Privacy Policy

Data controller

The controller of the personal data collected through Pépite is:

FLEECE AI (SASU), registration number (SIREN) 932 329 188, registered with the Clermont-Ferrand Trade and Companies Register (RCS), with its registered office at 10 rue Pierre Poisson, 63400 Chamalières, France.

Publication director: Loïc Jané.

For any question about your data or this policy, you can contact us at bonjour@pepite.deals.

Data we process and purposes

We only process the data needed to run the service. Depending on how you use Pépite, this may include the following:

• Email address: for magic-link sign-in and, where applicable, Google OAuth sign-in, as well as for sending price-watch alerts and recurring-purchase handoffs.
• First name: provided optionally at onboarding, to personalise interactions.
• Country, currency and language: to set the right market, prices and display language.
• Preferences: product categories, favourite retailers and budget, to refine recommendations.
• Product search queries and watched products: to provide price comparison and monitoring.
• History of exchanges with the agent: to ensure conversation continuity and quality.
• Assisted-purchase mandates: ASIN, product label entered by you, Amazon market, quantity, cadence, indicative cap, acceptance record, due dates and the outcome you report, to prepare the recurring handoffs you request.
• Subscription data: Stripe customer identifier, to manage the Pro plan and its payment.

Legal bases

Each processing activity relies on a legal basis set out in the GDPR:

• Performance of the contract: providing the service (AI chat, basket comparator and preparation of requested recurring-purchase handoffs) and managing the Pro subscription.
• Consent: sending price-watch alerts and recurring-purchase handoffs by email, as well as setting audience-measurement cookies. You can withdraw this consent by pausing or revoking the relevant mandate, or at any time for cookies.
• Legitimate interest: service security, fraud prevention and improvement of Pépite.

Sensitive data and merchant payment

Pépite does not ask you for health data and does not use your products for sensitive profiling. A product choice or label may nevertheless indirectly reveal sensitive information: do not enter medical or personal details that are unnecessary to identify the product.

Pépite does not collect your Amazon credentials, merchant delivery address or merchant payment method. Payment for the Pro subscription remains separately processed by Stripe.

Product price history is product data, not personal data: it describes how an item's price changes over time and cannot be used to identify you.

Processors and recipients

To operate the service, we rely on technical providers (processors) acting on our instructions. The recipients of your data are the following:

• Neon: hosting of the PostgreSQL database (European Union).
• OpenAI: generating the AI agent's responses; the text of your messages and queries is sent for this purpose (United States).
• Vercel: site hosting and audience measurement via Vercel Analytics (United States / edge network).
• Stripe: processing payment for the Pro subscription.
• Resend: delivering emails (sign-in, alerts and recurring-purchase handoffs).
• Google: OAuth sign-in, if you choose this sign-in method.
• SerpApi: price search; your product query is sent for this purpose.

Transfers outside the European Union

Some of our providers are located outside the European Union, in particular in the United States. When your data is transferred there, such transfers are governed by appropriate safeguards, in particular the Standard Contractual Clauses (SCCs) adopted by the European Commission.

We never sell your personal data and do not resell it to any third party.

Cookies and audience measurement

We use a limited number of cookies and trackers:

• pp_lang: stores your language.
• pp_market: stores your market and currency.
• Authentication session cookie: keeps you signed in.
• Vercel Analytics: audience measurement, set on the basis of your consent.

Retention period

Your data is kept for as long as necessary for the purposes described above, that is, for the duration of the contractual relationship and your use of the service.

Active and revoked mandates and their logs remain linked to your account so your instructions and handoff history can be restored; they are deleted with the account, subject to applicable legal obligations.

You can request deletion of your account and your data at any time by emailing bonjour@pepite.deals. Some data may be kept longer where the law requires it.

Your rights

Under the GDPR, you have the following rights regarding your data:

• Right of access, rectification and erasure.
• Right to data portability.
• Right to restriction and right to object to processing.
• Right to withdraw your consent at any time, without affecting the lawfulness of prior processing.
• Right to lodge a complaint with the CNIL (the French data protection authority).

Automated decisions

Pépite does not apply any solely automated decision producing legal effects concerning you or significantly affecting you. Recommendations, the DealScore and recurring-purchase handoffs are decision-support tools: Pépite places no order and the final choice always remains yours.

Security

We implement appropriate technical and organisational measures to protect your data against loss, unauthorised access, disclosure or alteration. Access to data is limited to what is necessary to run the service.

Affiliate links and prices

Pépite includes affiliate links (via networks such as Awin, and others) to merchant sites. When a purchase is made through these links, Pépite may earn a commission, at no extra cost to you.

Our recommendations and the DealScore remain based on the genuine merit of an offer (all-in price, price history, reliability) and are not biased by the commission.

Displayed prices come from third-party sources in real time and may change. They are provided for guidance only and should be checked on the merchant's site before any purchase.

Contact and updates

To exercise your rights or for any question about this policy, email us at bonjour@pepite.deals. The site is available at https://pepite.deals.

We may update this privacy policy. The applicable version is the one published on the site.