Privacy Policy

1. Who We Are

NicheIQ ("we", "us", "our") operates the website nicheiq.ai and the NicheIQ Chrome extension (together, the "Service"). NicheIQ is a Chrome extension for Amazon sellers: it opens as a side panel and, when you click Capture on a niche page in Amazon's Product Opportunity Explorer in your own Seller Central account, it reads that page's data and generates AI reports from it.

NicheIQ is responsible (as data controller) for the personal data described in this policy. For any privacy question or request, contact privacy@nicheiq.ai.

2. Data We Collect

Account information

• Email address (used to sign in and to contact you)
• Password, stored only as a hash using Argon2 — we never store your password in plain text

Niche data you choose to capture

• When you click Capture on a Product Opportunity Explorer niche page, the extension reads the data shown on that page: niche metrics, search terms and top products
• The extension reads a page only when you click Capture. We don't use it to collect your browsing history or other Seller Central data such as your orders, inventory or customer information

Content generated in the Service

• AI reports generated from the niches you capture
• Messages you send to the AI Niche Agent chat (Pro plan) and its replies
• Your session history and the reports you export (CSV, JSON or PDF)

Usage and credit logs

• Records of the niche scans you use, the reports you generate, your plan and your remaining quota

Feedback and support messages

• Feedback you send from the extension, and the messages you send us by email or through the contact form on our website (name, email address, subject and message)

Payment information

• Payments are processed by Stripe. Your card details are handled by Stripe only — we never see or store them. We receive from Stripe your subscription status, plan, billing period and billing history.

Product analytics and session replay (extension)

• The extension uses PostHog (US cloud) to record events about how features are used (for example, that a niche was captured or a report was generated). These events are linked to a pseudonymous account ID and include your plan and quota information. PostHog may also record standard technical information such as browser, operating system and approximate location derived from your IP address.
• PostHog also records sessions of the extension side panel (session replay), so we can understand how the interface is used and fix problems. Form inputs — such as email addresses, passwords, verification codes and feedback text — are masked and not captured in recordings.

Technical data

• Like most online services, our servers log technical information such as IP address, browser type and request timestamps, for security and debugging purposes

3. Our Website

The nicheiq.ai website does not use analytics, advertising or tracking tools, does not use PostHog, and does not set cookies. It only stores your light/dark theme preference in your browser's local storage; this preference stays on your device and is not sent to us. If you use the contact form, the information you enter is sent to us to answer your message.

4. How We Use Your Data and Legal Bases

• To provide the Service — create and secure your account, capture niches, generate AI reports and chat replies, keep your history, enable exports and apply plan limits. Legal basis: performance of our contract with you.
• To manage subscriptions and payments through Stripe. Legal basis: contract; keeping billing records is a legal obligation.
• To send service emails such as verification codes and password resets. Legal basis: contract.
• To send lifecycle and product emails (for example onboarding tips, usage reminders and product updates). Legal basis: legitimate interest, or your consent where the law requires it. You can unsubscribe at any time using the link in these emails.
• To analyze and improve the product using product analytics and session replay. Legal basis: legitimate interest in understanding how NicheIQ is used and fixing problems; you can object at any time (see Your Rights).
• To keep the Service secure — prevent abuse and fraud, enforce fair-use limits and debug issues. Legal basis: legitimate interest.
• To answer support requests and feedback. Legal basis: contract or legitimate interest.
• To comply with the law and respond to lawful requests from authorities. Legal basis: legal obligation.

5. AI Processing

To generate reports and AI Niche Agent replies, the niche data you capture and the chat messages you send are transmitted to our AI model provider, Anthropic, through its API. Under Anthropic's commercial terms, data sent through the API is not used to train its models. We don't use your data to train AI models either. Please don't include unnecessary personal information in chat messages.

6. Who We Share Data With

We do notsell, rent or trade your personal data, and we don't share it for advertising. We share it only with the service providers (sub-processors) that help us run NicheIQ, who process it on our behalf and under our instructions:

• Stripe — payment processing and subscription billing
• PostHog — product analytics and session replay for the extension (hosted in the USA)
• Anthropic — AI model provider: captured niche data and chat messages are sent to its API to generate reports and replies
• Loops — lifecycle and product emails (email address, plan and usage counters)
• Hostinger — server hosting for our API and website, and SMTP delivery of transactional emails
• Supabase — PostgreSQL database hosting in the European Union (Ireland)

We may also disclose data when required by law, to protect our rights or the security of the Service, or to a successor in the event of a merger or acquisition, in which case this policy will continue to apply.

7. International Transfers

Some of our providers — including PostHog, Anthropic, Loops and Stripe — process data in the United States. These transfers rely on the European Commission's Standard Contractual Clauses and/or the EU-U.S. Data Privacy Framework, as provided by each provider.

8. Data Retention

• We keep your account data — including captured niches, reports, chat messages and usage logs — for as long as your account exists
• If you ask us to delete your account, we delete your personal data within 30 days of your request
• Billing records are kept for as long as the law requires (for example, for accounting and tax purposes)

9. Your Rights

Under the GDPR and similar laws, you have the right to:

• Access — get a copy of your personal data
• Rectification — correct inaccurate data
• Erasure — have your data deleted
• Portability — receive your data in a structured, machine-readable format
• Objection — object to processing based on our legitimate interests, including product analytics and session replay
• Restriction — ask us to limit how we process your data

Where processing is based on your consent, you can withdraw it at any time. To exercise any of these rights — including deleting your account or getting an export of your data — email privacy@nicheiq.ai from the email address linked to your account. Account deletion is handled by request; it isn't available as a self-service option yet. We respond within one month.

You also have the right to lodge a complaint with a supervisory authority, in particular the French data protection authority, the CNIL.

10. Chrome Extension and Chrome Web Store User Data Policy

NicheIQ's use of information received through the Chrome extension complies with the Chrome Web Store User Data Policy, including the Limited Use requirements.

• We use data received through the extension only to provide and improve NicheIQ's niche analysis features
• We do not sell this data
• We do not use or transfer it for purposes unrelated to NicheIQ's core functionality, such as advertising
• We do not use or transfer it to determine creditworthiness or for lending purposes

The extension stores what it needs to keep you signed in and to run product analytics (such as a session token and an analytics identifier) locally in your browser, in the extension's storage.

11. Security

• All communications are encrypted in transit (HTTPS / TLS)
• Passwords are hashed with Argon2
• We use access controls, rate limiting and input validation to protect the Service

No method of transmission or storage is completely secure, but we work to protect your data and will notify you and the relevant authorities of a data breach where the law requires it.

12. Children's Privacy

NicheIQ is not intended for anyone under the age of 16. We do not knowingly collect personal data from children.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or in the extension. The "Last updated" date at the top reflects the most recent revision. See also our Terms of Service.

14. Contact Us

If you have any questions about this Privacy Policy, contact us at privacy@nicheiq.ai.