Privacy Policy

1. What we collect

• Account information: your email address and name, from Supabase Auth (email/password, Supabase's own Google sign-in, or Google sign-in via Firebase Authentication).
• App data you add: App Store app identifiers, tracked keywords, and competitor apps you choose to monitor — all sourced from public App Store listings.
• App Store Connect credentials (only if you connect them): your Issuer ID, Key ID, and private key, used solely to fetch your app's metadata and Analytics Reports on your behalf. The private key is stored server-side, protected by account-scoped access controls, and is never returned in any app response or exposed to other users — the product only ever shows whether a key is connected, never the key itself.
• Billing information: if you subscribe to a paid plan, payment is processed by Stripe. We store your Stripe customer/subscription IDs and plan status — we never see or store your card number.
• Usage data: basic application logs needed to operate and debug the service.

2. How we use it

To operate the product: track keyword ranks, show competitor changes, sync App Store Connect analytics and metadata, generate recommendations, and process billing. We do not sell your data, and we do not use your tracked keyword or competitor data for any purpose other than showing it back to you.

3. Third parties we rely on

• Supabase — database, authentication, and file storage. Every ASOTrack account is a Supabase account, regardless of which sign-in method you use.
• Firebase Authentication (Google) — an alternative "Continue with Google" sign-in path. Firebase verifies your Google account and passes us your verified email and name so we can sign you into (or create) your ASOTrack account; Firebase does not itself store or become your account of record.
• Stripe — payment processing and subscription billing.
• Apple — public App Store Search/Lookup APIs, and the App Store Connect API when you connect your own key.
• OpenAI (optional) — if enabled, a short summary of your already-computed ASO recommendations is sent to generate a more natural one-sentence digest. No raw personal data is sent; this can be disabled by not configuring an OpenAI key for your workspace.

4. Cookies & local storage

We use a session cookie required for you to stay signed in, and browser local storage for small UI preferences (like your last-selected app or an in-progress keyword shortlist). We do not use third-party advertising or tracking cookies.

5. Data retention & deletion

You can delete tracked apps, keywords, and competitors at any time from within the product. To delete your entire account and all associated data, email us at the address below — we'll process deletion requests within 30 days.

6. Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data. Contact us to exercise any of these rights.

7. Contact

Questions about this policy: asotrack.contact@gmail.com