PRIVACY

Application Privacy Policy

How we process your personal data when you create an account and use the NicheObserver web application.

Effective and last updated: September 15, 2026

1. Who is responsible

This policy covers the NicheObserver web application and its account sign-in. The browser extension has a separate privacy policy.

2. Information from Google sign-in

When you choose to continue with Google, we request the openid, email and profile permissions. Google provides your unique Google account identifier, name, email address, email verification status and profile picture URL.

We use this information to create or find your NicheObserver account, verify your email where Google confirms it, sign you in and display your name and picture. We store the account identifier, name, email address, picture URL and account verification information with your account. The Google access token is used during sign-in to obtain your basic profile; the application does not retain it for ongoing access to your Google account.

Google sign-in does not grant access to your Gmail messages, Drive files, calendar, contacts or private YouTube account data. We do not sell Google account data, use it for advertising profiles or use it to train general-purpose AI models. Google processes authentication under its privacy policy.

3. Other information you provide

We process your account details, password hash if you choose password sign-in, saved searches, projects and other information you choose to save or submit through the application. Account records may also include your plan, usage, API-key metadata and support correspondence. We use this information to provide the features you request and manage access to your account.

4. Sessions and service operation

Cookies and session records keep you signed in, protect requests and remember preferences such as language and sign-in method. Requests include ordinary network information, including IP addresses, browser details, requested URLs and timestamps. Delivery systems and application logs may record this information to operate the service, prevent abuse and investigate failures.

The public application-information and legal pages themselves contain no analytics scripts or advertising trackers. Authentication, security and preference cookies used by the application can be cleared in your browser; clearing them may sign you out.

5. Purposes and legal bases

We process account data and the information you save to provide the requested service and perform our agreement with you. Google sign-in is optional and starts when you choose it. We process limited operational data for our legitimate interests in service security, abuse prevention and reliability. Where processing requires consent under applicable law, you may withdraw that consent.

We use your email address for account verification, password recovery, security notices and support. Product updates about NicheObserver are enabled by default for account holders where applicable law permits communications about similar services within an existing customer relationship. Our legitimate interest is to inform users about the NicheObserver service they use. The registration screen and account settings let you disable these messages, and every product-update email includes an unsubscribe link. We do not treat this default as an explicit consent.

6. Access, providers and international processing

Account data is accessible to authorized personnel and service providers where needed to operate the application, respond to support requests, protect the service or comply with law. Providers include Google for sign-in, Cloudflare for delivery and security, Hetzner for hosting, and the providers used to deliver account emails. Your name and email may be passed to an email provider when an account message is sent.

Overdrive Assets is based in Mauritius. Hosting infrastructure is in Europe and some providers operate globally, so information may be processed outside your country. Processing is subject to the applicable provider agreements and data-protection requirements.

7. Retention and deletion

Account and saved research data are retained while needed to provide your account and requested features. You can request account closure and deletion by emailing [email protected] from the account address. We may ask you to verify ownership before acting.

After closure, data is deleted or anonymized unless a limited record is needed for a legal obligation, security investigation or dispute. Operational logs and backups are retained only for their operational, recovery or legal purposes and expire under the relevant retention cycle.

8. Your choices and rights

You can review and remove NicheObserver's Google authorization in your Google account connections. Removing it stops that authorization but does not itself delete your NicheObserver account or research. Contact us to request deletion, or use the application's password sign-in where configured.

You can enable or disable NicheObserver product updates in your account settings and use the unsubscribe link in every such email. A previous unsubscribe, bounce or complaint is not silently reset by an automatic account synchronization.

Subject to applicable law, you may request access, correction, deletion, restriction or portability of your personal data, object to certain processing or withdraw consent. Send requests to [email protected]. You may also contact the Mauritius Data Protection Office or the data-protection authority in your country.

9. Changes and contact

We will update this policy and its date when our practices change. Material changes to Google data access or use will be disclosed before the new processing begins, with fresh consent where required. Questions can be sent to [email protected].