Privacy Policy

1. Information We Collect

Personal Information You Provide

When you create an account or use our Service, you may provide us with:

• Account Information: Email address, name, and password when you register
• Profile Information: Preferences, essential oil collection data, and favorites
• Payment Information: Billing details processed securely through Stripe (we do not store your full credit card number)
• Communications: Feedback, support requests, and messages you send us

Information Collected Automatically

When you access our Service, we automatically collect:

• Usage Data: Pages visited, features used, blends created, and interaction patterns
• Device Information: Browser type, operating system, device identifiers
• Log Data: IP address, access times, and referring URLs
• Cookies and Tracking: We use cookies and similar technologies for analytics and functionality

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Service
• Process transactions and manage your subscription
• Personalize your experience and provide tailored blend recommendations
• Send you updates, newsletters, and marketing communications (with your consent)
• Respond to your comments, questions, and support requests
• Monitor and analyze usage patterns to improve our Service
• Detect, prevent, and address technical issues and security threats
• Comply with legal obligations

3. AI Features and Data Processing

Our Blend Advisor AI feature processes your queries to provide personalized aromatherapy recommendations. When you use the AI Blend Advisor:

• Your questions and our responses may be stored to improve the Service
• Your essential oil collection data may be used to personalize recommendations
• AI conversations are processed through secure third-party AI providers (Anthropic)
• We do not use your personal health information for AI training without explicit consent

4. Information Sharing and Disclosure

We do not sell your personal information. We may share your information with:

• Service Providers: Third parties that help us operate our Service (e.g., Supabase for database hosting, Stripe for payments, Vercel for hosting, Resend for emails)
• Analytics Partners: Google Analytics and Vercel Analytics to understand usage patterns
• Affiliate Partners: When you click on affiliate links, our partners may collect information about your visit to their sites. See our Affiliate Disclosure for details
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets

4a. Affiliate Links and Product Recommendations

Scentsay may include affiliate links to products from third-party retailers:

• We may track when you click on affiliate links to measure the effectiveness of our recommendations
• This click data is anonymized and used only for analytics purposes
• When you visit partner websites through our affiliate links, their privacy policies apply
• We do not receive your personal purchase information from affiliate partners
• We are a participant in the Amazon Services LLC Associates Program and other affiliate programs

For complete details about our affiliate relationships, please see our Affiliate Disclosure.

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal information. This includes encryption of data in transit (HTTPS/TLS), secure password hashing, and regular security assessments. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our Service. If you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal or legitimate business purposes.

7. Your Rights and Choices

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal information
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal information
• Portability: Request your data in a portable format
• Opt-out: Unsubscribe from marketing emails at any time
• Cookies: Manage cookie preferences through your browser settings

To exercise these rights, please contact us at privacy@scentsay.com

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

• Essential Cookies: Required for the Service to function (authentication, security)
• Analytics Cookies: Help us understand how you use our Service (Google Analytics, Vercel Analytics)
• Advertising Cookies: Used for targeted advertising on platforms like Meta/Facebook (if you consent)

You can control cookies through your browser settings. Note that disabling certain cookies may affect the functionality of our Service.

9. Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately at privacy@scentsay.com

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. We take appropriate safeguards to ensure your information remains protected in accordance with this Privacy Policy.

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect and how it is used
• Right to delete your personal information
• Right to opt-out of the sale of personal information (we do not sell your data)
• Right to non-discrimination for exercising your privacy rights

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically for any changes.

13. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us: