Privacy Policy

iScaleMerch is a browser extension, and iScaleNiches is a companion website, both published by iScale Labs. This policy explains what data we collect, how we use it, and your rights.

1. What we collect

• Account info. When you sign in, our authentication provider (Clerk) stores your email address and a session token. We never see your password.
• Product snapshots. As you browse Amazon with the iScaleMerch extension installed, it uploads anonymous aggregate data about products you view — ASIN, title, brand, Best Sellers Rank, price, Date First Available, and the keyword context of the search page. This data is associated with your Clerk user ID server-side solely for abuse prevention and is never exposed that way publicly.
• Settings. Filter toggles, scan speed preferences, and excluded-brand lists are stored locally in your browser via chrome.storage. They never leave your device.

2. What we do NOT collect

• Your browsing history outside Amazon product pages.
• Your search queries on any other website.
• Personal information beyond your email address.
• Payment information. iScaleMerch is free. iScaleNiches does not process payments at this time.
• Any data from pages you do not explicitly open.

3. How we use crowd-sourced product data

We aggregate product snapshots from all users into a shared trend database so every iScaleMerch user gets more accurate BSR history and niche-demand signals than any single user could gather alone. Aggregated data is displayed inside the extension and on this website. No individual user's contributions are attributed publicly.

4. Third parties we share data with

• Clerk (clerk.com) — authentication provider. See clerk.com/legal/privacy.
• Supabase (supabase.com) — database host. See supabase.com/privacy.
• OpenAI — only if you supply your own API key for the optional AI phrase-filter feature. Your key is stored in your browser and never transmitted to iScale Labs.

We do not sell user data. We do not share it with advertisers. We do not use it for creditworthiness, lending, or any purpose unrelated to operating the service.

5. Security

All traffic is TLS-encrypted. Database access uses row-level security. Our server-side code enforces that users can only read their own niche history.

6. Your rights

Email privacy@iscalelabs.com to request deletion of your account and all associated crowd-sync contributions. We respond within 30 days. You may also request a copy of the data we hold about you.

7. Children

iScaleMerch is not directed at children under 13. We do not knowingly collect data from children.

8. Changes

We will post any change to this policy on this page with a new "Last updated" date. Material changes will also be announced in the extension release notes.

9. Contact

iScale Labs — privacy@iscalelabs.com