Privacy Policy

Last updated: July 28, 2026

This policy describes what data the Make an Offer service processes, for merchants (account holders) and for their customers (shoppers who submit offers).

1. Data we collect

• Merchant account data: email address, password (stored as a salted hash), business name, notification email, website domains, webhook URL, and your Stripe Connect account identifier.
• Shopper offer data: name, email address, shipping address, phone number, product details, offer amount and quantity, and the resulting offer status.
• Payment card data: card details are sent by the shopper's browser directly to Stripe and never touch or persist on our servers. We store only the Stripe payment identifiers and the card's brand and last four digits for display.
• Technical data: standard server logs (IP address, user agent, timestamps) kept for security and debugging.

2. How we use data

• To operate the offer workflow: authorizing, capturing, and releasing payments; sending offer-status emails; delivering signed order webhooks to systems the merchant configures.
• To secure the Service (site-key and domain checks, webhook signatures, fraud prevention).
• We do not sell personal data or use it for third-party advertising.

3. Who data is shared with

• Stripe — payment processing on the merchant's connected account (Stripe's privacy policy).
• The merchant — shoppers' offer and shipping details are shared with the merchant they made the offer to, including via webhooks to the merchant's own website.
• Resend — our transactional email provider, which processes recipient addresses and email content.
• Infrastructure providers hosting the Service and its database.

4. Retention

Offer records are retained while the merchant's account is active, so merchants keep an order history. Merchants may request deletion of specific offer records; shoppers may request deletion of their personal data via the merchant or by contacting us directly.

5. Your rights

Depending on your jurisdiction, you may have rights to access, correct, export, or delete your personal data. Contact us at kevin.hln.int@gmail.com and we will respond within 30 days.

6. Changes

We will post any changes to this policy on this page and update the date above. Material changes will be announced to merchants by email.