Privacy Policy

1. Who we are

This service is operated by Complive, trading as CompGenies ("we", "us"). Complive is the data controller for the personal data described in this notice — we decide what data is collected and why.

You can reach us about anything in this notice at support@complive.app.

2. What the extension reads

When you run a scan, the extension reads the item title and related product text (and, when you use image scanning, the visible frame of the stream) from the page you are viewing on Whatnot, eBay Live, or TikTok Live. That content is sent to our servers to look up sold comparables.

The extension does not record video or audio, does not read chat messages, does not capture keystrokes, and does not access pages on any other website.

3. Categories of personal data and why we process them

Account data (email address, sign-in codes, plan and trial status) — to create and secure your account and provide the service. Legal basis: performance of our contract with you.

Usage data (scans performed, scan counts per day, cards saved to your collection, comp results, device and browser type, IP address) — to deliver results, enforce plan limits, prevent abuse and improve matching quality. Legal basis: performance of our contract and our legitimate interests in running and securing the service.

Billing data (name, billing address, country, tax identifiers, subscription status, the last four digits of a card) — collected and processed by Paddle as Merchant of Record; we receive only the subscription and invoice records needed to grant access and support you. Legal basis: performance of our contract and compliance with legal obligations.

Identity verification data (selfie, government ID, full name), only if you request referral payouts — to verify identity and meet anti-fraud and financial record-keeping obligations. Legal basis: legal obligation and legitimate interests in fraud prevention.

Support messages — to answer you. Legal basis: legitimate interests.

Marketing emails, where offered — sent on the basis of your consent, which you can withdraw at any time.

4. Who we share data with

Paddle.com Market Ltd, our online reseller and Merchant of Record, which handles checkout, payments, subscription management, tax compliance, invoicing and refunds, and receives your billing data directly.

Service providers acting on our instructions: hosting and database infrastructure, email delivery, and AI model providers used to identify cards from text or images.

Professional advisers (legal, accounting) and authorities where we are required by law to disclose.

We do not sell personal data, and we do not share your scan history with sellers or auction platforms.

5. How long we keep data

Account data: for as long as your account exists, then deleted within 30 days of account closure.

Scan and comp history, and collection records: up to 24 months, or until you delete them.

Identity verification documents: 12 months after the payout they support, then deleted, unless a longer period is required by law.

Billing and tax records: retained by Paddle and by us for 7 years, as required by tax law.

Server and security logs: up to 90 days.

When data is no longer needed for these purposes it is deleted or anonymised.

6. Your rights

You may request access to your data, correction, deletion, restriction of processing, portability, or object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it at any time.

Email support@complive.app and we will respond within one month. If you are in the UK or EEA you also have the right to complain to your local data protection authority.

Uninstalling the extension removes all locally stored extension data immediately.

7. Cookies and local storage

The website uses essential cookies only — they keep you signed in and secure the session. We do not use advertising cookies. The extension stores your plan tier, preferences and daily scan count in Chrome's local extension storage on your device.

You can clear cookies at any time in your browser settings; signing in again will recreate the essential ones.

8. Security and international transfers

We use encryption in transit, access controls, and least-privilege database rules to protect your data. Identity documents are stored in private storage that is not publicly reachable.

Our infrastructure and service providers may process data in the United States and other countries. Where data leaves the UK or EEA, transfers rely on Standard Contractual Clauses or an adequacy decision.

9. Changes

We will update this page when our practices change and adjust the effective date below. Material changes will be announced in the extension and by email.