Privacy Policy

This policy explains what ChatFeed collects, why, and your choices, including your rights under the California Consumer Privacy Act (CCPA/CPRA).

What we collect

• Account: your email address, sign-in records, the date you accepted our terms and confirmed you are 18+, and your email preference.
• Store data: the store or feed URLs you add, store settings, and the product catalog data we read from them (titles, descriptions, prices, stock, images and links). Catalog data is business data and normally contains no personal information.
• Credentials: WooCommerce API keys and SFTP credentials you provide, encrypted at rest with AES-256-GCM.
• Billing: handled by Stripe. We store your Stripe customer and subscription IDs and plan status. We never receive or store card numbers.
• Abuse prevention: a keyed hash of your IP address in short-lived rate-limit counters (deleted automatically, normally within hours).
• Validator uploads: files you check in the free validator are processed in memory and not stored.

How we use it

Only to run ChatFeed: sign you in, build and deliver your feeds, bill paid plans, prevent abuse, and contact you about your account. We send product update emails only if you opt in.

Sharing

We do not sell or share personal information for cross-context behavioral advertising. We use service providers: Supabase (database and sign-in), Vercel (hosting), and Stripe (billing). Your feed is delivered only where you send it (for example, your OpenAI SFTP location).

Cookies and analytics

We use only essential cookies needed to keep you signed in. We use no analytics, advertising or tracking cookies. See Cookies.

Retention

We keep store data and feeds until you delete the store or your data. Rate-limit records expire automatically. Billing records are kept as the law requires.

Your rights

You can access, correct or delete your data, and delete stores, from the dashboard, or by emailing nathan@nathanpetty.com. California residents may request to know, delete or correct personal information, and to opt out of sale or sharing (we do neither). We will not discriminate against you for using these rights. We verify requests by confirming control of your account email.

Children

ChatFeed is for businesses and is not directed to children under 13. We do not knowingly collect their data; contact us and we will delete it.

Security

We use TLS in transit, encryption for credentials, row-level security on our database, and least-privilege access. No system is perfectly secure.

Contact

Nathan Petty (sole proprietor), nathan@nathanpetty.com, 791 Jensen Court, Encinitas, California 92024.