Privacy Policy

1. Information We Collect

Account Information: When you create an account, we collect your email address and any profile information you choose to provide (name, company name).

Usage Data: When you use our search service, we store your search queries, saved parts, and price alerts to provide the service functionality.

Technical Data: We collect your IP address for rate limiting and abuse prevention. We do not use IP addresses for tracking or advertising purposes.

2. How We Use Your Information

• To provide and improve the PartHawk search service
• To manage your account and subscription
• To send price alert notifications you have opted into
• To process payments via Paddle (we never store your card details)
• To enforce rate limits and prevent abuse
• To analyze aggregate usage patterns and improve our service

3. Data Storage & Security

Your data is stored securely using Supabase (powered by PostgreSQL) with Row Level Security (RLS) policies ensuring you can only access your own data. All connections use TLS encryption. Passwords are hashed using industry-standard algorithms and never stored in plain text.

4. Data Retention

• Account data is retained until you delete your account
• Search history is retained for the duration of your account
• Search cache data expires automatically after 30 minutes
• Rate limiting data (IP-based) expires automatically within 24 hours
• When you delete your account, all associated data (search history, saved parts, alerts, and profile information) is permanently removed

5. Third-Party Services

We use the following third-party services to operate PartHawk:

• Supabase — Authentication and database hosting
• Paddle — Payment processing (subject to Paddle's Privacy Policy)
• SerpAPI — Search data aggregation
• Upstash — Rate limiting infrastructure
• Vercel — Hosting and deployment
• Resend — Transactional email delivery

6. Cookies

We use essential cookies for authentication session management and to remember your cookie consent preference. We do not use tracking cookies, analytics cookies, or third-party advertising cookies.

7. Your Rights

Depending on your location, you may have the following rights under applicable data protection laws (including GDPR and CCPA):

• Access — Request a copy of your personal data
• Correction — Request correction of inaccurate personal data
• Deletion — Request deletion of your account and all associated data
• Export — Export your data (available for Pro and Team subscribers via CSV export)
• Objection — Object to processing of your data for certain purposes

To exercise any of these rights, contact us at the email below or use the account deletion option in your account settings.

8. Children's Privacy

PartHawk is not directed at children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of significant changes via email. Your continued use of the service after changes constitutes acceptance of the updated policy.

10. Contact

For privacy-related inquiries, please contact us at hello@parthawk.co