Privacy Policy

1. Who we are

PounceDomains (“we,” “us,” or “our”) provides an AI-powered tool for monitoring and bidding on Namecheap Marketplace domain auctions. This policy describes how we handle personal information when you visit our site or use the Service.

2. Information we collect

Information you provide

• Account information — your email address, and (if you sign in with Google) your name and profile photo.
• Connected credentials — your Namecheap Market API key and webhook secret, your notification email, and your bidding preferences. API keys and secrets are encrypted at rest using AES-256-GCM and are never shown again after you save them.
• Configuration and content — the snipe configs, filters, AI strategies, watchlists, and any free-text criteria you enter.
• Communications — messages you send us (e.g. support requests).

Information collected automatically

• Usage and activity — matches, scans, bids, and account activity generated as you use the Service.
• Technical data — IP address, browser and device information, and log data.
• Cookies and analytics — see “Cookies and analytics” below.

Information from third parties

• Google — if you sign in with Google, we receive basic profile information (name, email, photo) per your Google permissions.
• Namecheap — using your API key and webhooks, we receive public auction data and the status of your bids and watched auctions.

3. How we use information

• provide, operate, secure, and improve the Service;
• connect to your Namecheap account to scan auctions, score domains, and place the bids you authorize;
• send you match alerts, bid confirmations, and account emails;
• send product and lifecycle emails (onboarding, trial reminders, weekly summaries) — which you can opt out of in Settings;
• process payments and manage subscriptions;
• monitor usage, prevent abuse, enforce limits and our Terms, and comply with legal obligations.

We do not sell your personal information.

4. AI processing

To score domains, we send candidate domain names and public auction signals (such as length, price, and keyword metrics) to our AI model provider. We do not send your Namecheap API key, payment details, or other sensitive credentials to the AI provider.

5. Service providers we share with

We share information with vetted service providers (“sub-processors”) who process it on our behalf to run the Service:

We may also disclose information to comply with law, enforce our Terms, protect rights and safety, or in connection with a merger, acquisition, or sale of assets.

6. Cookies and analytics

We use essential cookies to keep you signed in and to operate the Service. We use Google Analytics to understand how visitors use our site (e.g. pages viewed, sign-ups). These tools may set cookies and collect usage data. You can control cookies through your browser settings.

7. Data retention

We retain your account information for as long as your account is active and as needed to provide the Service. Activity logs and match history are kept for a limited period and then trimmed. When you delete your account, we delete or de-identify your personal information within a reasonable time, except where we must retain it to comply with legal obligations or resolve disputes.

8. How we protect your information

We use industry-standard safeguards. Third-party API keys and secrets are encrypted at rest with AES-256-GCM, and your data is isolated to your account using database row-level security. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security.

9. Your rights and choices

• Access, correction, deletion, and export — depending on your location (e.g. under the GDPR or CCPA/CPRA), you may request access to, correction of, deletion of, or a copy of your personal information.
• Email preferences — turn off product/marketing emails in Settings; we will still send essential account and transactional emails.
• Disconnect — remove your Namecheap API key at any time to stop scanning and bidding.
• Do Not Sell/Share — we do not sell or share personal information for cross-context behavioral advertising.

To exercise a right, email support@pouncedomains.com. We may need to verify your identity before acting on a request.

10. International transfers

We and our providers may process and store information in the United States and other countries. Where required, we rely on appropriate safeguards for cross-border transfers.

11. Children’s privacy

The Service is not directed to children under 18, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will revise the “Last updated” date and, for material changes, provide additional notice. Your continued use of the Service after changes take effect constitutes acceptance.

13. Contact

Questions or requests about your privacy? Email support@pouncedomains.com.