Privacy Policy

1. Information We Collect

We collect the following types of information when you use MarketGap:

• Account Information: Email address, username, and hashed password (or Google OAuth profile data) when you create an account.
• Search Data: Niche search queries you submit, search results returned, and timestamps.
• Usage Data: IP address, browser type, pages visited, and feature usage patterns.
• Payment Data: Transaction IDs and purchase records. Payment checkout and recurring billing are handled by WarriorPlus and its supported payment providers; MarketGap does not store full payment-card details.

2. Cookies and Sessions

We use essential first-party cookies and similar session mechanisms to operate the Service and prevent abuse:

• Session cookies: Used for authentication, account security, and CSRF protection.
• Free-search anti-abuse cookie: Used for a limited period to help enforce the public preview allowance and reduce circumvention through repeated guest sessions.
• Device anti-abuse identifier: A first-party random identifier may be stored for up to one year to prevent repeated one-time Free benefits through multiple accounts on the same browser. We store a one-way hash of this identifier with the benefit claim, not the raw cookie value.

We do not use advertising pixels or third-party behavioral advertising cookies.

3. How We Use Your Information

We use collected information to:

• Provide and improve the niche research service
• Authenticate your identity and maintain account security
• Connect valid purchases to MarketGap Pro access
• Enforce usage limits and prevent abuse (rate limiting, IP tracking)
• Generate aggregated, anonymized analytics to improve the platform
• Communicate important service updates (we do not send marketing emails)

4. Third-Party Services

We integrate with the following third-party services, each governed by their own privacy policies:

• OpenAI: When AI-assisted features are enabled and used, relevant search queries may be sent to OpenAI's API to generate niche analysis. OpenAI processes this data under their privacy policy.
• WarriorPlus: MarketGap Pro checkout and recurring billing are handled through WarriorPlus. Payment details are handled by WarriorPlus and its supported payment providers rather than stored by MarketGap.
• YouTube: MarketGap displays curated YouTube videos. Opening an embedded video connects your browser to YouTube. We may also use the YouTube Data API to refresh the curated video library.
• Google OAuth: If Google sign-in is enabled and you choose to use it, we receive your email and profile name from Google. We do not access other Google account data.

5. Data Security

We implement industry-standard security measures to protect your data:

• Passwords are hashed using PHP's password_hash with PHP's current recommended password algorithm (never stored in plain text)
• CSRF tokens protect all form submissions
• Rate limiting prevents brute-force attacks
• IP-based access control for administrative functions
• HTTPS encryption for all data in transit
• Security headers (X-Content-Type-Options, X-Frame-Options, Referrer-Policy)

6. Your Rights

You have the right to:

• Access: View the personal data we hold about you through your account dashboard.
• Correction: Request correction of inaccurate account information through available account controls or the Support Center.
• Deletion: Request deletion of your account and associated app data through the Support Center. Certain records may be retained where required for legal, fraud-prevention, security, accounting, or payment-dispute purposes.
• Portability: Request a copy of your search history and account data.

7. Data Retention

We retain your data as follows:

• Account data: Retained for the lifetime of your account, deleted upon account deletion request.
• Search history: Retained as needed to provide account history, improve the Service, prevent abuse, and support users, and may be deleted or anonymized when no longer reasonably needed.
• Guest search IP logs: Normally removed after approximately 48 hours.
• Rate limiting records: Normally removed after approximately 24 hours.
• Payment and entitlement records: Retained as reasonably necessary for billing, accounting, fraud prevention, dispute handling, and legal obligations.
• Free-benefit anti-abuse records: Hashed email/device identifiers and related claim records may be retained to prevent repeated use of one-time Free benefits, including after ordinary session or cookie resets.

8. Children's Privacy

The Service is not directed to children. Paid MarketGap memberships are intended for adults or users who have reached the age of legal majority where they live. We do not knowingly collect personal information from children in violation of applicable law. If we learn that such information has been collected improperly, we will take reasonable steps to delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page with a revised "Last updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.

10. Contact

For questions or concerns about this Privacy Policy or your personal data, visit our Support Center.