Privacy Policy

1. Who we are

Munavo is operated by HAZ Motorsport (United Kingdom). Questions about this policy or your data: hello@munavo.co.uk.

2. Without an account

The calculator runs in your browser. Your product costs, prices and settings are stored in your browser's local storage and are never sent to us. We measure product usage with cookieless analytics (section 5) that cannot identify you.

3. With an account

We store, in our database (hosted with Supabase in the EU):

• your email address and, if you provide one, your name;
• your saved product calculations — the names, prices, costs and settings you enter, and the eBay item numbers of listings you import;
• your business settings (for example platform, VAT registration status, target margin and courier prices);
• if you subscribe to Pro: your subscription tier and status, and identifiers linking your account to our payment processor, Stripe (a customer ID and subscription ID).

Your card details never touch Munavo. Payment is handled on Stripe's own secure checkout; Stripe holds your card and billing details under its privacy policy. Passwords are handled by Supabase Auth and stored only as secure hashes — we never see them.

We maintain this list deliberately: we do not collect addresses, advertising identifiers, browsing profiles or marketing lists, and we do not sell or share your data with third parties for their own purposes.

4. Why we process it (UK GDPR lawful bases)

Account and billing data is processed to provide the service you signed up for — signing you in, syncing your saved products and settings across devices, and managing your subscription (performance of a contract). Cookieless product analytics is processed under our legitimate interest in understanding and improving the product; it is designed so it cannot identify you. We do not use your data for marketing.

5. Analytics

We use PostHog (EU-hosted) in cookieless mode: no cookies, no stored identifiers, no advertising IDs and no cross-site tracking. We record the pages viewed, and product actions (for example “calculation completed” or “import started”) with a fixed, reviewed list of properties such as platform and country. Product names, SKUs, prices, costs, profits and email addresses are excluded by design, and we do not record your screen or the contents of the page.

6. Our processors

Supabase (database & authentication), Stripe (payments), PostHog (analytics, EU region), Resend (transactional email — account confirmation and password resets from hello@munavo.co.uk; no marketing email) and Vercel (hosting, which keeps transient server request logs). Each processes data on our behalf under its data-processing terms, with standard contractual safeguards where data leaves the UK/EU.

7. How long we keep it — export and deletion

For as long as your account exists. You can delete individual saved products at any time in the app, and from your account page you can download a copy of your data or delete your account — deletion cancels any active subscription and removes your account, settings and saved calculations. Stripe retains transaction records after deletion where financial regulations require it. You can also email hello@munavo.co.uk.

8. Cookies and local storage

We use no advertising or analytics cookies. The app uses your browser's local storage for your calculator inputs, settings, theme and disclaimer acknowledgement (and briefly preserves an in-progress calculation while you confirm your email), and Supabase sets the tokens needed to keep you signed in. Clearing your browser storage removes the local copies.

9. Your rights

Under UK GDPR you can ask for a copy of your data, ask us to correct or delete it, object to or restrict its processing, and complain to the Information Commissioner's Office (ico.org.uk). Use the account page or email hello@munavo.co.uk to exercise any of these.

10. Changes

If this policy materially changes, we'll bump the version number and date at the top of this page.