Privacy + Terms

Privacy Policy

What data we collect, where it comes from, what we do with it, and how to exercise your GDPR rights.

1. Who runs StoreRadar

StoreRadar is operated by StoreRadar Limited (company number 15771343), a company registered in England & Wales ("we", "us", "StoreRadar"). For any privacy or data protection question, contact privacy@storeradar.co. We act as the data controller for customer account data and may rely on legitimate interests, where applicable and subject to applicable law, for publicly available merchant business contact data we aggregate. We will complete any assessment required by applicable law before relying on that basis and will maintain the applicable rights process. We have not appointed a Data Protection Officer because we are not required to under UK GDPR Article 37 — but you can reach us at the privacy address above for any data-protection matter.

2. What data we collect

From you (the customer):

• The email address you submit at Stripe Checkout.
• The contents of your filter form: vertical, price band, country, your offer description, and your ICP description.
• Stripe customer and payment metadata. Card data is handled by Stripe and never touches our servers. We store only your customer_id and subscription_id as references.

From public Shopify storefronts:

• Publicly published catalog data and store metadata: store name, currency, language, theme, installed apps detectable from public HTML, and catalog signals such as product count and average price.
• Business contact information published by the merchant on publicly accessible pages such as their contact, about, or policy pages.
• We do not access merchant admin areas, do not log into customer accounts, and do not scrape content behind authentication or paywalls.

What we do not collect: we do not use third-party advertising trackers, do not set marketing cookies, and do not run cross-site analytics. Aggregate server logs (IP, timestamp, request path) are kept for 30 days for security and debugging.

3. What data we ship to you

Each CSV row contains:

• Merchant domain and public store name.
• Shopify-native vertical classification.
• Catalog signals: product count, average price, currency.
• Technical stack fingerprint (detectable apps and theme).
• Language (ISO-639-1).
• Our internal SEO score.
• Contact email addresses extracted from publicly accessible store pages.

We do not intentionally ship private or login-gated data, do not sell personal browsing histories, and do not include individuals who are not publicly associated with the business. A contact name, job title, or email may still constitute personal data where it identifies an individual in a business role.

4. Legal basis for processing (UK GDPR)

• Customer data (your account, billing, support correspondence): contractual necessity under UK GDPR Article 6(1)(b).
• Business-contact intelligence: StoreRadar may rely on legitimate interests under UK GDPR Article 6(1)(f), where applicable and only where any assessment required by applicable law supports that basis. Each contact is sourced from business-facing information that was publicly made available. Information about safeguards is available on request to privacy@storeradar.co. Any outreach you send using StoreRadar must comply with applicable direct-marketing law and include required objection and opt-out mechanisms.
• EU customers: where you are located in the European Economic Area, processing is on the equivalent EU GDPR legal basis. StoreRadar Limited acts as data controller under both UK and EU GDPR for customer data.

5. Data retention

• Customer accounts: retained for the duration of your subscription plus 6 years to meet UK accounting and tax retention requirements (Companies Act 2006 and HMRC guidance). After that period, account data is deleted or anonymised.
• Merchant data in our database: re-indexed periodically. Removal requests for any indexed storefront are honoured within 30 days — email privacy@storeradar.co with the domain.
• Suppression list: contacts that have unsubscribed are stored on a suppression list and never re-included in any outbound shipped via StoreRadar.
• Server logs: 30 days.

6. Your rights (UK GDPR)

Under UK GDPR and the Data Protection Act 2018 you have the right to access, rectify, port, delete, restrict, and object to processing of your personal data, and to withdraw consent at any time where consent is the legal basis. You also have the right to object to processing carried out on a legitimate-interests basis.

To exercise any of these rights, email privacy@storeradar.co with the request. We respond within one month, as required by UK GDPR Article 12(3). You also have the right to lodge a complaint with the UK supervisory authority — the Information Commissioner's Office (ICO). EU residents may complain to their local supervisory authority.

7. Sub-processors

StoreRadar relies on the following providers to operate the service. We use contractual and technical safeguards appropriate to the processing, and each provider's own terms and privacy documentation may also apply:

• Stripe Payments Europe Ltd (Ireland) — payment processing. stripe.com/privacy
• Resend (USA) — transactional email delivery (your CSV download link, receipts, account notices).
• Google Gemini API (Ireland / USA) — drafting outreach email text. Your form input is sent as a prompt. Per Google's published policy for Gemini API, prompt content from paid API tier is not used to train Google's models.
• Render Services Inc. (USA) — application hosting.
• Cloudflare, Inc. (USA) — bot and abuse protection on the demo search form (Cloudflare Turnstile). When you use the demo, a challenge token is verified against Cloudflare's API; your IP address is transmitted as part of that verification. Cloudflare processes this data under its Customer DPA and Privacy Policy, including the Turnstile Privacy Addendum.

We do not share customer data with any third party for marketing or advertising purposes.

8. International transfers

Some of our sub-processors are located in the United States or Ireland. Where personal data is transferred outside the UK, we rely on the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, as applicable, together with the providers' own adequate technical and organisational measures. For EU-residing customers, equivalent EU Standard Contractual Clauses apply. A copy of the relevant transfer mechanism for any specific sub-processor is available on request to privacy@storeradar.co.

9. Changes to this policy

We may update this policy as the product evolves. Material changes will be emailed to active subscribers at least 14 days before they take effect. The "Last updated" date at the top of this page always reflects the most recent revision.

Terms of Service

What you're buying, what we guarantee, what we don't, and the rules of acceptable use. By paying for a StoreRadar tier you agree to these terms.

1. Service, plans and credits

The plan price, currency, applicable taxes, credit allocation, and billing interval shown at checkout form part of your order. Prices are in US dollars. Any applicable taxes are shown at checkout and added where required by law.

• Starter — US$149 one-time: 500 Credits. Starter Credits expire 30 calendar days after successful payment.
• Scale — US$399 per month: 1,500 Credits for each monthly billing period successfully paid.
• Business — US$799 per month: 5,000 Credits for each monthly billing period successfully paid.

Credit use. A Credit is a unit used to provide a delivered store-intelligence record and has no cash value. One Credit is charged for each store-intelligence record made available by export, download, API response, or another delivery method. Store intelligence includes available store identity, domain, region, vertical, catalogue signals, detected technology or apps, and other available store fields. Two Credits are charged where the delivered record also includes a named business contact, job title, and a work email marked as verified by StoreRadar's verification process. Phone data is optional and may not be available for every record. Previewing, filtering, searching, and browsing do not use Credits.

Verification. A verified label reflects checks performed at the time stated in the record. It is not a guarantee that an address remains active, reaches a particular person, or receives a message.

Expiry and rollover. Scale and Business Credits may roll over while the subscription remains active, up to a maximum balance equal to two monthly Credit grants. If a new grant would take the usable balance above that cap, only the amount needed to reach the cap is added; the remainder is recorded as capped and is not usable or separately charged. Each monthly Credit grant expires 90 calendar days after its issue date. Credits are consumed from the grant with the earliest expiry first. Cancellation stops future grants; existing unexpired Credits remain available until their recorded expiry unless the order is refunded or applicable law requires otherwise. Credits are not transferable and cannot be exchanged for cash, except where required by law.

Allowance. A recurring allocation is issued only after successful payment of the relevant Stripe invoice. A failed payment does not create a new allocation. When the available balance is exhausted, no automatic overage is charged or issued.

2. Data, delivery and accuracy

StoreRadar provides business intelligence compiled from publicly accessible storefront, catalogue, technology, and business-contact signals. We do not access merchant administration areas, login-gated content, or paywalled content.

• Delivery: we make qualifying records available through the service or export after payment confirmation, typically within minutes. If delivery fails because of an issue on our side, we will rerun the affected delivery at no additional Credit cost or refund the affected order, subject to applicable law.
• Data quality: data may be incomplete, outdated, unavailable, or inaccurate because storefronts and public contact information change. We provide timestamps or field-status information where available and do not guarantee that every record contains every field.
• Outcome limitations: we do not guarantee inbox placement, message delivery, replies, conversions, a particular commercial outcome, or uninterrupted availability. Drafted outreach text is a starting point; you remain responsible for reviewing it and complying with applicable law before sending it.

3. Payment, renewal, cancellation and refunds

Starter is a one-time purchase. Scale and Business subscriptions renew automatically at the end of each monthly billing period unless cancelled before the next billing date. Stripe will attempt to collect the renewal payment. You may cancel through the Stripe-hosted billing portal where available or by contacting legal@storeradar.co. Cancellation prevents the next charge; it does not pro-rate the current billing period.

Except where required by applicable law, Starter payments are non-refundable after Credits have been made available. Scale and Business payments for a current monthly billing period are non-refundable after that period's Credits have been made available, and cancellation does not pro-rate the current period. We review a refund request where delivered results materially fail the filters selected and documented by the customer at export. Send the request, including the order or export reference, to legal@storeradar.co. Statutory rights under the UK Consumer Contracts Regulations 2013 and equivalent consumer-protection law are not affected. If you are a consumer and ask us to begin supplying a service or digital content during a statutory cancellation period, we will seek the required consent and acknowledgement before supply begins.

4. Acceptable use and data protection

You may use delivered data for your internal B2B prospecting and business-analysis purposes only. You must comply with applicable data-protection, electronic-marketing, and objection or opt-out requirements, maintain suppression lists, and provide any notices required by law.

• You may not resell, publish, or share the raw dataset as a standalone dataset without a separate written licence.
• You may not use the data for consumer targeting, discriminatory, deceptive, harassing, abusive, or otherwise unlawful activity.
• You may not reverse-engineer the service or bypass rate limits.

StoreRadar and the Customer each act as independent controllers for the personal data each processes for its own purposes, subject to applicable law. StoreRadar may rely on legitimate interests under UK GDPR Article 6(1)(f) where applicable and only where any assessment required by applicable law supports that basis. StoreRadar's processing is described in the Privacy Policy and Controller-to-Controller Data-Sharing Addendum. The Customer is responsible for its own subsequent use of delivered data and outreach.

A material breach of acceptable use may result in suspension or termination, subject to applicable law. No suspension or termination removes statutory rights or fees already properly due.

5. Intellectual property

• You own the outbound emails you send using drafts derived from our CSVs.
• We own the codebase, database structure, AI prompts, and aggregated dataset.
• Drafted email text is licensed to you for your own outbound use — you may edit, rewrite, send, or discard freely. The license is non-transferable except as part of normal outbound activity.

6. Liability

StoreRadar is a product of StoreRadar Limited (company number 15771343), a company registered in England & Wales. To the maximum extent permitted by law, our total liability for any claim arising out of or in connection with these terms is limited to the amount you paid us in the 12 months preceding the event giving rise to the claim. We provide the service "as is" and disclaim all implied warranties of merchantability, fitness for a particular purpose, and non-infringement to the extent permitted by law. Nothing in these terms limits or excludes liability for (i) death or personal injury caused by negligence, (ii) fraud or fraudulent misrepresentation, or (iii) any liability which cannot be limited or excluded under UK or EU consumer protection law.

7. Governing law and disputes

These terms are governed by the laws of England and Wales. Subject to mandatory consumer protection rules in your country of residence, the courts of England and Wales have exclusive jurisdiction over any dispute arising out of or in connection with these terms. EU-resident consumers retain any non-waivable rights under their local law.

8. Contact

StoreRadar Limited registered office: 30 Gruffydd Drive, Caerphilly, Wales, CF83 3FZ. Privacy and data protection: privacy@storeradar.co. Legal, billing, and refund: legal@storeradar.co. Response within 5 business days; statutory response windows (e.g., one month for UK GDPR data subject requests under Article 12(3)) are honoured separately.