Dupe Detective — a squirrel detective holding a magnifying glass, encircled by the words Dupe Detective

Legal

Privacy Notice

Last updated 30 July 2026

1. Who we are

Dupe Detective (dupedetective.online) is operated by SQRL Investments LLC, trading as Dupe Detective. We are the data controller for the personal data described here — we decide what is collected and why. Contact: privacy@dupedetective.online.

2. What we collect, why, and on what basis

Account data — email address, password hash, and (for Google sign-in) your Google account identifier and name. Used to create and secure your account. Basis: performance of our contract with you.

Submitted content — product photos you upload and marketplace links you paste, plus the text extracted from them. Used to generate your similarity results and to build our comparison index. Basis: contract performance and our legitimate interest in operating and improving the index. Please do not upload photos of identifiable people.

Usage and check history — the checks you run, their scores and timestamps, and your selected categories. Used to show your history and enforce monthly check limits. Basis: contract performance.

Guest identifier — a random ID stored in your browser for people who use the free checks without an account. Used only to count free checks. Basis: legitimate interest in preventing abuse of the free tier.

Technical and security data — IP address, device and browser information, and error logs. Used for security, fraud prevention and diagnosing faults. Basis: legitimate interest in keeping the Service safe and working.

Support messages — what you send us and our replies. Used to answer you. Basis: legitimate interest in supporting our users.

Marketing emails — only if you opt in. Basis: consent, withdrawable at any time.

Payment card details are collected and processed by Paddle, not by us. We never see or store your full card number.

3. Who we share data with

  • Merchant of Record — Paddle, for the sale of memberships, subscription management, payments, invoicing and tax compliance.
  • Service providers (subprocessors) — our hosting, database, authentication and file storage providers, and the AI vision provider that analyses submitted product images to produce a similarity score.
  • Affiliate networks — when you click a retailer link, the retailer or its affiliate network receives standard referral information. We do not send them your account details.
  • Professional advisers — legal and accounting, where necessary.
  • Authorities — where required by law or to protect our legal rights.

We do not sell your personal data.

4. International transfers

We are based in the United States and our providers may process data there or elsewhere. Where data is transferred from the UK or EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or an applicable adequacy decision.

5. How long we keep it

Account data and check history are kept while your account is active and for up to 12 months after you close it, then deleted or anonymised. Guest check records are kept for 12 months. Submitted images are kept for 24 months so results stay reproducible. Security logs are kept for 12 months. Records needed for tax and accounting are kept as long as the law requires. You can ask us to delete your data sooner.

6. Your rights

Depending on where you live, you may have the right to access your data, correct it, delete it, restrict or object to how we use it, receive a portable copy, withdraw consent, and — for US state privacy laws — opt out of sale or sharing (note that we do not sell data). Email privacy@dupedetective.online and we will respond within one month. We will not discriminate against you for exercising these rights. UK and EEA residents may also complain to their local supervisory authority.

7. Security

We apply appropriate technical and organisational measures, including encryption in transit, hashed passwords, row-level access controls on our database so users can only reach their own records, and leaked-password screening at sign-up. No system is perfectly secure, but we work to protect your data and will notify you and the relevant authorities of a qualifying breach as the law requires.

8. Cookies and local storage

We use only essential cookies and browser storage: to keep you signed in, to hold your guest check counter, and to let the checkout work. We do not run advertising or cross-site tracking cookies. You can clear these at any time in your browser settings, though doing so will sign you out and reset your guest check count.

9. Children

The Service is not intended for children under 13, and we do not knowingly collect their data. If you believe a child has given us data, contact us and we will remove it.

10. Changes

We may update this notice and will change the date at the top. Material changes will be highlighted in the app or by email.