Privacy Notice

1. Who and what this covers

This notice covers visitors to Thumbar's website, people who contact us, and business owners and authorized users of our early-access service. The service is intended for US businesses. This includes personal information used in a business context. The operator's legal name will be confirmed before this draft takes effect. Privacy questions can be sent to alerts@thumbar.app.

2. Information we receive

Account and contact information: your account identifier, name, email, profile details provided through sign-in, store contact name, alert address, optional emergency phone number and messages you send us. Clerk provides sign-in and account management and handles the authentication information needed for those functions. The emergency phone field does not enable an SMS alert service.

Store and product information: store identifiers, business name, locations or operating states, and product names, variations, categories, SKUs and barcodes. If you connect Square, we receive these through the access you authorize and store access tokens to maintain the connection. We do not request Square shopper, order, payment or inventory-quantity access.

Information you enter: supported product fields from item-list uploads, import results, manually added items, and your review decisions and notes. We keep parsed field values and the names of ignored columns, not the original file bytes or ignored-column values. Uploads and manual items are available only where enabled. Please leave out shopper, payment, health and other unnecessary personal information.

Service records: searches and product checks, matches, scan results, alert and delivery-attempt records, and an audit trail of actions, dates and identifiers. Our service providers also process technical information such as IP addresses, browser/device details and security or diagnostic records to operate the website and sign-in.

3. How we use it

We use this information to sign you in, control store access, import and update catalogs, compare products with public recall notices, display results, record your decisions and send service emails. We also use relevant information to answer support requests, investigate problems, prevent misuse and meet legal obligations.

We do not sell or rent your information, share it for targeted advertising, or use store information to train AI models. Recall matching uses the service's matching rules; we do not send your catalog to a generative-AI provider. Thumbar does not provide shopper-facing email or SMS campaigns.

The optional emergency phone is stored in the store profile but is not currently used for calls or SMS. You can leave it blank or clear it. Authorized store users and the operator can access the profile; successful store removal deletes it.

4. Who receives information

Authorized users of your store can see its information. Thumbar's operator and authorized support personnel may access information needed to operate the service, investigate an issue or review a held finding.

We use service providers for authentication and account management (Clerk), application hosting (Fly.io), the database (Neon), and service email (Fastmail). They receive the information needed for their functions. Square receives connection and API requests when you authorize a store. A sign-in service you choose also processes information under its own notice. Clerk also processes certain account information for its own purposes under its Privacy Policy.

We may disclose information when legally required or reasonably necessary to protect rights and address fraud or security incidents. A business transfer involving information remains subject to applicable law and existing privacy commitments; it is not permission to make a new, incompatible use of previously collected data.

• Clerk Privacy Policy
• Clerk Data Processing Addendum
• Fastmail Privacy Policy

5. Email notifications

Recall alert emails are sent from Thumbar <alerts@thumbar.app> through Fastmail. They include store and product information and go to the alert address configured for that store. Use an address you are authorized to provide; you can change it in Settings.

These are service messages about your store, not a marketing subscription. Emails can be delayed, filtered into spam or missed. Acceptance by an email provider does not prove inbox delivery. Successfully disconnecting or removing a store stops monitoring and new alerts; emails already in transit may still arrive. Copies already sent may remain with recipients and their providers.

6. Cookies and browser storage

Sign-in uses cookies and similar technology to recognize sessions and protect accounts. Thumbar stores your display-theme choice in your browser. You can clear or block browser storage, but sign-in and preferences may stop working.

Thumbar does not add advertising pixels or cross-site advertising profiles. We do not change our own practices in response to a browser Do Not Track signal. We do not sell or share information for cross-context behavioral advertising, so there is no such activity to opt out of through Global Privacy Control. Providers such as Clerk may process browser information across the services they support under their own notices.

7. How long information remains

While a store remains in Thumbar, we retain its catalog and uploaded rows to provide the service. Routine cleanup currently removes eligible product-check records after 90 days, scan-result details after 365 days, and eligible alert records and ended findings after 1,095 days. These are cleanup windows, not promises that every record is erased at that age: active or reviewed findings, the latest completed report and certain delivery records remain longer. We keep these exceptions to preserve your review history and current report and to avoid duplicate or lost delivery records; they are removed with the store.

When a store is successfully disconnected or removed, its active store records are deleted automatically, including catalog items, uploads, scans, findings, stored alerts, memberships and the connection tokens. Revocation through Square is processed when Thumbar receives it. Outages or failed deletion attempts can delay completion.

The audit trail records checks, decisions and deletion events. It remains after store removal and currently has no automatic expiry or settled deletion schedule. It can contain store and account identifiers, action dates, decisions, notes you entered, masked alert-address change records and email fingerprints, and the name and states entered when creating a store from a file. These records can identify you; they are not anonymous. Separate product-check histories are not linked to a store and are removed through the 90-day cleanup, not the store-removal action.

Removing a store does not delete your Clerk account, support correspondence, messages already sent to an inbox, or every copy in a provider's backups or logs. Those have separate lifetimes that depend on the provider and the purpose of the record. Contact us about account closure or retained personal information; we will assess and act on requests as required by applicable law.

8. Your choices and requests

Use your account controls to update your profile, Settings to change the alert address or remove a store, and the dashboard's available exports to save records before leaving. Disconnecting a store stops its monitoring; it is different from deleting your sign-in account.

Contact alerts@thumbar.app to ask about access, correction, deletion or a copy of personal information, or to raise a privacy concern. Depending on applicable law, you may have additional rights to object, restrict processing, opt out or appeal a decision. We may need to verify your identity and authority without asking for unnecessary sensitive information. We will explain any lawful reason we cannot fully fulfill a request and the review or appeal route available to you. We will not penalize you for exercising applicable privacy rights.

9. Security, processing locations and children

We use access controls, encrypted connections and encryption for stored Square tokens and alert addresses. No service can guarantee absolute security. Please protect your login and report suspected unauthorized access promptly.

Thumbar uses US application hosting; its providers may process information in the United States and other countries where they operate. This notice does not promise that every copy stays in one country.

The service is for adults acting for businesses, not children. We do not knowingly collect personal information from children under 13. Contact us if you believe a child has provided personal information.

10. Notice updates

We will show the date of the current notice and announce material changes through a prominent website notice or an email to affected account holders. Where required, we will obtain consent before using previously collected information in a materially different way. A privacy notice explains our practices; reading it is not a blanket waiver of your rights or consent to unrelated uses.