Privacy Policy

Version 2026-11-01 · Last updated November 1, 2026

The short version: we keep only what we need to build your reports, we don't sell your data, we never ask for your marketplace passwords, and you can export or delete everything from the app at any time.

Who we are

BidBrain AI is run by Karl Duncan. Contact us at karl@quotabuster.net.

What we collect

Account details: your email address, and your name and profile photo if you sign in with Google. Sign in is handled by our login provider, Clerk.
Sales data you upload or enter: when you add a report, BidBrain AI reads the file in your browser and sends us only the fields it needs for each line: date, platform, item title, SKU, quantity, buyer username, sale price, fees, shipping, refunds, cost of goods, payout, and show name and ID. We don't keep the original file or columns we don't use, such as buyer shipping state or listing descriptions.
Inventory you upload: SKU, title, cost, quantity and date added.
Billing details: your Stripe customer ID, subscription status and renewal date. Stripe handles your card; we never receive the full card number.
Agreement records: which version of our terms you accepted, when, and your browser's user agent.
Technical data: standard server logs such as IP address, browser type and errors, kept by our hosting provider for security and troubleshooting.

What we don't collect

We never ask for or store your Whatnot, eBay, Vinted, Poshmark or other marketplace passwords. We don't use advertising trackers.

How we use it

To build your reports and show them only to you
To run your free trial and subscription
To send account and billing emails, such as a trial ending or a price change notice
To keep BidBrain AI secure, fix problems and improve it

We don't sell or rent your personal information or your sales data, and we don't share it for cross context behavioral advertising.

Your buyers' usernames

Your reports include the usernames of people who bought from you. We process them only on your behalf, only to show you buyer insights such as top and repeat buyers, and never use them for anything else. You can delete them at any time by deleting your data.

Who we share it with

Only the service providers that run BidBrain AI, under contracts that limit their use of your data:

Cloudflare: hosting and database
Clerk: sign in and account security
Stripe: payments and billing

We may also disclose information if the law requires it, to protect someone's safety, or as part of a sale or merger of the business, in which case this policy continues to apply to your data.

How long we keep it

We keep your data while your account is open. If you delete your data or your account in the app, we remove it from our live database right away; copies in backups are overwritten within 30 days. We keep billing records as long as tax law requires.

Your choices and rights

Export: download all your sales data as a CSV from the Data page.
Delete: delete one platform's data, all your data, or your whole account from the app.
Access or correct: email karl@quotabuster.net. Depending on where you live, including California, Colorado, Virginia, Texas and other states, you may have the right to know, access, correct, delete and port your data, and to not be discriminated against for using these rights. We honor these requests for everyone and answer within 30 days.

Security

Data is encrypted in transit, and access to your data requires your signed in account. No system is perfectly secure; if a breach affects your data, we'll notify you as the law requires.

Children

BidBrain AI is for adults 18 and older. We don't knowingly collect data from anyone under 18.

Changes

If we make a material change, we'll tell you by email or in the app before it takes effect.

Contact

karl@quotabuster.net