level row-based access control (Row Level Security), role-based authorization, access logs, and regular security reviews. Each user's data are kept isolated from those of others. Secrets (such as API keys) are stored only on the server side and never reach the browser. Your card data are never stored on our systems.

8. Your Rights

Under KVKK Art. 11 and the GDPR, you have the right to learn whether your data are being processed, to request information and rectification, to request their erasure/destruction, to know the third parties to whom they have been transferred, to object to processing, and to claim compensation in the event that you suffer harm.

You may submit your requests to support@whowsell.com; requests are resolved free of charge within 30 days at the latest.

9. Cookies

Essential cookies are used to maintain your session and to enable core functions. Non-essential cookies are used only with your explicit consent. You can manage your preferences through your browser settings.

10. Browser Extension and Product Catalogue

When you start a capture or a scan, the WhowSell Radar browser extension reads publicly available information about the products shown on the Amazon pages you are viewing: data that Amazon displays publicly on that page, such as the product identifier, name, brand, image, price, rating and sales information.

This information is used both to build the lists in your own account and to update the shared product database that powers WhowSell's analysis, price history and product research features. These records relate to products and are not linked to user identity; which user viewed which product is not written to that database.

The extension does not collect your browsing history. The addresses of the pages you visit, tab titles and visit times are neither recorded nor transmitted to us. Nothing is sent during ordinary browsing; collection runs only when you start an action.

When you are signed in, the extension displays your name and e-mail address in order to show which account is active and to determine the scope of your subscription. The extension does not store this information and does not share it with third parties. Your settings, panel preferences and captured list are kept on your own device only.

To prevent abuse of the service, technical usage counters are kept per account; these counters contain no product information. Data obtained through the extension is not sold or transferred to third parties and is not used for any purpose other than those described here.

11. Changes and Contact

This policy may be updated from time to time; the current version is published on this page. For your questions and requests: support@whowsell.com.