Privacy Policy — Review Alert

This Privacy Policy explains how Review Alert ("we", "our", or "the Extension") collects, uses, and protects your information when you use our Chrome Extension and related services. We are committed to protecting your privacy and handling your data responsibly.

1. Who We Are

Review Alert is a Chrome browser extension that monitors Amazon product reviews and sends email alerts when negative reviews are detected. Our service is operated independently.

For privacy-related inquiries, contact us at: privacy@reviewalert.app

2. What Data We Collect

Data	Why We Collect It	Where It's Stored	Retention
Email address	To send you negative review alert notifications	Your browser (local) + our server (Supabase)	Until you request deletion
Amazon ASIN codes	To identify which products to monitor	Your browser (local) + our server (Supabase)	Until you request deletion
Review content (title, star rating)	To detect negative reviews and include in notifications	Your browser (local) only	Cleared when extension is removed
Subscription plan & expiry date	To verify Pro plan access	Our server (Supabase)	Until you request deletion

3. What We Do NOT Collect

Amazon account credentials or login information
Browsing history or activity outside Amazon review pages
Credit card or payment information (handled entirely by Lemon Squeezy)
Device identifiers, IP addresses, or location data
Any data from pages other than Amazon product review pages

4. How We Use Your Data

Email address: Used solely to send you negative review alert notifications and transactional emails (e.g., payment confirmation).
ASINs: Used solely to identify which Amazon products to monitor on your behalf.
Review content: Used solely to detect new negative reviews and generate notification content. Review data is processed locally in your browser and is not stored on our servers.

We do not use your data for advertising, profiling, or any purpose beyond providing the service you signed up for.

5. How Amazon Review Pages Are Accessed

The Extension fetches Amazon review pages directly from within your browser using your existing Amazon session (cookies). This means:

Amazon sees the request as coming from your browser — your account is never shared with us.
Your Amazon cookies are never transmitted to our servers.
We only read the publicly visible review content on the page.

6. Third-Party Services

Resend (Email Delivery)

We use Resend to deliver email notifications. Your email address and review content (title, star rating, ASIN) are transmitted to Resend for this purpose. Resend's privacy policy: resend.com/legal/privacy-policy

Supabase (Database)

We use Supabase to store your email address, ASIN watchlist, and subscription status. Supabase is hosted on AWS infrastructure in the United States. Supabase's privacy policy: supabase.com/privacy

Lemon Squeezy (Payment Processing)

Payments are processed by Lemon Squeezy. We never see or store your credit card information. Lemon Squeezy acts as the Merchant of Record. Their privacy policy: lemonsqueezy.com/privacy

Vercel (Hosting)

Our backend API is hosted on Vercel. Vercel's privacy policy: vercel.com/legal/privacy-policy

7. Data Security

We take reasonable technical measures to protect your data:

All data transmission uses HTTPS encryption
API keys and credentials are stored as server-side environment variables, never exposed to clients
Input validation is applied on all API endpoints to prevent injection attacks
Database access is restricted to server-side functions only

While we implement these safeguards, no method of transmission over the internet is 100% secure. In the event of a data breach that may affect your personal information, we will notify you by email as soon as reasonably possible.

8. Your Rights

You have the right to:

Access: Request a copy of the personal data we hold about you.
Correction: Request correction of inaccurate data.
Deletion: Request deletion of your account and all associated data. We will process this within 30 days.
Withdraw consent: Stop using the Extension at any time. Uninstalling the Extension clears all locally stored data immediately.

To exercise any of these rights, email us at privacy@reviewalert.app with the subject line "Data Request".

9. International Users

Our service is available internationally. If you are located in the European Economic Area (EEA), your data is transferred to and processed in the United States. We ensure appropriate safeguards are in place for such transfers.

EEA users have additional rights under the GDPR, including the right to lodge a complaint with your local data protection authority.

10. Children's Privacy

The Extension is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us immediately at privacy@reviewalert.app.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will update the "Last Updated" date below and, where appropriate, notify you by email. We encourage you to review this policy periodically.

12. Contact Us

For any privacy-related questions, data requests, or concerns:

Email: privacy@reviewalert.app

Response time: We aim to respond within 5 business days.

Last updated: June 21, 2026