Privacy policy
Effective September 26, 2026
ThamaSpy ("we", "us") helps online sellers track competitors' product prices and stock. This policy explains what information we collect when you use the ThamaSpy website, dashboard (app.thamaspy.com) and Chrome extension, why we collect it, and the choices you have. Questions: support@thamaspy.com.
What we collect
- Account information. Your email address. If you sign in with Google, we also receive your name, profile picture URL and a Google account identifier, which Google shares when you approve the sign-in. We do not receive your Google password.
- Products you track. The address (URL) of each product page you choose to track, and the product's public details such as its name, image, prices, and stock status.
- Your settings and alerts. Your alert rules, email preferences, timezone, and the alerts we generate for you, including whether you have read them.
- Billing information. If you subscribe, our payment processor Stripe collects your card and billing details. We never see or store your full card number. We store your Stripe customer and subscription identifiers, your plan, and its status.
- Basic usage and technical data. Our hosting providers keep standard server logs (such as IP address, time and request) for security and troubleshooting. Our website and dashboard use Cloudflare Web Analytics, which counts page views without cookies and without tracking you across sites.
What the Chrome extension does
The extension reads a web page only when you open its popup on that page (using Chrome's "active tab" permission). It reads the product information on that page so it can show it to you, and sends it to ThamaSpy only when you click Track. It does not read your browsing history, other tabs, or pages where you don't open it, and it does not track what you do online.
How we use information
- To provide the service: checking the product pages you track, recording changes, and showing you price history.
- To send the emails you ask for: sign-in links, price and stock alerts, and daily digests.
- To manage your subscription and plan limits.
- To keep the service secure, prevent abuse, and fix problems.
We do not sell your personal information, and we do not use it for advertising.
Who we share it with
We use these service providers to run ThamaSpy. They process information only to provide their service to us.
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Database, sign-in, and server functions | United States |
| Railway | Runs the service that checks product pages and sends alerts | United States |
| Cloudflare | Hosts our website and dashboard; privacy-friendly analytics; email forwarding for support | Global network |
| Resend | Delivers our emails | United States |
| Stripe | Payments and billing | United States and other countries |
| "Continue with Google" sign-in, if you choose it | United States and other countries |
Because these providers are based in or operate from the United States, your information is stored and processed outside Canada and may be subject to the laws of those countries. We may also disclose information if required by law.
How long we keep it
We keep your account information for as long as your account exists. When you delete your account (Settings → Delete account in the dashboard), we immediately delete your account, tracked products, alerts and settings, and cancel any subscription. Price history of public product pages is kept because it is shared by everyone tracking the same product, but nothing links it to you after deletion. Stripe keeps billing records as required for tax and accounting purposes, and backups expire on our providers' normal schedules.
Your choices and rights
- You can change your email preferences or turn alert emails off at any time, from the dashboard, the extension, or the link in any alert email.
- You can delete your account at any time from the dashboard.
- You can ask us to access, correct, or delete your personal information, or ask questions about how we handle it, by emailing support@thamaspy.com. We will respond within 30 days.
Security
Information is encrypted in transit, access to your data is restricted to your account by database security rules, and payment details are handled by Stripe. No system is perfectly secure, but we work to protect your information and will notify you and the appropriate authorities of a breach as required by law.
Children
ThamaSpy is a business tool and is not intended for anyone under 16. We do not knowingly collect information from children.
Changes
If we make material changes to this policy, we will update the date above and notify account holders by email before the changes take effect.
Contact
ThamaSpy, support@thamaspy.com