Privacy policy
Operator: exNiche, Melbourne, Australia. ABN: [ABN pending]. Contact: support@exniche.com. Last updated: draft.
What we collect
- Account details: name and email (and a password hash if you sign up with email).
- OAuth profile basics when you use Google or GitHub (name, email, avatar URL if provided).
- A hashed IP address for agent rate limits. We do not store raw IPs for that purpose.
- Search queries from agents and the product search API. We use heuristic redaction for common email addresses, phone numbers and numbered street addresses before storing a query. Detection is incomplete; do not include personal information in searches.
- Account preferences: watch keywords, plan, digest opt-in, and whether an API key exists (we store a hash of the key, not the key itself).
What we do not collect
Card numbers and payment details are handled by Stripe. We never see full card data. Transactional email is sent through Resend. The service is hosted on Cloudflare.
Why we collect it
- To run your account, authenticate you, and send confirmation or reset emails.
- To build the Gap Report: aggregate search misses to support product research; a miss does not verify unmet demand.
- To enforce free-tier and plan limits, and to email the weekly digest if you opt in.
- To process subscriptions and prepaid search credits via Stripe. We store usage counters, credit balances, Stripe customer/payment references and payment receipts for accounting and reversals.
Aggregation rule
An organic agent aggregate is shown after at least 3 requests from at least 2 distinct caller identifiers (hashed IPs or accounts). Researched candidates are separately labelled unverified and retain their source attribution. Gaps never include identities of the agents or shoppers who asked.
Retention
Account data is kept while your account is open. Search-miss aggregates are kept to operate the Gap Report. You can delete your account at any time from the dashboard; that removes your workspace profile, watches, digest preference and API key. Unused search credits are removed. Payment receipts and Stripe payment references are retained for reconciliation and refund/dispute handling. Aggregate gap statistics that no longer identify you may remain.
Your rights (Australian Privacy Principles)
You may ask for access to, or correction of, the personal information we hold about you. You may delete your account from the dashboard (Danger zone). Contact us at support@exniche.com for access or correction requests.
You can turn off the weekly Gap Report email any time in the dashboard, or via the unsubscribe link in every digest email.
Cookies
We use a session cookie to keep you signed in. No tracking cookies. No advertising cookies.
Changes
We may update this policy. Material changes will be noted on this page with a new date.