Privacy Policy

Introduction

Reva Labs ("we," "us," or "our") operates ShopLater, an AI-powered shopping wishlist and price tracking service. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, applications, and related services (collectively, the "Service").

We are committed to protecting your privacy and being transparent about our data practices. Please read this Privacy Policy carefully. By using ShopLater, you consent to the data practices described in this policy. If you do not agree with our policies and practices, please do not use our Service.

This Privacy Policy may change from time to time. We will notify you of any material changes by updating the "Last updated" date and, where appropriate, through other communication channels.

Information We Collect

We collect information in several ways: directly from you when you provide it, automatically when you use the Service, and from third-party sources when you choose to authenticate through them.

Information You Provide Directly

• Account Information: When you create an account, we collect your email address. If you sign in using Google, we receive your email address and basic profile information (such as your name) from Google.
• Shopping Lists and Items: The lists you create, including list titles, emojis, and notes you add. The items you save, including custom names, notes, and organization preferences.
• Preferences and Settings: Your currency preference, country/region settings, preferred stores for searching, and notification preferences for price tracking.
• Price Tracking Configuration: Products you choose to track, price drop thresholds you set, and tracking frequency preferences (daily or weekly).
• Communications: If you contact us for support or feedback, we collect the content of your messages and any contact information you provide.

Information Collected Automatically

• Usage Data: Information about how you interact with ShopLater, including features you use, pages you visit, searches you perform, items you add, lists you create, and actions you take within the Service.
• Device and Browser Information: Your device type, operating system, browser type and version, screen resolution, and language preferences.
• Network Information: Your IP address, which may be used to infer your approximate geographic location (country or region level) for providing relevant store and currency defaults.
• Cookies and Similar Technologies: We use cookies and similar tracking technologies to maintain your session, remember your preferences (such as sidebar state), and collect analytics data. See the "Cookies" section below for more details.

Information from Third Parties

• Authentication Providers: If you sign in using Google OAuth, we receive your email address and basic profile information that you have authorized Google to share with us.
• Product Data from Retailers: When you add products or search for items, we retrieve product information (names, descriptions, images, prices) from third-party retailers and data providers. This data relates to products, not to you personally.

How We Use Your Information

We use the information we collect for the following purposes:

Providing and Operating the Service

• Create and manage your account
• Store and sync your shopping lists and items across devices
• Process product URLs you submit and extract product details
• Enable product search across multiple retailers based on your preferences
• Track prices for products you've opted into monitoring
• Send you price drop alerts and other transactional emails you have requested
• Enable list sharing features when you choose to share lists

Improving and Personalizing the Service

• Use AI to automatically generate concise product names and organize your items
• Customize your experience based on your country, currency, and store preferences
• Analyze usage patterns to understand how people use ShopLater and identify areas for improvement
• Develop new features and functionality
• Fix bugs and improve performance

Communications

• Send you a welcome email when you create an account
• Send price drop notifications and tracking status updates that you have opted into
• Respond to your support inquiries and feedback
• Send important service announcements (such as security alerts or significant changes to the Service)

Security and Compliance

• Protect against unauthorized access and abuse of the Service
• Detect and prevent fraud, spam, and other harmful activities
• Comply with legal obligations and respond to lawful requests
• Enforce our Terms of Service

AI and Automated Processing

ShopLater uses artificial intelligence to enhance your experience. Here's how AI interacts with your data:

• Product Name Generation: When you add products, our AI may automatically generate concise, readable names from lengthy retailer product titles. This processing uses product information (not your personal data).
• Item Organization: AI helps categorize and organize items based on product characteristics.
• Product Enrichment: We use AI to extract and structure product specifications and details from retailer data.

Our AI processing is powered by OpenAI's language models. When processing product information through AI:

• We send product data (names, descriptions, specifications) to OpenAI for processing
• We do not send your personal information (email, account details) to AI providers
• AI-generated content is stored in our database and associated with your items
• You can edit or override any AI-generated content at any time

Information Sharing

We do not sell your personal information. We share information only in the following limited circumstances:

Service Providers

We work with third-party service providers who help us operate and improve ShopLater. These providers have access to your information only to perform specific tasks on our behalf and are obligated to protect it. Our key service providers include:

• Convex: Our database and backend infrastructure provider, which stores your account data, lists, and items
• Resend: Our email delivery service, which sends transactional emails including welcome emails and price alerts
• PostHog: Our analytics platform, which helps us understand how people use ShopLater (see Analytics section below)
• OpenAI: Provides AI language models for product name generation and enrichment
• Google: Provides authentication services (if you choose to sign in with Google) and product search capabilities
• Vercel: Our hosting provider for the ShopLater web application

When You Share Lists

If you use ShopLater's list sharing feature, the people you share with will be able to see the contents of that shared list, including item names, notes, and product information. You control who can access your shared lists and can revoke access at any time.

Legal Requirements

We may disclose your information if required to do so by law or in response to valid legal requests, such as subpoenas, court orders, or government demands. We may also disclose information when we believe in good faith that disclosure is necessary to:

• Protect our rights, property, or safety
• Protect the safety of our users or the public
• Investigate potential violations of our Terms of Service
• Detect, prevent, or address fraud or security issues

Business Transfers

If Reva Labs is involved in a merger, acquisition, sale of assets, or bankruptcy, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your information.

Cookies and Tracking Technologies

We use cookies and similar technologies to operate ShopLater and collect usage information. Here's what we use and why:

Essential Cookies

These cookies are necessary for ShopLater to function properly. They include:

• Authentication cookies: Keep you logged in and maintain your session
• Preference cookies: Remember your settings, such as sidebar state and display preferences

Analytics

We use PostHog for product analytics to understand how people use ShopLater. PostHog collects:

• Pages you visit and features you use
• Actions you take (such as creating lists, adding items)
• Device and browser information
• General location (country/region level, derived from IP)

We use this data to:

• Understand which features are most useful
• Identify and fix problems
• Make informed decisions about product development

PostHog data is associated with your ShopLater user ID to help us understand user journeys, but we do not use this data for advertising purposes. You can learn more about PostHog's privacy practices at posthog.com/privacy.

Data Retention

We retain your information for as long as your account is active or as needed to provide you with the Service. Specifically:

• Account data: Retained while your account is active and for a reasonable period after deletion to allow for account recovery and comply with legal obligations
• Lists and items: Retained while your account is active. Deleted items may be recoverable for a short period before permanent deletion
• Price tracking data: Historical price data is retained to show price trends. Tracking subscriptions expire after a set period and can be renewed
• Analytics data: Aggregated analytics may be retained indefinitely, but individual session data is typically retained according to PostHog's data retention policies
• Email logs: Transactional email records are retained for a limited period for debugging and compliance purposes

When you delete your account, we will delete or anonymize your personal information within a reasonable timeframe, except where we are required to retain it for legal, regulatory, or legitimate business purposes.

Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using HTTPS/TLS
• Secure authentication through email verification (OTP) or Google OAuth
• Access controls limiting who can access your data within our systems
• Regular security reviews of our infrastructure and practices
• Use of reputable, security-focused service providers

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security. You are responsible for maintaining the security of your account credentials and for any activity that occurs under your account.

Your Rights and Choices

You have several rights and choices regarding your personal information:

Access and Portability

You can access your shopping lists, items, and preferences directly through the ShopLater interface at any time. If you need a copy of your data in a portable format, please contact us.

Correction

You can update your account information, edit your lists and items, and modify your preferences directly within ShopLater.

Deletion

You can delete individual items and lists within ShopLater. To delete your entire account and associated data, you can use the account deletion option in your settings or contact us at support@shoplater.ai.

Email Preferences

You can manage your price tracking notifications and email preferences within your account settings. You can also unsubscribe from non-essential emails using the unsubscribe link in any email we send. Note that you cannot opt out of essential service communications (such as security alerts or significant changes to the Service).

Price Tracking

You can enable, modify, or disable price tracking for any product at any time through the ShopLater interface. Tracking subscriptions will automatically expire after their set duration unless renewed.

Children's Privacy

ShopLater is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us at support@shoplater.ai.

If we learn that we have collected personal information from a child under 13, we will take steps to delete that information as quickly as possible.

International Data Transfers

ShopLater is operated from and our servers are located in the United States. If you are accessing ShopLater from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States and other countries where our service providers operate.

By using ShopLater, you consent to the transfer of your information to countries outside your country of residence, which may have different data protection rules than your country. We take steps to ensure that your information receives an adequate level of protection in the jurisdictions in which we process it.

Third-Party Links and Services

ShopLater contains links to third-party websites, primarily retailer websites where you can purchase products. When you click on these links, you leave ShopLater and are subject to the privacy policies of those third-party sites.

We are not responsible for the privacy practices or content of third-party websites. We encourage you to review the privacy policies of any third-party sites you visit.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make changes:

• We will update the "Last updated" date at the top of this page
• For material changes that significantly affect how we use your personal information, we will provide more prominent notice (such as an email notification or in-app notice)
• We will give you reasonable advance notice before material changes take effect

Your continued use of ShopLater after changes become effective constitutes your acceptance of the revised Privacy Policy. We encourage you to periodically review this page to stay informed about our privacy practices.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: support@shoplater.ai
• Privacy Inquiries: For specific privacy-related requests (such as data access, correction, or deletion), please include "Privacy Request" in your email subject line

We will respond to your inquiry within a reasonable timeframe, typically within 30 days for privacy-related requests.