Privacy.

We may collect the following categories of information:

We may use information to:

We use automated tools, artificial intelligence, and third-party providers (including OpenAI) to read and understand receipt images and text, identify products, look up current prices, and research retailer price-adjustment policies.

Automated results may be incomplete or inaccurate. You should verify important information directly with the relevant retailer before relying on it.

On the public WeaselDen site, CookieYes provides the consent banner and records your preferences. Optional analytics is denied by default. PostHog is not initialized, and no PostHog analytics or session replay data is sent, unless and until you affirmatively allow the Analytics category.

After consent, PostHog may receive page paths without query strings, a small set of approved interaction events, browser and device information, a referring-site hostname, and sanitized campaign tags. PostHog processes the visitor IP address transiently to derive approximate geography, such as country, region, or city, and to filter bot traffic, then discards the raw IP address before the event is stored.

PostHog uses a pseudonymous browser identifier for this pilot. It is not connected to a WeaselDen account, and PostHog person profiles are disabled.

We do not intentionally send names, email addresses, form contents, full query strings, account content, uploaded files, payment details, authentication data, or private communications to PostHog. Masked session replay may run only on approved public pages. Page text and inputs are masked; sensitive elements, network headers, network bodies, console logs, cross-origin frames, canvas, audio, and video are excluded. Replay is disabled on application forms, portal, legal, authentication, account, and payment routes.

If you reject or later withdraw Analytics consent, future PostHog collection stops and session replay ends. The site continues to work without optional analytics.

We do not sell your personal information. We may share information with:

We rely on a small set of providers, who may process information only as needed to provide services to us:

We keep information for as long as needed to provide the Service, maintain your account, comply with legal obligations, resolve disputes, prevent fraud, and support legitimate business purposes.

Receipt and purchase information remains in your account while your account is active or until you delete it. If you request deletion of your account or data, we will take reasonable steps to delete or de-identify it, unless we need to retain it for legal, security, accounting, or dispute-resolution purposes. Deleted information may remain in backups for a limited period until those backups are replaced.

CookieYes consent preferences and consent records are normally retained for up to 12 months. Under our current PostHog plan, analytics events and masked session replay are retained for no longer than 12 months unless we delete them sooner. The pseudonymous browser identifier may persist for up to 180 days and is reset when Analytics consent is withdrawn.

Withdrawing Analytics consent stops future collection but does not automatically delete records collected while consent was active. You may contact us to request access to or deletion of information associated with you, subject to applicable law and our ability to identify the relevant record.

Depending on where you live, you may have rights to access, correct, delete, export, or limit certain uses of your personal information.

You can stop tracking items and delete receipts at any time, and you can request help with your account or data by contacting hello@weaselden.ai. You may unsubscribe from marketing emails using the link in the message; we may still send service-related messages such as account, billing, or security notices.

You can accept, reject, customize, or later withdraw optional analytics through Cookie Settings in the site footer or on our Cookie Policy page. Rejecting optional analytics does not limit access to the public site. PostHog also honors supported browser Do Not Track and Global Privacy Control signals.

We use reasonable administrative, technical, and organizational measures designed to protect information. Sign-in tokens are validated and are never written to our usage logs. No system is completely secure, however, and we cannot guarantee absolute security.

You are responsible for keeping your account credentials safe and for contacting us if you believe your account has been accessed without permission.

The Service is intended for adults 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If we learn that a minor has provided personal information, we will take reasonable steps to delete it.

The Service may contain links to third-party websites, retailers, or services. We are not responsible for their privacy practices or content. Please review their policies before providing information to them.

The Service is operated from the United States. Our current PostHog analytics configuration uses its United States hosting region. If you access the Service from outside the United States, information may be processed in the United States or other locations where our service providers operate. We may update our hosting regions and safeguards as the Service expands.

We may update this Privacy Policy from time to time. If we make material changes, we may notify you by email, through the Service, or by posting an updated version here. Your continued use of the Service after changes take effect means you accept the updated policy.