This Privacy Policy explains how NORELIX LIMITED, trading as "PriceYou" (Company No. 817569) ("PriceYou," "we," "us"), collects, uses, shares, and protects personal information when you use the PriceYou website, web application, and mobile apps (the "Service"). By using the Service you agree to this Policy.
1. INFORMATION WE COLLECT
- Account information: name, email, password (hashed), and, if enabled, two-factor authentication details.
- Profile and preferences: categories, brands, segments, target prices, notification settings.
- User content: photographs of items you own, purchase prices, notes, receipts, certificates, provenance information and other documents you voluntarily upload. We process photographs uploaded by users solely for the purpose of identifying items, maintaining portfolios and providing related features of the Service.
- Usage and analytics data: pages viewed, features used, events, session recordings/heatmaps, approximate location derived from IP.
- Device and technical data: device type, OS, browser, identifiers, and, for the app, push tokens.
- Marketing/attribution data: campaign and referral information (e.g., UTM parameters, ad attribution).
- Payment data: processed by our payment providers; we receive limited billing details (e.g., plan, status, last four digits) but not full card numbers.
- Communications: messages you send us and your email engagement (opens, clicks) where applicable.
2. HOW WE USE INFORMATION
- Provide, operate and improve the Service, including portfolio tracking, estimated valuations, market signals, price alerts and personalized notifications.
- Create and secure your account, including 2FA and fraud prevention.
- Process subscriptions, trials, and payments.
- Send transactional messages and, with your consent where required, marketing.
- Analyze usage to improve features and performance.
- Comply with legal obligations and enforce our Terms.
3. LEGAL BASES (EEA/UK USERS)
Where GDPR/UK GDPR applies, we process personal data on the bases of: performance of a contract (providing the Service); your consent (e.g., certain cookies, marketing); our legitimate interests (securing and improving the Service); and compliance with legal obligations. You may withdraw consent at any time.
4. HOW WE SHARE INFORMATION
We do not sell your personal information for monetary consideration. We share it only with service providers ("processors") that help us operate the Service — for payments, hosting and storage, email and notifications, and analytics and attribution — under contracts that limit their use of the data to providing services to us.
We may also disclose information to comply with law, enforce our Terms, protect rights and safety, or in connection with a merger, acquisition, or sale of assets. Some analytics and advertising activities may be considered "sharing" or a "sale" under certain US state privacy laws; see "Your privacy rights" for your opt-out rights.
5. COOKIES AND SIMILAR TECHNOLOGIES
We use cookies and similar technologies as described in our Cookie Policy. Where required, we obtain consent through a cookie banner.
6. DATA RETENTION
We retain personal information for as long as your account is active and as needed to provide the Service, then for a reasonable period to comply with legal obligations, resolve disputes, and enforce agreements. You can request deletion (Section 9); some data may be retained where legally required.
7. SECURITY
We use administrative, technical, and organizational safeguards (e.g., encryption in transit, access controls, encryption at rest for stored documents where implemented). No system is completely secure; we cannot guarantee absolute security.
8. BIOMETRIC INFORMATION
The Service is not intended to collect or process biometric identifiers or biometric information. We do not use photographs uploaded by users for facial recognition, identity verification, biometric identification or the creation of biometric templates.
9. YOUR PRIVACY RIGHTS
US (including California — CCPA/CPRA): depending on your state, you may have the right to know/access, delete, correct, and to opt out of the "sale" or "sharing" of personal information and of targeted advertising, and not to be discriminated against for exercising these rights. To opt out, use the "Do Not Sell or Share My Personal Information" link/mechanism or contact privacy@price.you. We honor recognized opt-out preference signals (e.g., Global Privacy Control) where required.
EEA/UK (GDPR): you may have the right to access, rectify, erase, restrict, or object to processing, to data portability, and to withdraw consent. You may also lodge a complaint with your supervisory authority.
To exercise rights, contact privacy@price.you. We will verify your request as required by law.
10. INTERNATIONAL DATA TRANSFERS
We may process and store information in the United States, the United Kingdom, and other countries. Where required, we use appropriate safeguards (e.g., Standard Contractual Clauses / UK IDTA) for transfers of EEA/UK personal data.
11. CHILDREN
The Service is not directed to children and is intended for users 18 and older. We do not knowingly collect personal information from children. If you believe a child has provided data, contact privacy@price.you and we will delete it.
12. CHANGES TO THIS POLICY
We may update this Policy. We will post the new version with an updated date and, for material changes, provide additional notice. Continued use after the effective date constitutes acceptance.
13. CONTACT
NORELIX LIMITED (trading as PriceYou), The Black Church, St Mary's Place, Dublin 7, D07 P4AX, Ireland. Company No. 817569. Privacy contact / DPO (if applicable): privacy@price.you.