AmountSync Privacy Policy
Last updated October 15, 2026
We use the information in AmountSync only to provide the service; we do not sell it, use it for advertising, or share it beyond the service providers listed here. This policy is issued by Creative Design Software, LLC (“CDS, LLC”), a Delaware limited liability company that owns and operates AmountSync and amountsync.com (“we”, “us”). It applies from the date shown above.
1. What this covers
This policy covers the amountsync.com website, the AmountSync web application, the AmountSync browser extension, the AmountSync API and our Salesforce integration (together, the “Service”).
- Customer Data. The products a customer tracks, the product pages and stores it chooses, and the prices collected for them belong to that customer. We process them to provide the Service, as set out in our Terms of Service.
- Account and service records. For the people who use the Service — their sign-in, profile and security records — we decide how the information is used, and this policy describes how.
2. Information we collect
We collect what users give us and what the Service records as it runs. We do not buy data about people.
| Category | Examples | Source |
|---|---|---|
| Account information | Name, email address, profile photo (optional), passkey public keys, a password hash (never the password itself) | The user, or the administrator who invites them |
| Customer Data | Products tracked (names, brands, sizes), retailer product page addresses, chosen stores | The customer's users |
| Collected price data | The price, page title and address shown on a retailer's public product page, the store it applies to, the seller when it is a marketplace seller, and when it was checked | Public retailer web pages, read by the Service |
| Integration credentials | API token fingerprints (a one-way hash, never the token itself); for Salesforce, an encrypted refresh token and the connected org and username | Created when a user sets up an integration |
| Usage and security records | Sign-in times and outcomes, source IP address, browser user agent, web server request logs | Recorded by the Service and our hosting providers |
| Messages | Requests sent through our website form (name, email, company, message) and emails people send us; the service emails we send (invitations, data-health alerts) | The sender; the Service |
The AmountSync browser extension
The extension is optional. When a signed-in user runs it, or on a schedule the user turns on, it opens the retailer product pages that user's account tracks in a separate minimized browser window, reads the price and the page title, and sends them to the user's AmountSync account. It may set a retailer's store cookie so the page shows the store the user chose. It does not read other tabs or pages, browsing history, bookmarks, passwords or form contents. It keeps its sign-in token and settings in the browser's extension storage until the user signs out or removes it, and holds unsent price readings for up to 7 days if AmountSync cannot be reached.
3. How we use it
- To provide the Service: collect and show prices, run analyses, send the alerts a user has, and answer API and integration requests.
- To keep accounts secure: authenticate users, detect abuse, and investigate problems.
- To check data quality: we diagnose pages that stop returning a price, including by fetching the retailer page again.
- To communicate: answering requests sent through our website, invitations, security notices and data-health emails. We do not send marketing email without agreement.
- To keep our website form free of spam: we check timing and submission rates and briefly keep the sender's IP address in memory for that purpose only.
When a user asks AmountSync to find a product's pages at retailers, the product description and the titles of candidate retailer listings are sent to an AI model provider to pick the matching listing. No personal information is included, and the provider does not use it to train its models.
4. Cookies
AmountSync uses only the cookies it needs to work, and no analytics, advertising or third-party tracking cookies.
| Cookie | Purpose | Lasts |
|---|---|---|
| Session | Keeps a signed-in user signed in | Until sign-out or the session expires |
| Passkey challenge | Protects a passkey sign-in in progress | Minutes |
| Salesforce connection | Protects the Salesforce connection step against forgery | Minutes |
The web app also stores a few display preferences in the browser (for example, a chosen chart view).
5. Who we share it with
We share information only with the service providers that run AmountSync for us, under contracts that limit them to that purpose:
| Provider | What they do | What they receive |
|---|---|---|
| Supabase | Database and sign-in (United States) | All Service data |
| Amazon Web Services | Application servers (United States) | All Service data in transit and in logs |
| Cloudflare | Domain name service and network protection | Web requests, including IP addresses |
| Postmark | Sending service email | Recipient email address and message content |
| Bright Data | Fetching public retailer pages on our behalf | Retailer page addresses only — no personal information |
| Anthropic | AI matching of retailer listings | Product descriptions and listing titles only — no personal information |
| Salesforce | Only if a customer connects it | The price records the customer chooses to sync, under the customer's own Salesforce agreement |
We may also disclose information if the law requires it, to protect the Service or its users, or as part of a merger or sale of the business, in which case this policy continues to apply to it.
6. Storage, retention and security
Data is stored in the United States. We keep it only as long as our Data Retention Policysets out, and delete a customer's data within 60 days after its account closes. Traffic is encrypted in transit; Salesforce tokens are encrypted at rest; API tokens are stored only as one-way hashes; access to production systems is limited to our staff over a private network.
7. Your rights and choices
- You can update your name, photo, password and passkeys in the Service, and revoke API tokens and the Salesforce connection at any time.
- You can ask us for a copy of your personal information, to correct it, or to delete it. See Account Deletion.
- California residents. Under the California Consumer Privacy Act you may request to know, correct and delete the personal information we hold about you, and you will not be treated differently for doing so. We do not sell or share personal information for cross-context behavioral advertising.
- If another law gives you further rights, contact us and we will honor them as that law requires.
8. Children, changes and contact
The Service is for businesses and is not directed to anyone under 16. We do not knowingly collect information from children; if we learn we have, we delete it. We will post any change to this policy here and update the date above; if a change is significant, we will tell account holders by email before it takes effect.
Creative Design Software, LLC, operator of AmountSync
9169 W State St #1372, Boise, ID 83714
Phone: (858) 777-3014
Email: [email protected]