Privacy Policy

1. Who We Are

NicheIQ ("we", "us", "our") operates the website nicheiq.ai and the NicheIQ Chrome extension. NicheIQ is a niche analysis tool for Amazon sellers that helps users research, validate, and track product niches from Amazon Seller Central data.

2. Data We Collect

Account Information

• Email address (used for authentication and communication)
• Password (securely hashed with Argon2 — we never store plaintext passwords)

Niche & Product Data

• Niche analysis data scraped from Amazon Seller Central via our Chrome extension (search terms, product metrics, market data)
• Saved sessions, notes, and insights you create within the app

Payment Information

• Payments are processed by Stripe. We do not store your credit card number. We receive from Stripe: your subscription status, plan type, and billing history.

Analytics

• We use PostHog for anonymized product analytics (page views, feature usage). No personal identifiers are sent to PostHog.

Technical Data

• IP address, browser type, and device information (collected automatically by our servers for security and debugging purposes)

3. How We Use Your Data

• To provide and operate the NicheIQ service
• To authenticate you and secure your account
• To send transactional emails (OTP codes, password resets, invoices) via SMTP
• To process payments and manage subscriptions via Stripe
• To improve the product based on anonymized usage analytics
• To respond to support requests

4. Data Sharing

We do not sell, rent, or trade your personal data. We share data only with:

• Stripe — payment processing
• PostHog — anonymized analytics
• Hostinger SMTP — transactional email delivery
• Supabase — database hosting (PostgreSQL)

All third-party providers are bound by their respective privacy policies and process data on our behalf.

5. Data Storage & Security

• Your data is stored in a PostgreSQL database hosted on Supabase
• Our backend API (NestJS) runs on a VPS managed with Kubernetes
• All communications are encrypted via HTTPS / TLS
• Passwords are hashed using Argon2
• We implement standard security practices including rate limiting, input validation, and access controls

6. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where we are required by law to retain it (e.g., billing records for tax purposes).

7. Your Rights (GDPR)

If you are located in the European Economic Area (EEA), you have the following rights:

• Access — request a copy of your personal data
• Rectification — request correction of inaccurate data
• Erasure — request deletion of your data
• Portability — request your data in a machine-readable format
• Objection — object to processing of your data

To exercise any of these rights, contact us at privacy@nicheiq.ai. We will respond within 30 days.

8. Cookies

We use essential cookies for authentication and session management. Our analytics provider (PostHog) may use cookies for anonymized tracking. We do not use advertising or third-party tracking cookies.

9. Chrome Extension

The NicheIQ Chrome extension accesses Amazon Seller Central pages to extract niche and product data. This data is sent to our servers solely for the purpose of providing you with niche analysis features. The extension does not access any other browsing data.

10. Children's Privacy

NicheIQ is not intended for use by anyone under the age of 16. We do not knowingly collect personal data from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through an in-app notice. The "Last updated" date at the top reflects the most recent revision.

12. Contact Us

If you have any questions about this Privacy Policy, contact us at: privacy@nicheiq.ai