CRESVAMENT _

Privacy Policy

Last updated: May 11, 2026

This Privacy Policy describes how cresvament ("we", "us") collects, uses, and shares information when you use the CresvaMent marketplace alert service (the "Service"). By using the Service you agree to this policy.

1. Information We Collect

1.1 Account information

When you create an account we collect:

  • Your email address (required for sign-in and notifications).
  • A salted, hashed copy of your password if you register with email and password. We never store passwords in plain text.
  • If you sign in with Google or Discord, the identifier and email address that provider shares with us. We do not receive your password from those providers.
  • Optional profile data you choose to add (e.g. display name).

1.2 Search profile and matching data

To deliver alerts, we store the search profiles you create — keywords, price ranges, categories, filter rules — along with the marketplace listings that match those profiles and any price history we observe for them.

1.3 Notification settings

If you enable notifications, we store the destination you configure: a Discord webhook URL, a phone number for SMS, and/or an opt-in for notification emails. We use these only to deliver the alerts you requested.

1.4 Billing information

Paid plans are handled by Stripe. When you subscribe, Stripe collects and stores your payment details (card number, billing address) on its own systems. We receive only a Stripe customer identifier and subscription status — we do not see or store your card data.

1.5 Technical and usage data

Like most web applications, our servers automatically log information about your interactions with the Service: IP address, browser user-agent, timestamps, and pages requested. We use this for operations, debugging, abuse prevention, and capacity planning.

1.6 Cookies

We use a small number of strictly necessary cookies to keep you signed in (an ASP.NET Core Identity authentication cookie) and to maintain anti-forgery protection on forms. We do not use advertising cookies or cross-site tracking.

2. How We Use Information

We use the information described above to:

  • Provide and operate the Service — run your search profiles, match listings, and deliver notifications.
  • Authenticate you and keep your account secure.
  • Process payments and manage subscriptions through Stripe.
  • Communicate with you about your account, billing, and service updates.
  • Detect and prevent fraud, abuse, and violations of our Terms of Service.
  • Comply with legal obligations.

3. Third-Party Services

CresvaMent depends on third-party services to function. When you use the Service, data is shared with these providers as needed:

  • eBay — We send search queries (your keywords and filter parameters) to eBay's Browse API to retrieve listings. eBay receives the query parameters but does not receive your CresvaMent account identity.
  • Google and Discord (OAuth) — If you sign in with Google or Discord, those providers receive sign-in events and return your basic profile (email, identifier) to us.
  • SendGrid — Delivers transactional and notification emails on our behalf. SendGrid receives the recipient email address and the message contents.
  • Discord webhooks — If you configure a Discord webhook for alerts, we post match content to the URL you supply. Discord receives the message payload.
  • SMS provider — If you enable SMS notifications, our SMS provider receives your phone number and the alert text.
  • Stripe — Processes payments and stores billing information for paid plans.
  • Hosting and infrastructure providers — Our servers, database, and cache are run by third-party infrastructure providers who process data on our behalf under their own privacy commitments.

We do not sell your personal information to advertisers or data brokers.

4. Data Retention

We retain account data for as long as your account is active. If you delete your account, we delete or anonymize your personal data within 30 days, except where we are required to retain it longer for legal, tax, or fraud-prevention reasons (for example, Stripe-related transaction records). Match history and listing data may be retained in aggregated form for service analytics.

5. Security

We use industry-standard measures to protect your data — TLS in transit, encryption at rest where supported by our infrastructure, hashed passwords, and least-privilege access controls. No system is perfectly secure; you use the Service at your own risk.

6. Your Rights

You may at any time:

  • Access and update your account information from your account settings.
  • Export or request a copy of the data we hold about you by emailing the address below.
  • Delete your account, which removes your data subject to the retention rules in Section 4.
  • Opt out of notifications by removing the notification destinations in your settings.

Depending on where you live, you may have additional rights under laws such as the GDPR (European Economic Area, UK) or CCPA/CPRA (California). To exercise those rights, contact us at the address below.

7. Children

CresvaMent is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected such information, we will delete it.

8. International Users

Our service is operated from the United States. If you access the Service from elsewhere, you understand that your data is transferred to and processed in that location.

9. Changes to This Policy

We may update this policy from time to time. We will revise the "Last updated" date at the top of the page, and significant changes will be announced via email or in-app notice where appropriate.

10. Contact

Questions or data requests: support@cresvament.com.