Privacy Policy

Account data: your email address and name, obtained when you register with email/password or via Google or Apple. Your BuyHub account is separate from your Museum.app account: they share no password, sessions or data, even if you use the same email.

Usage activity: the terms you search, the items you open or save, your favorites, saved searches, alerts (Radar), and your app-desktop configuration. We use this activity to deliver results and a personalized feed.

Browser notifications: if you turn on your radar alerts in a browser, we store the subscription that browser gives us so we can send them — an address at its notification service and the keys used to encrypt them — together with the type of browser and operating system, when you turned them on and the last time we checked they were still active.

Use of the website and the app (our own measurement): we record some steps of how BuyHub is used — for example, how far you get in the welcome or in the app's introduction, whether you finish a help guide, which button you press on the home page or whether you open an alert — with the platform (web, iOS or Android), the date and time and a few details of the step itself, such as its number or the shop; never what you type. If you are signed in, the record is linked to your account; if not, to an identifier we calculate from your IP address and browser that changes every day, without storing the IP or anything on your device.

Device and connection: your IP address and approximate country. We use them to route your searches through the right connection, respect each marketplace’s regional availability rules, and prevent abuse.

Account sign-up: when you create your account we record how you created it —with email, Google or Apple; on the web or in the app, and from which screen—, your IP address, your approximate country, your device type, operating system and browser or app version, and how you reached BuyHub: the website you came from, the first page you visited and, if the link carries them, its campaign tags (utm). None of this is stored in your browser: it is sent when you create the account. We use it to learn which channels bring people to BuyHub and to investigate fraudulent or bulk sign-ups.

Linked marketplace accounts: when you link a marketplace by signing in to it from BuyHub, with our browser extension or with the app, we store the data that identifies that account (the marketplace and the account’s identifier, username and, where applicable, profile picture) to show it in your list of linked accounts. If you also choose to save its session with BuyHub, we keep that session too, encrypted: that marketplace’s cookies and, if the marketplace keeps your sign-in in the browser’s local storage, that sign-in data. Section 4 explains how. We never store your marketplace passwords.

eBay authorization: if you connect your eBay account to BuyHub, we store an encrypted eBay authorization token that lets us perform ONLY the actions you configure. You can revoke this authorization at any time.

To provide and personalize the service: run your searches, show enriched results, and compose a feed tailored to what you view and search.

To act on your behalf when you authorize it: perform the actions you configure on the marketplaces you have linked and, if you save a marketplace’s session with BuyHub, use it so that account works on all your devices and to run with it the searches we carry out for you from our servers (section 4).

Affiliate attribution: when you open on eBay, Catawiki or Amazon a listing you found with BuyHub, the link carries our affiliate code so that the store knows the visit comes from BuyHub and, if you buy, pays us a commission, at no cost to you (Terms of Use, section 8, which also explains when an Amazon link does not carry it). We record that click on our servers — the store, the listing and its price, the BuyHub screen and platform you left from, the website you had arrived from (its domain only), the date, your language and approximate country and, if you are signed in, your account — to measure which parts of BuyHub lead to the stores and to reconcile the commissions we are paid. We count the sales that the affiliate networks report to us by store, platform and screen: we do not use them to find out what each user buys.

Alerting you and improving BuyHub: sending your radar alerts through the channels you choose (the app, email or the browser) and, with the usage record described in section 1, learning which screens are understood and where people get stuck, so we can improve them. We analyse that record in aggregate: we do not use it to make decisions about you or for advertising. For this measurement, the legal basis is our legitimate interest in improving the service; you can object by writing to contact@buyhub.app.

Security, fraud prevention, legal compliance, and service improvement.

Marketplaces: we send your searches and, when authorized, your actions to the relevant marketplaces. Their data processing is governed by their own policies.

eBay: to execute your actions on eBay, if you connect your account.

Affiliate networks: eBay Partner Network, eBay's affiliate program, which eBay runs on the Impact platform; Partnerize, the network behind Catawiki's program; and Amazon Associates, Amazon's affiliate program. When you open an eBay or Catawiki affiliate link, your browser goes to the store — for Catawiki, first through Partnerize's redirect — with our affiliate code and a click identifier, which states the BuyHub platform and screen you left from, the store, what kind of site you had arrived from (for example, a search engine) and a random code. It does not contain your name, your email or any identifier of your account. An Amazon affiliate link carries only our affiliate tag for the store's country, with no click identifier and no data about you. As with any visit to a website, the store and the network also receive your IP address and your browser's technical data, and may use their own cookies to attribute the purchase to us, under their own policies. If you buy, they report the sale and the commission to us, together with that click identifier in the case of eBay and Catawiki.

Sign-in providers: Google and Apple, if you choose to register with them.

Infrastructure providers: hosting, proxy servers (to route requests), and translation services. They process data only on our behalf and under contract.

Payment processors: Stripe processes payments for subscriptions purchased on the website — your card details are entered in its form — and we issue the invoice; purchases made inside the app are processed by Apple and Google. They receive what they need to charge and invoice you — we never see or store your card details.

Error diagnostics: we use Sentry to receive a technical report when something breaks (error message, stack trace, app version and device type). It is configured not to send identifying data.

Notifications: to deliver push alerts we use Expo together with Apple (APNs) and Google (FCM), which receive your device identifier and the text of the alert. Browser notifications are delivered by your own browser's notification service (Google for Chrome, Mozilla for Firefox, Apple for Safari or Microsoft for Edge), which receives the address of your subscription and the encrypted alert, which it cannot read.

Usage measurement: the usage record described in section 1 does not leave our servers. We do not use third-party analytics tools or share it with anyone.

If BuyHub or its business is transferred to another company (through a merger, acquisition or sale of assets), your data would pass to the new owner, who will be bound by this policy. We will notify you beforehand and you will be able to delete your account.

We do not sell your personal data. We may disclose information where required by law.

Linking any marketplace is voluntary and requires your explicit consent. You can unlink an account at any time from settings; when you do, we delete the stored session or token.

The browser extension and the app. With the extension, the requests your browser makes to each marketplace use the session you already have open in it; with the app, each marketplace’s session stays on your phone. We use those sessions where they are, without copying or receiving them, unless you choose to save them with BuyHub.

Saving the session with BuyHub (optional). When you sign in to a marketplace from BuyHub, we ask whether you want to save that session with BuyHub. Only if you choose to, the extension or the app copies that marketplace’s cookies — and, if the marketplace keeps your sign-in in the browser’s local storage, that data too — and sends us that copy over an encrypted connection (HTTPS). We store it encrypted with AES-256-GCM, using a key that does not live in the database, and we use it for only two things: to return it to you on your other devices, so the account works on all of them without signing in again, and to run with it, on your behalf, the searches we carry out for you from our servers, such as your radars’ searches. When we search for you, we send it only to the marketplace it belongs to. If you choose not to, the session stays in your browser or on your phone, and we store only the data that identifies the account.

The legal basis for saving your session is your consent, which you can withdraw at any time without affecting the lawfulness of the processing carried out before: just delete it under “Linked accounts” (on the web, in “My account”; in the app, in “Settings”) and we erase the encrypted copy from our servers. If you do not delete it, we keep it for as long as the account remains linked and, in any case, we erase it when you delete your BuyHub account. Your data export includes which accounts you have linked, but not their sessions: they are access credentials for third-party services, and handing them over in a file would expose you to an unnecessary risk.

We keep your data while you have an active account and for as long as necessary for the described purposes or to meet legal obligations. When you delete your account, we delete or anonymize your personal data per our deletion process (GDPR/CCPA/LGPD-compliant), except what we must retain by law.

Some specific periods: the usage record described in section 1 is deleted after 180 days and, if you delete your account earlier, it is no longer linked to it. A browser's notification subscription is kept until you turn notifications off in it, the browser itself cancels it or you delete your account.

Depending on your jurisdiction, you have the right to access, correct, delete and port your data, as well as to object to or restrict certain processing and to withdraw your consent. You can delete your account and download a copy of your data from your account settings, or exercise any right by writing to contact@buyhub.app. You may also lodge a complaint with your data protection authority.

We encrypt data in transit (HTTPS) and encrypt sensitive data at rest, such as marketplace sessions and eBay authorization tokens (AES-256-GCM). No system is 100% secure; please protect your credentials.

We use cookies and local storage to keep your session, remember your preferences and what you have already done in that browser, and make the website faster; our Cookie policy lists them all. BuyHub does NOT show ads, does not sell ad space, and does not use third-party advertising cookies to profile you. Affiliate links (section 2) do not track your browsing for advertising purposes. The usage record described in section 1 does not use cookies. If you turn on notifications in a browser, it stores the subscription and a small BuyHub program that only serves to receive them (our Cookie policy explains it).

Your data may be processed on servers located outside your country. When we transfer data outside the European Economic Area, we apply the safeguards required by law.

BuyHub is not directed to children under 16, and we do not knowingly collect their data. If you believe a minor has provided us data, contact us and we will delete it.

We may update this policy. We will post the current version on this page with its update date and, for significant changes, notify you.

Data controller: Museum App Inc., 5900 Balcones Drive Ste 100, Austin, TX 78731, United States. Contact email: contact@buyhub.app.