Privacy Policy

1. Information we collect

• Account information — your name and email address, collected when you sign up through our authentication provider.
• Photos you upload — the images you submit to search for an item, stored so you can revisit your search history.
• Search details — any text hints you add, your search history, saved collections, and the results returned for each search.
• Community content — requests you post asking for help identifying an item, and answers you submit to other people’s requests.
• Payment information — if you subscribe to Plus, our payment processor collects your billing details directly. We receive confirmation that you’re subscribed and basic subscription status, but never your full card number.
• Technical information — a hashed version of your IP address, used only to apply fair-use search limits and prevent abuse.

2. How we use this information

We use the information above to:

• Run searches across retail, resale, and vintage sources on your behalf;
• Save your search history and collections so you can return to them later;
• Operate the community request/answer feature;
• Send you email updates when a hunt you’re watching has a new listing or price drop;
• Process payments and manage your subscription;
• Maintain the security and reliability of the Service, including preventing abuse.

3. Who we share information with

We use a number of third-party services to operate Tholafind. Each only receives the specific information it needs to do its job:

• Clerk — handles sign-up, sign-in, and account security.
• MongoDB Atlas — stores your account, search, and collection data.
• Vercel — hosts the app and stores your uploaded photos.
• Paddle — processes payments and acts as the merchant of record for Plus subscriptions.
• SerpApi and Replicate — receive your uploaded photo (as a URL) to perform visual product matching. This is the core mechanism that makes photo search work.
• eBay and Etsy — receive a text search query (not your photo) to find matching listings on their marketplaces.
• Resend — delivers alert emails when you’ve asked to be notified.
• eBay Partner Network / Awin — if you click through to an eBay or Etsy listing from Tholafind, these affiliate networks may log that click to attribute a commission to us, per their own privacy practices.

We don’t sell your personal information to third parties, and we don’t share it with anyone beyond what’s listed above except where required by law.

4. Cookies

We use cookies set by our authentication provider to keep you signed in. We don’t currently use advertising or tracking cookies.

5. Data retention

We keep your account, search, and collection data for as long as your account is active. If you delete your account, we delete your personal data within a reasonable period, except where we’re required to retain certain records (for example, transaction records for tax or accounting purposes).

6. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, or to object to certain uses of it. To exercise any of these rights, contact us at support@tholafind.com, and we’ll respond within a reasonable time.

7. Children’s privacy

Tholafind isn’t directed at children, and we don’t knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, contact us and we’ll remove it.

8. International data transfers

The services listed in Section 3 operate data centers in multiple countries, which means your information may be processed outside the country you live in. Where required, we rely on standard contractual safeguards to protect data transferred internationally.

9. Security

We use reasonable technical and organizational measures to protect your information, including relying on established providers (listed above) for authentication, hosting, and payments rather than handling sensitive data ourselves wherever possible. No method of transmission or storage is 100% secure, and we can’t guarantee absolute security.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be posted here with an updated “Last updated” date.

11. Contact

Questions about this policy or your data? Reach us at support@tholafind.com.