Legal

Privacy Policy

This policy describes what UpVire collects, why we collect it, who else sees it, and how you get it removed. It reflects what the software actually does — not a template.

Last updated: 6 August 2026

The short version: you can use UpVire's price comparison without an account. We use no advertising cookies and no third-party trackers, and we never sell your data. If you create an account, we store your email address and the minimum needed to run your account. Your search terms are sent to the search-data providers that power comparison.

Who we are

UpVire ("we", "us") operates the price comparison service at upvire.com and the creator storefronts hosted on it. For data protection purposes we are the data controller for the information described below. Contact: [email protected].

What we collect

If you just browse and compare prices

Your approximate country, derived from your IP address so we can show you marketplaces that can actually ship to you. This lookup runs against a database stored on our own server — your IP address is not sent to a geolocation company.
Your IP address, temporarily, held in server memory for rate limiting so one visitor can't exhaust the search quotas for everyone. It is not written to disk and disappears when the process restarts.
What you searched for, passed to our search-data providers to fetch results. See "Who we share data with" below.

If you create an account

Your email address.
Your password, hashed. We store a bcrypt hash, never the password itself. We cannot read it, and we cannot tell you what it is if you forget it.
Your plan and daily search count, so free-tier limits can be enforced and paid plans honoured.
A referral code, if you arrived through someone's referral link, so the referral can be credited.

If you use price alerts

The product name, target price, product link and country for each alert you set, plus when we last checked it. We email you at your account address when the price drops.

If you run a storefront

Your store name, slug, description, design settings, social links, custom domain, and the products you add.
Aggregate counters — total views of your store page and total clicks per product or link. These are running totals only. We do not record who clicked, when they clicked, or from where.

If you pay us

A record that a transaction happened, its amount and status, and the plan it granted. Card and bank details never reach UpVire's servers — payment is handled entirely by Stripe or Midtrans, who are the ones actually processing it.

Cookies and local storage

UpVire sets no advertising or analytics cookies, and no cross-site trackers. We do use your browser's local storage — data kept on your own device, not transmitted to us except when your browser makes an authenticated request:

Key	Purpose
`upvire_token`	Keeps you signed in between visits
`upvire_plan`	Remembers your plan so the interface matches it
`upvire_ref`	Holds a referral code until your signup credits it
`upvireZoneManual`	Remembers that you picked a region yourself, so we stop auto-detecting
`promoBarClosed`	Remembers you dismissed the promo bar (this session only)

Clearing your browser's site data for upvire.com removes all of these and signs you out.

Who we share data with

We do not sell your personal data, and we do not share it for anyone else's advertising. We share the minimum necessary with the providers that make the service work:

Provider	What they receive	Why
Search-data providers (e.g. SerpApi, Bright Data)	Your search term and target country — not your identity or account	To fetch current prices across marketplaces
OpenRouter	Your search term, for AI-assisted result interpretation	To improve what your query returns
Stripe, Midtrans	Your payment details, submitted directly to them	To process payments and confirm your plan
Our email provider	Your email address and alert contents	To send price-drop notifications
Retailers you click through to	Standard referral information their own systems record	To credit the referral — their privacy policy then applies

Once you click through to a retailer, you are on their site under their privacy policy, not ours. We have no control over and no visibility into what they collect.

We may also disclose data where legally required — a valid court order, for example — or to investigate fraud or abuse of the service.

Legal basis (UK/EU visitors)

Contract — running your account, enforcing plan limits, delivering alerts and storefronts you asked for.
Legitimate interests — region detection, rate limiting, and protecting the service from abuse. We use the least identifying method available for each.
Legal obligation — retaining transaction records where tax or accounting law requires it.

How long we keep it

Account data — until you ask us to delete it.
Price alerts — until you delete the alert or your account.
Storefront data — until you delete the store or your account.
Transaction records — retained as long as tax and accounting rules require, even after account deletion.
Rate-limiting IP data — minutes, in memory only.

Your rights

Depending on where you live — including under the GDPR in the UK and EU, and under Law No. 27 of 2022 on Personal Data Protection in Indonesia — you have the right to access a copy of your data, correct it, delete it, restrict or object to processing, withdraw consent, and receive your data in a portable format.

To exercise any of these, email [email protected] from your account address. We aim to respond within 30 days. If you believe we've handled your data improperly, you may complain to your local data protection authority.

Security

Passwords are stored as bcrypt hashes. Sessions use signed tokens. Traffic is served over HTTPS. Access to the production database is restricted to the people who operate the service. That said, no online service can promise perfect security, and we won't pretend otherwise — if a breach affects you, we will tell you.

Children

UpVire is not intended for children under 16, and we do not knowingly collect their data. If you believe a child has given us personal information, contact us and we'll remove it.

International transfers

Our providers operate globally, so your data may be processed outside your country, including in the United States. Where required, we rely on appropriate safeguards such as the European Commission's standard contractual clauses.

Changes

If we change this policy we'll update the date at the top. Material changes affecting how we use your data will be notified to account holders by email.