Privacy Policy

v2026-05-14

This Privacy Policy explains how Clairbytes OÜ collects, uses, stores, shares, and deletes personal data when you use Offer Inspector. Clairbytes OÜ, a private limited company registered in Estonia with registration code 17463632, is the data controller responsible for the processing of personal data in connection with offer-inspector.com.

About the Data Controller

Offer Inspector is developed and operated by Clairbytes OÜ, a private limited company registered in Estonia with registration code 17463632. Clairbytes OÜ is the data controller responsible for the processing of personal data in connection with the service.

Purpose of Data Processing

We process personal data to operate Offer Inspector, provide account-based features, perform requested calculations, synchronize supported user data across devices, manage subscriptions, protect the service against abuse, respond to user requests, comply with legal obligations, and improve the reliability and usability of the product.

Account and Authentication Data

Accounts are created exclusively via Google OAuth. When you sign in with Google, Offer Inspector receives the Google profile information made available during authentication, such as your name, email address, profile picture, authentication identifier, and related account metadata. We use this information to create and manage your account, authenticate you, and provide account-based features.

Data Storage and Processing

When you use Offer Inspector without signing in, your offer and workspace data is stored in your browser's local storage and is not saved as account data in our backend database.

Anonymous usage may still involve sending the data required for calculation to our backend servers so that the requested calculation can be performed. This data is processed transiently for the purpose of returning the calculation result and is not stored as user-created account data in our backend database.

Technical logs may be generated for security, debugging, abuse prevention, and service reliability purposes, subject to the retention rules described in this Privacy Policy.

Because anonymous data is stored locally in your browser, it may be lost if you clear browser storage, change browsers, change devices, use private browsing mode, or if browser storage is otherwise deleted.

When you sign in, supported offer, workspace, and account-related data is stored in our backend database to enable synchronization across devices and account-based access.

You may delete locally stored data at any time via your browser settings or available application controls. Server-stored account data can be deleted by removing your account from within the application, where available, or by contacting us at [email protected].

User Data and Privacy Rights

As a data controller under EU GDPR, Clairbytes OÜ processes personal data only where there is a lawful basis for doing so. You may have the right to access, correct, delete, restrict, or object to the processing of your personal data, and you may also have the right to data portability. Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal. Requests can be sent to [email protected]. We may need to verify your identity before fulfilling a data-related request.

Categories of Personal Data We Process

Account data: name, email address, profile picture, authentication identifiers, and related account metadata received through Google OAuth.

User-created data: offers, workspaces, compensation inputs, tax-residence selections, benefit and drawback information, comparison data, notes, and other information entered by the user into the service.

Billing-related data: subscription tier, subscription status, billing portal status, Lemon Squeezy identifiers, payment status, renewal status, invoice or transaction metadata, and other metadata required to manage access to paid features. We do not store full payment card details.

Technical data: device type, browser type, IP address, approximate location derived from IP address, logs, timestamps, session identifiers, error reports, diagnostic data, and usage patterns needed to operate, secure, debug, and improve the service.

Local storage data: when used anonymously, Offer Inspector stores data in your browser's local storage. This data remains on your device unless you clear it or sign in and choose to synchronize supported data.

Communication data: messages, requests, or other information you send to us through email, contact forms, support channels, or similar communication methods.

Legal Basis for Processing

We process account and authentication data where processing is necessary to create and manage your account, authenticate you, and provide account-based features requested by you.

We process user-created offer, workspace, compensation, benefit, drawback, tax-residence, and comparison data where processing is necessary to provide the calculation, comparison, synchronization, and storage features requested by you.

We process billing-related data where processing is necessary to manage subscriptions, paid feature access, billing portals, payment status, invoices, refunds, disputes, accounting records, tax records, and legal obligations.

We process technical, diagnostic, security, and log data based on our legitimate interest in keeping the service secure, reliable, functional, protected against abuse, and capable of being debugged and improved.

We process communication data where necessary to respond to your requests, provide support, handle legal or privacy requests, and maintain appropriate records of such communications.

Where consent is required by law, such as for optional analytics, non-essential cookies, or similar technologies, we rely on your consent.

Analytics and Tracking

We may use analytics tools, such as Google Analytics, to understand usage patterns, improve reliability, debug product issues, and improve the service. Analytics data may include technical information such as device type, browser type, pages visited, approximate location derived from IP address, interaction events, timestamps, session identifiers, and similar usage data. We do not use analytics tools to collect the contents of user-created offers, compensation inputs, workspace notes, or comparison data. Where required by law, optional analytics cookies or similar technologies are used only with your consent. Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Third-Party Processors

Google OAuth is used for authentication and account creation.

Lemon Squeezy is used for payment processing, subscription management, tax calculation, billing records, and billing portal access.

Hosting, database, infrastructure, logging, analytics, error-monitoring, email, and communication providers may be used where necessary to operate, secure, maintain, and improve the service.

Third-party providers process personal data only as necessary to provide their respective services to Clairbytes OÜ or to the user, and where applicable they are required to process such data under appropriate contractual and data-protection obligations.

Payments and Billing Data

Payments are processed by Lemon Squeezy. We may store billing-related identifiers, subscription status, plan information, payment status, renewal status, invoice metadata, transaction metadata, and related information needed to grant or restrict access to paid features, maintain accounting and tax records, handle refunds or disputes, and comply with legal obligations. Payment card details are processed by Lemon Squeezy and/or its payment providers. We do not store full payment card details.

Account Deletion and Data Deletion

You may request deletion of your Offer Inspector account and associated personal data from within the application, where available, or by contacting us at [email protected].

Once account deletion is completed, we will delete or anonymize personal data associated with your Offer Inspector account, except for information that we are required or permitted to retain for legal, accounting, tax, security, fraud-prevention, dispute-resolution, or compliance purposes. This action is irreversible for data that is deleted.

Billing, accounting, security, technical log, and legal records may be retained where required by law or where retention is necessary for legitimate legal, security, or compliance purposes.

If you have an active paid subscription, some billing and subscription records may need to be retained even after account deletion where required for legal, accounting, tax, dispute-resolution, or compliance purposes.

Data Retention

Anonymous local data remains in your browser's local storage until you delete it through your browser settings or application controls.

Account data and user-created data are retained while your account remains active, unless deleted earlier by you or unless a shorter retention period applies.

If your subscription expires or your account becomes inactive, user-created data may be retained for a limited period before deletion, unless continued retention is required or permitted for legal, accounting, tax, security, fraud-prevention, dispute-resolution, or compliance purposes.

Technical logs and security records are retained only for as long as reasonably necessary for service operation, debugging, fraud prevention, security, abuse prevention, and legal compliance.

Billing, accounting, tax, invoice, transaction, and payment-related records may be retained for the period required by applicable law.

Communication records may be retained for as long as reasonably necessary to respond to your request, maintain appropriate business records, resolve disputes, or comply with legal obligations.

Security

We use reasonable technical and organizational measures to protect user data, including HTTPS transmission, access controls, and measures designed to protect the service against unauthorized access, misuse, loss, or alteration. However, no internet-based service can guarantee absolute security.

International Data Transfers

Some third-party providers, including authentication, analytics, hosting, infrastructure, logging, email, communication, or payment providers, may process personal data outside Estonia or the European Economic Area. Where this happens, we rely on appropriate safeguards such as European Commission adequacy decisions, Standard Contractual Clauses, contractual protections, or other lawful transfer mechanisms under GDPR.

Cookies and Local Storage

Offer Inspector may use cookies, local storage, or similar technologies for authentication, functional operation, analytics, security, and user preferences.

Anonymous offer and workspace data is stored in your browser's local storage and is not saved as account data in our backend database. However, data required to perform calculations may be sent to our backend servers transiently when you request a calculation.

No cookies store the content of user-created offers. Anonymous offer and workspace data may be stored in browser local storage.

Where required by law, optional analytics cookies or similar technologies are used only with your consent. You may withdraw your consent at any time where processing is based on consent.

Children's Privacy

Offer Inspector is not intended for children under 16. We do not knowingly collect personal data from children under 16. If you believe that a child has provided us with personal data, please contact us so that we can take appropriate action.

Changes to Privacy Policy

This Privacy Policy may be updated from time to time. The current version was last updated on 13 May 2026. For material changes, we will make reasonable efforts to notify registered users.

Right to Lodge a Complaint

If you believe that your personal data has been processed unlawfully, you have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) or with another competent data protection authority in the EU or EEA.

Required Data and Consequences of Not Providing Data

Some personal data is required to provide Offer Inspector. For example, account and authentication data is required to create an account and synchronize data across devices, user-created data is required to perform requested calculations and comparisons, and billing-related data is required to provide paid features. If you do not provide required data, some features may not be available.

Source of Personal Data

Most personal data we process is provided directly by you when you use the service. Account and authentication data is received from Google OAuth when you sign in. Billing-related data is received from Lemon Squeezy in connection with subscriptions, payments, billing records, and access to paid features. Technical data is generated automatically when you use the service.

Contact

For questions, concerns, or data-related requests, please contact us at [email protected] or through our contact form.