Privacy Policy

Last updated: 05 September 2025

This Policy explains how MerchSignal collects, uses, and shares information when you use our website, Chrome extension, and related services (“Services”).

1) Who we are (data controller)

Controller: Oussama Dif (trading as “MerchSignal”)
Address: 450 logts b5 N47, Sétif, Algeria
Contact: support@merchsignal.com

Payments / Merchant of Record. For online purchases, Paddle acts as our Merchant of Record (MoR) and handles billing, invoicing, taxes, and compliance. Card/billing details are processed by Paddle and are not stored on our servers. Statements may show *“Paddle.net MerchSignal”**.

2) Data we collect

  • Account data: email, name (if provided), hashed password.

  • Service usage data: feature usage, device/browser info, event logs, crash/diagnostic reports.

  • Extension data (Chrome): user settings/presets, locally cached results where applicable.

  • Support: messages you send to support@merchsignal.com and related metadata.

  • Payments: order/receipt metadata from Paddle (amount, currency, status, country, tax); we do not collect card numbers.

  • Cookies & similar tech: for sign-in, preferences, and analytics. See Cookies below.

AI providers (when you use Magic Designer). If you opt to generate designs, your prompt and necessary parameters may be sent to third-party AI providers (e.g., OpenAI, Ideogram) either via our servers or directly, solely to generate the requested output.

3) How we use data

  • Provide and secure the Services (authentication, account management, rate-limiting, abuse prevention).

  • Operate features (niche scans, filters, design generation, presets, CSV export).

  • Billing & tax via Paddle (receipts, refunds, compliance).

  • Support & communications (answer questions, service updates, transactional notices).

  • Improve the Service (analytics, debugging, performance monitoring, new features).

  • Legal compliance and enforcement of our Terms.

4) Legal bases (EEA/UK)

We rely on: Contract (to deliver the Service), Legitimate interests (to improve and secure), Consent (where required, e.g., certain cookies/AI features), and Legal obligations (tax, fraud prevention).

5) Sharing

We share data with:

  • Service providers under contract (hosting, email delivery, error/analytics, payment processing, AI generation).

  • Authorities when required by law.

  • Business transfer: if we undergo a reorganization, merger, or sale.

We do not sell personal data.

6) Retention

We keep data only as long as necessary for these purposes:

  • Account/profile: for the life of the account, then deleted or anonymized within 90 days.

  • Support emails: 24 months after last interaction.

  • Logs/diagnostics: typically 12 months.

  • Payment records (from Paddle): retained per legal/tax requirements.

7) Your rights

Depending on your region, you may request access, correction, deletion, portability, or restriction of your personal data, and you may object to processing based on legitimate interests. Where we rely on consent, you may withdraw it at any time.
To exercise rights, email support@merchsignal.com.

California (CPRA). California residents have rights to know, delete, correct, and opt-out of “sale/share” of personal information. We do not sell or share personal information as defined by CPRA.

8) International transfers

We may process data outside your country (e.g., in the EU, UK, or US). When required, we use appropriate safeguards such as Standard Contractual Clauses with our processors.

9) Security

We use reasonable technical and organizational measures to protect data (encryption in transit, access controls, monitoring). No method is 100% secure.

10) Children

The Services are not directed to children under 13 (or under 16 where applicable). If you believe a child has provided personal data, contact us to delete it.

11) Cookies & similar technologies

We use cookies/local storage for:

  • Essential: sign-in/session, security, preferences.

  • Analytics: to understand usage and improve features.
    You can control cookies via browser settings; blocking essential cookies may break some functionality.

12) Changes

We may update this Policy from time to time. We will post the new version with an updated “Last updated” date. Continued use means you accept the changes.

13) Contact

Questions or requests: support@merchsignal.com
Legal owner (controller): Oussama Dif, 450 logts b5 N47, Sétif, Algeria.