Privacy Notice

1. Who we are

Tierpeek is operated by Bedri Efe Demirbağ, an individual sole proprietor based in Türkiye. For privacy matters, we act as the data controller of your personal data.

Contact: support@tierpeek.com

2. Data we collect

• Account data: email address, hashed password, account creation date.
• Service data: URLs you choose to monitor, snapshots and AI-generated summaries of those URLs, Slack webhook configuration.
• Usage & telemetry: IP address, browser/device identifiers, page views, action timestamps. Page views on our public site and in the app are measured with Google Analytics 4, which runs on every page.
• Support communications: messages you send us by email.

Payment data (card details, billing address, tax ID) is collected and processed directly by Paddle as Merchant of Record. We do not see or store your card information.

3. How we use it

• Provide the Service (legal basis: contract): create your account, run scheduled checks, generate summaries, deliver notifications.
• Security & fraud prevention (legal basis: legitimate interest).
• Product improvement (legal basis: legitimate interest): aggregated usage analytics collected through Google Analytics 4.
• Customer support (legal basis: contract / legitimate interest).
• Legal obligations (legal basis: legal obligation): tax, accounting, regulatory.

4. Data sharing

We share data with the following categories of recipients:

• Subprocessors:
  • Hosting and content delivery: Vercel
  • Database and authentication: Supabase
  • Scraping of the pricing pages you monitor: Firecrawl
  • AI summarization of pricing changes: Anthropic (Claude API)
  • Email delivery: Resend
  • Product analytics: Google Analytics 4
  • Payments, tax and invoicing: Paddle, see below
  • Notification delivery: Slack, only where you configure a webhook
• Merchant of Record: Paddle handles sale, subscription management, payment processing, tax compliance and invoicing.
• Professional advisers: legal and accounting, as needed.
• Authorities: where required by law.

5. Data retention

We keep your account and service data for as long as your account is active. That includes the URLs you monitor, the snapshots we take of them and the summaries generated from those snapshots. Snapshots are not pruned on a schedule, so your monitoring history stays available to you.

There is no self-serve delete button in the product yet. To have your account and its data deleted, email support@tierpeek.com and we will action the request within 30 days. Records we are legally required to keep, such as invoices and tax records, are retained for the legally mandated period.

6. International transfers

Some subprocessors process data outside Türkiye / the EEA. Where applicable, transfers rely on Standard Contractual Clauses or equivalent safeguards.

7. Your rights

Subject to applicable law, you have the right to: access, rectify, erase, restrict, port your data; object to processing; withdraw consent; and lodge a complaint with your supervisory authority. For GDPR/KVKK requests, email support@tierpeek.com. We will respond within 30 days.

8. Security

We use industry-standard technical and organizational measures: encryption in transit (TLS), encryption at rest, access controls, least-privilege role separation, and audit logs. No system is 100% secure, but we work to protect your data.

9. Cookies

We set essential cookies to keep you signed in and remember session state.

We also load Google Analytics 4 on every page, for every visitor. It sets _ga and _ga_* cookies that can last up to two years, and it records page views, referrer, approximate location derived from your IP address, and basic device and browser information. There is no cookie banner and no consent gate: analytics loads by default. If you do not want it, you can block it with your browser's tracking protection, a content blocker, or Google's opt-out browser add-on.

We do not use advertising or retargeting cookies, and we do not sell your data.

10. Changes

We may update this notice. Material changes will be communicated by email or in-app notice prior to taking effect.