Privacy Policy

ValyuPeak(“we”, “our”, “us”) operates the ValyuPeak price insights and repricing platform, accessible at valyupeak.com.

This policy explains what personal data we collect when you use our service, how we use it, and your rights in relation to it. If you have questions, contact us at support@valyupeak.com.

Account data — when you sign up we collect your name, email address, and a hashed password (or OAuth token if you sign in via Google). This is processed by our authentication provider, Clerk.

Usage data — we log actions you take inside the dashboard (creating projects, adding competitors, triggering repricing) to power features and detect abuse. Logs are retained for 90 days.

Integration credentials — if you connect a Shopify or WooCommerce store, we store your API credentials encrypted at rest using AES-256-GCM. We never store plaintext secrets.

Competitor product data — we store publicly available pricing and availability information scraped from competitor URLs you provide. This data belongs to you.

Technical data — IP address, browser type, referring URL, and timestamps collected automatically via our hosting provider (Railway) and error-tracking tools. This data is used solely for reliability and security.

We use your data to:

• Provide, operate, and improve the ValyuPeak service
• Authenticate you and keep your account secure
• Run scheduled scraping and repricing jobs on your behalf
• Send transactional emails (password reset, critical alerts)
• Respond to support requests
• Meet legal and regulatory obligations

We do not sell your personal data. We do not use your data to train AI models. We do not display advertising.

If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal data on the following legal bases:

• Contract — processing necessary to provide the service you signed up for
• Legitimate interests — security monitoring, fraud prevention, and product analytics
• Legal obligation — where required by applicable law
• Consent — for optional marketing communications (which you can withdraw at any time)

We share data with the following third-party sub-processors to operate the service. Each is bound by a data processing agreement:

We do not share your data with any other third parties except where required by law or with your explicit consent.

We retain your account data for as long as your account is active. If you delete your account we will delete or anonymise your personal data within 30 days, except where retention is required by law.

Scraped competitor data (prices, availability) is retained for 12 months from the date of collection to support historical analysis features.

We use industry-standard security practices: HTTPS everywhere, AES-256-GCM encryption for sensitive credentials at rest, bcrypt-hashed passwords, and least-privilege database access. No system is perfectly secure; please use a strong, unique password and enable two-factor authentication in your Clerk account settings.

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — request deletion of your data
• Portability — receive your data in a machine-readable format
• Objection — object to certain types of processing
• Restriction — ask us to limit how we use your data

To exercise any of these rights, email support@valyupeak.com. We will respond within 30 days.

We use essential session cookies to keep you signed in. We do not use third-party advertising or tracking cookies. Our analytics, if any, are privacy-preserving and do not fingerprint individual users.

If you interact with ValyuPeak on social media platforms (LinkedIn, X/Twitter, Instagram, etc.), those interactions are subject to the privacy policies of the respective platforms. We may see publicly available information such as your username or public profile when you mention or message us.

For social media collaborations, content partnerships, or media enquiries, contact us at insights@valyupeak.com.

We may update this policy from time to time. When we make material changes, we will notify you by email or by displaying a prominent notice in the dashboard. The effective date at the top of this page will always reflect the date of the most recent revision.

We have dedicated inboxes for different types of enquiries:

We will respond to all privacy-related requests within 30 days.