Privacy Policy
This policy explains what personal data CompSniper (operated by Bluvera LLC) collects, why we use it, who receives it, how long we keep it, and the controls you have. It covers our website, dashboard, API, and the CompSniper connectors for AI assistants such as ChatGPT and Claude. We do not sell personal data or build advertising profiles.
Last updated October 6, 2026
1. Personal data we collect
- Account data. Your email address, name if you provide it, sign-in method, and a securely hashed password or Google sign-in identifier.
- Usage data. The searches you run (keywords, filters, marketplace), when you ran them, result counts, your plan and quota usage, and API keys stored only as hashes.
- Connector data. When you connect an AI assistant, the connector's client name, access and refresh tokens (stored as hashes), and the search requests it sends for you.
- Device and network data. IP address, browser type, and first-party cookies used to keep you signed in and to protect the free plan from abuse.
- Billing data. Plan, invoices, and a Stripe customer identifier. Stripe collects card details directly; we never see or store your full card number.
- Support data. Messages and contact details you send us.
- CompSniper AI. Questions you submit to the CompSniper AI assistant on our site and its answers.
We do not collect sensitive personal data, payment card numbers, government IDs, or the content of your ChatGPT or Claude conversations.
2. Data returned by our tools
Search results contain public marketplace listing details: item title, price, shipping cost, condition, sale or listing date, item location (city or region as shown on the listing), listing format, and a link to the listing. Connector results do not include seller usernames or seller feedback. Account tools return only your own plan, quota, and usage.
3. Why we use it (purposes)
- To create and secure your account and sign you in.
- To run the searches you request and return results, including through connected AI assistants.
- To count usage against your plan, bill you, and manage subscriptions.
- To prevent fraud and abuse of the free plan and keep the service reliable.
- To provide support and send account emails such as password resets and usage notices.
- To send occasional product emails, which you can unsubscribe from at any time.
- To understand product usage in aggregate and improve the service.
4. Who receives it (categories of recipients)
- Payment processor. Stripe, for subscriptions, invoices, and card payments.
- Hosting and infrastructure providers. Our server, database, and encrypted backup providers.
- Email delivery provider. To send account, billing, and support emails.
- Product analytics provider. Privacy-conscious measurement of visits and product usage, not advertising.
- AI processing providers. To filter search results for relevance and to answer CompSniper AI questions.
- AI assistants you connect. ChatGPT (OpenAI) or Claude (Anthropic) receive the results of searches you ask them to run, under their own privacy policies.
- Authorities. Only when legally required, and only the minimum needed.
5. How long we keep it (retention)
- Account, usage, connector, and device data. Kept while your account is active, then deleted or anonymized within 30 days after you close your account or ask us to delete it.
- Connector tokens. Access tokens expire after 1 hour and refresh tokens after 30 days, unless revoked sooner.
- Support messages. Kept for up to 2 years.
- Billing records. Kept as long as tax and accounting law requires, typically up to 7 years.
- Backups. Encrypted backups roll over on a fixed schedule, so deleted data leaves them within 7 months. Backups are only used to restore the service.
6. Your controls
- Disconnect a connector at any time from your ChatGPT or Claude settings, which stops it from searching on your behalf.
- Revoke API keys and update account details from your dashboard.
- Unsubscribe from product emails with the link in any product email.
- Request access to, correction, export, or deletion of your personal data by emailing [email protected]. We complete deletion requests within 30 days.
7. Security
We use HTTPS, hashed passwords, API keys, and connector tokens, short-lived authorization codes with PKCE, encrypted backups, and restricted production access. No online system is perfect, but we use practical safeguards and respond quickly when something goes wrong.
8. International processing
Our servers are in the United States, and our service providers may process data in other countries. Where data moves across borders, we rely on our providers' contractual and security safeguards.
9. Children
CompSniper is intended for businesses and adults, not children under 16, and we do not knowingly collect their data. If you believe a child has provided us data, contact us and we will delete it.
10. Changes and contact
We will update this page when our practices materially change and show the date at the top. Questions or requests: Bluvera LLC, operator of CompSniper, [email protected].
Questions?
Email us at [email protected] and a real person will get back to you.