PricePush

Last Updated: 3 December 2024

Effective Date: 3 December 2024

1. Introduction

PricePush ("PricePush", "Selanto Apps", "we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose and safeguard your information when you use our service located at pricepush.app (the "Service").

PricePush is a service operated by Selanto Apps, a sole proprietorship of Antonio Cappiello, established in the Netherlands and registered with the Dutch Chamber of Commerce (Kamer van Koophandel) under number 75803097, with registered office at:

Selanto Apps
Nehrusingel 122
3066 VN Rotterdam
Netherlands

VAT number (BTW-nummer): NL002467486B73

The Service is intended primarily for use by businesses and professionals, such as app developers, studios and agencies, and is not directed to individuals under 18 years of age.

Please read this Privacy Policy carefully. By accessing or using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, you must not use the Service.

This Privacy Policy is incorporated into and forms part of our Terms of Service. Capitalized terms used but not defined in this Privacy Policy have the meanings given to them in our Terms of Service.

2. Information We Collect

We collect information that you provide directly to us, information we obtain automatically when you use the Service, and information from third-party sources.

2.1 Information You Provide to Us

Account Information

Name and email address (when you create an account or authenticate via OAuth)
Profile picture (if provided through OAuth authentication)
Account preferences and settings

Store Account Credentials

Google Play service account JSON files (encrypted before storage)
App Store Connect API keys, Key IDs and Issuer IDs (encrypted before storage)
Package names (Google Play) and bundle IDs (App Store)
Store account connection history

App and Product Data

App names, IDs and metadata
Product/SKU information from your store accounts
Current and calculated prices
Custom pricing settings (tier multipliers, rounding rules)
Price push history and results

Payment and Billing Information

Payments are processed through LemonSqueezy, a third-party payment processor or merchant of record
We do not store credit card numbers or full payment details
We receive and store LemonSqueezy customer IDs, subscription status and limited billing information
Billing addresses and payment history (as provided by LemonSqueezy or similar provider)

Communications

Email addresses for waitlist signups
Support requests and communications
Feedback and survey responses

2.2 Information We Collect Automatically

When you use the Service, we automatically collect certain information about your device and usage, such as:

Device Information

Device fingerprints
Browser type and version
Operating system
Device identifiers

IP Address and Location

IP addresses
Approximate geolocation (city, region, country, timezone) derived from IP

Usage Data

Pages and screens visited
Features used and buttons clicked
API calls made via the Service
Time spent on the Service

Technical Data

User agent string
Browser language
Screen resolution
Referrer URLs

Session Data

Login sessions
Authentication tokens
Session duration

Event Logs

Actions performed (e.g. connecting store accounts, creating price pushes)
Errors encountered
System events related to performance and security

2.3 Information from Third Parties

We may receive information about you from third-party services, including:

OAuth Providers: When you authenticate via Google OAuth, we receive your basic profile information (such as name, email address, profile picture).
Payment Processors / Merchants of Record: LemonSqueezy (or similar providers) provides payment status, subscription details and limited billing information.
App Stores: When you connect store accounts, we access your app and product data via App Store Connect and Google Play APIs.
Exchange Rate Services: We fetch currency exchange rates and related data from third-party APIs for the purpose of calculating prices.

3. How We Use Your Information

We use the information we collect for the following purposes, to the extent permitted by applicable law:

Service Provision: To provide, operate, maintain and improve the Service, including price calculations, localized pricing, store integrations and API access.

Account Management: To create and manage your account, authenticate users, manage subscriptions and provide account-related functionality.

Store Integration: To connect to your App Store and Google Play accounts, fetch product and pricing data, and update prices on your behalf when you instruct us to do so.

Payment Processing and Billing: To process payments (via LemonSqueezy or similar providers), manage subscriptions, handle billing inquiries and comply with tax and accounting obligations.

Communication: To send service-related notifications (such as security alerts, changes to the Service or Terms), respond to inquiries, and provide customer support.

Security and Fraud Prevention: To detect, prevent and address security incidents, fraud, abuse and suspicious activity, and to protect the rights and safety of PricePush, our users and third parties.

Analytics and Improvement: To analyze how the Service is used, understand usage trends, improve performance and reliability, and develop new features or services.

Legal and Compliance: To comply with legal obligations, enforce our Terms of Service and other agreements, and establish, exercise or defend legal claims.

Marketing (optional): To send you promotional communications about the Service, new features, offers or updates, in accordance with applicable law. You can opt out of marketing communications at any time (see section 7.5).

4. How We Share Your Information

We do not sell, rent or trade your personal information. We may share your information only in the following circumstances:

4.1 Service Providers and Subprocessors

We share information with trusted third-party service providers who assist us in operating the Service and performing related business functions, such as:

Hosting and Infrastructure: e.g. Vercel (hosting), MongoDB Atlas (database)
Payment Processing / Merchant of Record: e.g. LemonSqueezy (payment processing, subscription/billing management)
Email Services: e.g. Resend (transactional emails)
Authentication: e.g. OAuth providers (Google), NextAuth.js integration
Analytics and Logging: internal or third-party analytics tools and logging services

These service providers process your information on our behalf and are contractually obligated to protect your information and use it only for the purposes we specify.

4.2 App Store APIs

When you connect your store accounts, we use your credentials to access App Store Connect and Google Play Console APIs. This is necessary to:

fetch app, product and pricing data
apply price changes you configure in the Service

Your store credentials and access tokens are encrypted and stored securely. We do not share your store credentials with any third parties other than the respective store APIs, as required to provide the Service.

4.3 Legal Requirements

We may disclose your information if required by law or in good faith belief that such action is necessary to:

Comply with a legal obligation or valid legal process (including subpoenas, court orders or warrants)
Respond to lawful requests by public authorities or regulatory agencies
Enforce our Terms of Service or other agreements
Protect the rights, property or safety of PricePush, our users or the public

4.4 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy or sale of some or all of our assets, your information may be transferred to the acquiring or successor entity. We will notify you of any such change in ownership or control where required by law.

4.5 Aggregated and Anonymized Data

We may share aggregated, anonymized or de-identified information that cannot reasonably be used to identify you. This may include usage statistics, trends and analytics for business, research or marketing purposes.

5. Data Security

We implement industry-standard technical and organizational security measures to protect your information, including:

Encryption: Sensitive data (such as store credentials and API keys) is encrypted at rest using industry-standard algorithms.
Secure Transmission: All data transmitted between your device and our servers uses HTTPS/TLS encryption.
Access Controls: Access to personal data is restricted to authorized personnel who need it for their job duties.
Authentication: Strong authentication requirements for account access.
Security Updates: Regular security updates and maintenance of infrastructure and dependencies.
Secure Storage: Data is stored in secure, access-controlled databases and systems.

Despite our efforts, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. You use the Service at your own risk.

You are responsible for maintaining the confidentiality of your account credentials and for all activities that occur under your account. Please notify us immediately if you suspect any unauthorized access to or use of your account.

6. Data Retention

We retain your information only for as long as reasonably necessary to provide the Service, fulfill the purposes described in this Privacy Policy, and comply with legal, accounting or reporting requirements, unless a longer retention period is required or permitted by law.

In general:

Account Data: Retained while your account is active and for a reasonable period after account closure for legitimate business and legal purposes (such as record-keeping and dispute resolution).
Store Credentials: Retained while your account is active and until you disconnect store accounts or delete your account.
Usage and Analytics Data: Retained for up to approximately 2 years for analytics and service improvement.
IP Addresses and Device Fingerprints: Retained for up to approximately 90 days for security and fraud prevention.
Event Logs: Retained for up to approximately 1 year for troubleshooting and security.
Payment Records: Retained as required by law (typically up to 7 years for tax and accounting purposes).

When you delete your account, we will delete or anonymize your personal information within a reasonable period (typically within 30 days), except where we are required to retain it by law or for legitimate business purposes (such as fraud prevention or dispute resolution).

We may retain aggregated or anonymized data indefinitely for analytics and business purposes.

7. Your Privacy Rights

Depending on your location and applicable law, you may have certain rights regarding your personal information. We will honor these rights to the extent required by applicable law.

7.1 Access and Portability

You have the right to access and receive a copy of your personal information that we hold. You can access much of this information through your account settings. For additional data, you can contact us at contact@selantoapps.com.

7.2 Correction and Update

You can update most of your personal information through your account settings. If you need to correct information that cannot be updated through the Service, you can contact us and we will make reasonable efforts to correct it.

7.3 Deletion

You can request deletion of your account and personal information by contacting us. We will delete your personal information within a reasonable period (typically within 30 days), except where retention is required by law or for legitimate business purposes.

7.4 Objection and Restriction

You may object to certain processing of your information or request that we restrict processing (for example, where you believe the data is inaccurate or processing is unlawful). We will comply with such requests where required by law.

7.5 Opt-Out of Marketing

You can opt out of marketing communications at any time by clicking the "unsubscribe" link in our marketing emails or by contacting us. Please note that you cannot opt out of certain service-related communications (such as security alerts, important account notifications or legal updates) that are necessary for the operation of the Service.

7.6 Data Portability

You may request a copy of certain personal data in a structured, commonly used and machine-readable format, and you may request that we transfer this data to another controller where technically feasible and required by law.

7.7 Exercising Your Rights

To exercise any of these rights, please contact us at contact@selantoapps.com. We will respond to your request within the time period required by applicable law (typically within 30 days). We may need to verify your identity before processing certain requests.

Some rights may be limited or unavailable depending on your jurisdiction and the nature of the information. If we cannot fulfill a request, we will explain why, to the extent legally permitted.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to collect and store information about your use of the Service.

Types of cookies/technologies we may use include:

Essential Cookies: Required for the Service to function properly (e.g. authentication, session management, security).
Functional Cookies: Help remember your preferences and settings.
Analytics Cookies: Help us understand how the Service is used (which pages are most visited, average session duration, etc.).
LocalStorage / SessionStorage: Used to store UI preferences and temporary cached data (such as recent settings or exchange rates).

Most web browsers allow you to control cookies through their settings, including blocking or deleting cookies. However, disabling certain cookies may impact the functionality of the Service (for example, you may not be able to stay logged in).

We currently do not use cookies or similar technologies for interest-based advertising or to share browsing data with advertising networks.

9. International Data Transfers

Your information may be transferred to and processed in countries other than the country in which you are located. These countries may have data protection laws that differ from those in your country.

In particular, our service providers (such as hosting, database and email providers) may process personal data in the European Economic Area (EEA), the United States and other countries.

Where we transfer personal data from the EEA or the United Kingdom to countries that have not been recognized as providing an adequate level of data protection, we use appropriate safeguards, such as:

Standard Contractual Clauses (SCCs) approved by the European Commission or relevant authorities, and/or
Ensuring that the recipient is subject to other appropriate safeguards recognized by applicable data protection laws.

By using the Service, you acknowledge that your personal information may be transferred to and processed in countries outside your country of residence, as described in this Privacy Policy.

10. Children's Privacy

The Service is not intended for children under the age of 18 (or the age of majority in your jurisdiction). We do not knowingly collect personal information from children under 18.

If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately. If we become aware that we have collected personal information from a child without appropriate consent, we will take steps to delete such information.

11. California Privacy Rights (CCPA – if applicable)

If you are a resident of California and the California Consumer Privacy Act (CCPA) applies to our processing of your personal information, you may have certain rights, including:

The right to know what categories of personal information we collect, use, disclose and (if applicable) sell.
The right to request deletion of personal information (subject to certain exceptions).
The right to opt out of the "sale" of personal information (we do not sell personal information as "sale" is defined under the CCPA).
The right not to receive discriminatory treatment for exercising your CCPA rights.

To exercise your California privacy rights (if applicable), you can contact us at contact@selantoapps.com. We will take reasonable steps to verify your identity and respond within the time period required by law.

12. European / UK Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, the General Data Protection Regulation (GDPR) or UK GDPR may provide you with specific rights regarding your personal data, including:

Right of access to your personal data
Right to rectification of inaccurate or incomplete data
Right to erasure ("right to be forgotten")
Right to restrict processing
Right to data portability
Right to object to certain processing (including where processing is based on legitimate interests)
Right to withdraw consent at any time, where processing is based on consent

Legal Bases for Processing

We process your personal data based on one or more of the following legal bases:

Contractual necessity: where processing is necessary to perform our contract with you (e.g. to provide the Service).
Legitimate interests: where processing is in our legitimate interests (or those of a third party) and not overridden by your data protection interests or fundamental rights and freedoms (e.g. security, analytics, fraud prevention, service improvement).
Legal obligations: where processing is necessary to comply with a legal obligation (e.g. tax and accounting rules).
Consent: where you have given consent for specific processing activities (e.g. certain marketing communications). You may withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise your GDPR/UK GDPR rights, you can contact us at contact@selantoapps.com. You also have the right to lodge a complaint with your local data protection authority.

In the Netherlands, the supervisory authority is:

Autoriteit Persoonsgegevens
Website: https://www.autoriteitpersoonsgegevens.nl

13. Third-Party Services

The Service integrates with third-party services that have their own privacy policies and terms, including but not limited to:

LemonSqueezy: payment processing and subscription management
Google OAuth: authentication and sign-in
Apple App Store Connect: App Store API access
Google Play Console: Google Play API access
Vercel: hosting and infrastructure
MongoDB Atlas: database hosting
Resend: email delivery

We are not responsible for the privacy, security or data practices of third-party services. We encourage you to review their privacy policies when you use their services in connection with the Service.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements or other factors. When we make changes, we will:

Post the updated Privacy Policy on this page with a new "Last Updated" date; and
Where appropriate, notify you by email or by displaying a prominent notice within the Service.

Your continued use of the Service after the effective date of the updated Privacy Policy constitutes your acceptance of the changes. If you do not agree with the updated Privacy Policy, you should stop using the Service and may delete your account.

15. Data Controller Information

For purposes of applicable data protection laws (such as the GDPR), the data controller is:

Selanto Apps (PricePush)
Nehrusingel 122
3066 VN Rotterdam
Netherlands

Email: contact@selantoapps.com

Website: pricepush.app

16. Contact Us

If you have any questions, concerns or requests regarding this Privacy Policy or our data practices, you can contact us at: