Privacy Policy

1. Who is responsible

Undercut is a product of Unix Creative Studio, Brussels, Belgium.
Contact: hello@undercut.app

2. Personal data we collect

When you use Undercut, we collect:

• • Your email address, to create your account and log you in
• • The URL of your store and the competitor stores you choose to follow
• • Your notification settings and, if you turn on push alerts, your browser’s push subscription
• • Usage data (pages viewed, buttons clicked), only if you accept analytics cookies
• • Technical data when something breaks (browser, device, error details)

We also read public catalog data from the stores you follow (product names, prices, stock). This is the same information any shopper can see, and it is not personal data.

3. How we collect it

You give us your email and store URLs directly through the forms on the site. Usage and technical data are collected by the analytics and error-monitoring tools listed below. Analytics only start after you click “Accept” in the cookie banner.

4. Why we use it

• • To run the service: find your competitors, track their changes and show them in your dashboard
• • To send you notifications and, if you want it, a weekly email summary
• • To understand how people use Undercut and make it better (PostHog, with your consent)
• • To detect and fix bugs quickly (Sentry)

We never sell your data and we never show ads.

5. Legal basis

We process your account data because it is necessary to provide the service you signed up for (contract). Analytics are based on your consent, which you can withdraw at any time. Error monitoring is based on our legitimate interest in keeping Undercut reliable and secure.

6. How long we keep it

Your account data is kept as long as your account is open and deleted within 30 days after you close it. Analytics data is kept for a maximum of 12 months. Error reports are kept for a maximum of 90 days.

7. Who we share it with

We only work with providers that help us run Undercut:

• • Supabase (database and login) — servers in Frankfurt, EU
• • Vercel (website hosting) — with GDPR safeguards
• • PostHog (product analytics, only with your consent) — EU Cloud
• • Sentry (error monitoring) — with GDPR safeguards
• • Resend (login and summary emails) — with GDPR safeguards
• • SerpApi or Brave Search (finding competitor stores) — receives search terms, never your email

When a provider is based outside the EU, transfers are covered by the European Commission’s Standard Contractual Clauses or an adequacy decision.

8. Your rights

Under the GDPR, you have the right to:

• • Access your data
• • Correct your data
• • Delete your data
• • Restrict how we process your data
• • Receive your data in a portable format
• • Object to processing
• • Withdraw your consent at any time

To use any of these rights, write to hello@undercut.app.
You can also file a complaint with the Belgian Data Protection Authority.

9. Changes

We may update this policy from time to time. Any change will be published on this page, and we will let you know by email if it affects how we use your data.