Privacy policy

Last updated: November 2026

bestprice ("we") is an independent service for independent grocery stores. It is not affiliated with any distributor or with the operator of any ordering platform. This policy explains what we collect, why, and what you can do about it. Contact: [email protected].

1. Account data

When you sign up we store your email address, a hash of your password, your store name, your language and the time of signup. We use these to run your account and to send you service messages such as password resets. We do not send marketing email without your consent.

2. Billing

Payments are handled by our payment processor. Your card details are entered on the processor's pages and never reach our servers. We store the processor's customer and subscription identifiers, your plan and the subscription status so we can show you what you are entitled to. Invoices and receipts are available in the billing portal.

3. Data collected by the extension

The extension works inside the distributor ordering pages that you open with your own login. It only reads pages you yourself visit and, if you ask it to, your own order history, at human pace. It never injects code into those pages and never stores your cabinet password or access key on our servers.

With your consent it sends us:

• the public catalog items shown on the pages you open (item identifier, SKU, title, catalog price, stock);
• the price your store is shown for those items, so we can compute your price level and history;
• your order history: order number, date, status, totals, and for each line the item, quantity, list price, paid price and discount codes.

Before anything is sent, the extension removes every field that is not on a published whitelist. Names, phone numbers, email addresses, delivery addresses, sales representatives, notes and payment details are dropped in your browser. Our server rejects any upload containing a field outside the whitelist; it does not silently keep it.

Your identity at a distributor is stored as a salted cryptographic hash of your customer number. The raw customer number is not stored.

4. How we use observations

• To show you your own prices, history, estimates and savings.
• To compute benchmarks and demand signals across member stores. These are published only once enough stores contribute and only as ranges and quality labels. No store can see another store's prices, and we never show how many stores contributed.
• To share anonymized aggregates and pseudonymized price and order observations with industry data partners through a private feed. The feed contains no account data, no personal data and no store identity beyond the salted hash described above. The salt is never shared.

5. Technical data

Our servers keep standard access and error logs (IP address, user agent, request path, time) for security and debugging, retained for up to 30 days. The site uses a session cookie, a CSRF cookie and a language cookie. We do not use advertising trackers.

6. Processors

We use a payment processor, a hosting provider, a content delivery network and an error tracking service. Each receives only the data needed for its function and is bound by a data processing agreement.

7. Retention and deletion

Account data is kept while your account exists. Observations contribute to benchmarks and are kept in pseudonymized form. If you ask us to delete your account we delete the account, the tokens and the links to distributors; observations already folded into aggregates cannot be attributed to you after that.

8. Your rights

You can download a copy of your data and delete your account at any time from the account page. You may also ask for a copy, a correction, or deletion by writing to [email protected]. You can withdraw consent for order import in the extension at any time; future orders will not be sent.

9. Changes

We will post changes to this policy on this page and, for material changes, notify you by email before they take effect.