Privacy Policy

Last updated 27 October 2026

This policy covers how KitchenComps (kitchencomps.com, the web app at app.kitchencomps.com, and the Chrome extension) handles your data. In plain English: we store the minimum needed to run your account, we don't sell data to third parties, and we don't track you around the web.

What we collect

Account data

• Email address (for sign-in + sending you alerts).
• Hashed password (never stored in plaintext).
• Organization name and optional webhook URLs you choose to configure.
• Watches, alerts, and dismissals you create — tied to your organization.

Browser extension

When installed, the extension sends ONE request per listing page you visit on eBay or GovDeals: the listing's public ID is sent to our API so we can look up whether we have comp data for it. The extension:

• Does not read, upload, or store any page content beyond the listing ID in the URL.
• Does not require sign-in or an account.
• Does not share data with third parties.
• Uses chrome.storage only to remember your preferred API endpoint (default: api.kitchencomps.com).

Market data (public)

We harvest publicly accessible listings from eBay, GovDeals, Public Surplus, Kitchen Equipment Trader, and AllSurplus to build price indexes. No personal data is scraped — only product information (title, price, location, source URL).

How we use it

• To sign you in and keep you signed in.
• To send under-market alerts you've opted into (email, Slack, webhook).
• To show you aggregated market stats for the equipment you track.
• To debug errors — logs are retained for 30 days and never contain passwords.

What we don't do

• We don't sell, rent, or share your personal data with advertisers or data brokers.
• We don't track your browsing beyond the listing-page lookup the extension performs.
• We don't use third-party analytics on the web app (no Google Analytics, no Segment, no tag managers).
• We don't store the content of pages you visit.

Who else sees your data

We use a short list of infrastructure providers who process data on our behalf:

• Supabase (database + authentication) — stores your account, watches, and alerts.
• Fly.io (application hosting) — serves API requests.
• Netlify (web hosting) — serves the landing site and web app.
• Resend (transactional email) — sends alert and invite emails on our behalf.

Each is bound by its own privacy policy and data-processing agreement.

Your rights

You can export, correct, or delete your account data at any time. Email hello@kitchencomps.com and we'll respond within 7 business days.

Children

KitchenComps is a B2B product for commercial-equipment dealers. We don't knowingly collect data from anyone under 18.

Changes

If we materially change this policy, we'll email active users at least 14 days before the change takes effect.

Contact

Questions? hello@kitchencomps.com