Privacy Policy
This policy explains what personal data we process when you use auwo prices at prices.auwo.ai (the “Service”), why, how long we keep it, and your rights under Regulation (EU) 2016/679 (GDPR) and the Bulgarian Personal Data Protection Act.
1. Controller
The controller is Vaklin Stoynovski (natural person), Burgas, Bulgaria, trading under the auwo brand. Contact for questions and to exercise your rights: audit@auwo.ai. We have not appointed a data protection officer, as one is not required for our type and scale of processing (Art. 37 GDPR).
2. What data we process
- Account. Email, name and, with Google sign-in, profile picture.
- What you enter. Product names, your own prices and the addresses of shop pages. This is usually business data, not personal data.
- What is read from the pages. Price, currency, availability, promotion text and title of public product pages, with the date of reading.
- Reports. The daily reports and whether they were sent by email or Telegram.
- Price-change file. Each report offers an .xlsx with suggested prices. The link in the email is signed and valid for 30 days: anyone who has it can download the file, so do not forward it.
- Telegram (optional, paid plan). The chat identifier you link with the code from settings.
- Technical data. IP address, browser and device type, technical logs.
3. Purposes and legal bases
- Tracking the addresses you add and sending you reports. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
- Security, abuse protection and usage limits. Legal basis: legitimate interest (Art. 6(1)(f)).
- Fixing errors. Legal basis: legitimate interest.
- Aggregate visit statistics (Vercel Web Analytics, cookieless, no visitor profiles). Legal basis: legitimate interest.
We do not sell your data, do not use it for advertising and make no automated decisions with legal effects on you.
4. How the pages are read
Every day, at the times of your plan, we read only the publicly accessible pages you added. We respect each site’s robots.txt: if it disallows access, the page is not read. We pause between requests. When a page has no clearly marked price, its text is sent through Vercel AI Gateway to a Google (Gemini) model so the price can be read. Only the text of the public shop page is sent, not your data.
5. How long we keep data
- Account, products, addresses, readings and reports: while your account exists. Deleting a product deletes its readings.
- Upgrade requests: up to 12 months.
- Technical logs: briefly, typically up to 30 days.
6. Recipients and processors
These providers process data on our behalf, under contract and only on our instructions:
- Vercel Inc.: hosting, aggregate statistics and AI Gateway.
- Railway Corp.: database and the worker that reads the pages (Amsterdam region, EU).
- Clerk Inc.: accounts and sign-in.
- Google Ireland Limited / Google LLC: reading the text of pages without a clear price (Gemini).
- Microsoft Ireland Operations Limited: sending reports by email.
- Telegram FZ-LLC: only if you link Telegram.
Some of these providers may process data in the United States. Transfers are protected by GDPR safeguards: certification under the EU–US Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses.
7. Security
- Encryption in transit (HTTPS/TLS).
- Each user sees only their own products, addresses and reports.
- Keys and passwords are kept in protected environment variables, not in code.
8. Your rights
You have the right to access, rectification, erasure, restriction of processing, data portability, and to object to processing based on legitimate interest. You delete products and addresses yourself in the Service; for your account and everything else write to audit@auwo.ai. We reply within one month.
You may lodge a complaint with the Bulgarian Commission for Personal Data Protection: 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, www.cpdp.bg, or with the supervisory authority where you live.
9. Changes
We may update this policy. The current version and its date are always on this page.