Privacy

Your account. Email, an optional name, a hashed password, and sign-in sessions that expire after 30 days. Account actions (sign-ins, plan changes, approvals) are logged so you can see them and we can investigate abuse. That log is kept for a year (IP addresses for 90 days), including after you delete your account.

Your asks. The text you type and what Nabbit understood from it: product, budget, dealbreakers, the sources to search. Kept until you delete the ask or the account. An anonymous copy of the words you typed stays after that; see Aggregated information.

Where you are. Your home ZIP code, used for pickup distance and shipping estimates. Never a street address, unless you save a checkout profile for auto-approve; that profile is encrypted at rest and you can remove it from Account at any time. Card numbers never touch Nabbit; payments run through Stripe.

Photos. A photo you upload to find something is private to you, is read once to work out what the product is, and is deleted with the ask or the account. Photos are never used to train any model, ours or anyone else's.

What it saw. The listings Nabbit found for you, its verdict on each, and any purchase it handed off or made. Kept with the ask.

Comparable prices. Asking and sold prices seen on public marketplaces, keyed by product and condition, kept for 60 days and shared across every user so “typical $X” is accurate. They carry no user data.

Listing history. Every public listing Nabbit has seen on a marketplace: its title, price, and when it appeared and disappeared. Kept without a time limit to learn how fast things sell at each price. It carries no user data.

Running costs. A record of each search Nabbit ran and what it cost, for our own accounts. It holds an internal account number and ask number, never your email or what you typed, and it is kept after you delete the ask or the account.

Cookies. Only the ones Nabbit needs to work: one that keeps you signed in and, during the preview, one that remembers the site password. No advertising or tracking cookies. Page visits are counted with Vercel Web Analytics, which uses no cookies and does not identify you.

If you ask for an invite. The email you gave, what you said you are hunting and your top price, so we can decide who to invite next and send you a key. No account is created until you use the key. Email us at contact@nabbit.now and we delete it.

Alerts. A push subscription if you turn on push, and a phone number if you give one (optional, verified, and you can turn it off; texts are not live yet).

Model providers. Your ask text, listing text and photos are sent to the model that reads them, under API terms that exclude training on the data.

Marketplaces. Only the search text and, for eBay shipping estimates, your ZIP code. Sellers never see your ask.

Services Nabbit runs on. Hosting (Vercel), the database (Supabase), email (Resend) and payments (Stripe) process data on our behalf.

Stores you buy from. A handoff link may carry an affiliate tag; the card says so when it does. It does not change the price and tells the store nothing about you.

We may create aggregated or de-identified information from how Nabbit is used, such as which kinds of products people look for and at what prices. This information does not identify you and cannot reasonably be linked back to you, and we may use it for any purpose, including sharing it with business partners. That includes a copy of the words you type into an ask, saved with no name, email, account or ask attached and dated only to the day. Because it cannot be traced to you, it stays after you delete the ask or your account, and it is only ever shared as part of an aggregate. You can opt out of contributing to it in your account settings.

• Sell, rent or trade your personal data, or show you ads.
• Share your asks, photos or location with sellers or other users.
• Use your photos or asks to train models.
• Buy anything you did not approve, unless you armed auto-approve for that ask.

Delete an ask and its photos and listings go with it. Delete your account from Account and everything above goes, photos included, and any subscription is cancelled. The account log stays for the rest of its year so abuse can still be looked into, and the comparable prices, listing history, running costs and anonymous copies of what you typed stay because they are not tied to you.

Email contact@nabbit.nowcopy, or reply to any email Nabbit sends you. Both reach the founder.